070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) io_setup(0x25, &(0x7f0000000000)=0x0) r3 = memfd_create(&(0x7f0000000100)='/dev/sg#\x00', 0x2) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x287, r1, &(0x7f0000000080)="fd0504893dacc02a3f9ba7c1ec9fa0b7b75a0372b12d38eefea2db6c04236eb0683cb3100b367d14042189fa3bf3f36bb7bb7bd2d44d541caf28b62524a149fd261d5363594fb84e97fb125984f0b762550b5399d215ee513b3325", 0x5b, 0x9, 0x0, 0x0, r3}, &(0x7f0000000180)) ioctl(r1, 0x5387, &(0x7f00000000c0)) 05:58:08 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, &(0x7f0000000000)) write$binfmt_elf32(r1, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) ftruncate(r1, 0x208200) r2 = open(&(0x7f0000000040)='./bus\x00', 0x100000004000, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) fadvise64(r1, 0x9000, 0x0, 0x4) 05:58:08 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x2) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") keyctl$join(0x1, &(0x7f0000000140)) 05:58:08 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000040)='f2fd\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)) 05:58:08 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x8000, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000080)={0x1b51, 0x5, 0x80000001, 0x0, 0x3, 0x3ff, 0x4, 0x100000000, 0x20, 0x8, 0x16, 0x2b, 0x0, 0x6, 0x4, 0x8, 0x0, 0x80000001, 0x4}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='maps\x00') ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x3, 0xffffffffffffffff, 0x2, 0xeb9, 0x7, 0xffffffffffff5613, 0x9, 0x9, 0x9, 0x1000, 0x1000, 0x6}) sendfile(r0, r2, &(0x7f0000000000), 0xfffffffffffff800) 05:58:08 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(aegis128)\x00'}, 0x22d) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15cdf0311cfc093a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cuse\x00', 0x100, 0x0) getsockopt$inet_dccp_buf(r2, 0x21, 0xf, &(0x7f0000000400)=""/33, &(0x7f0000000440)=0x21) ioctl$KDMKTONE(r2, 0x4b30, 0x7fff) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) io_setup(0x83, &(0x7f00000000c0)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000340), 0x87}]) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='\x00', 0xffffffffffffff9c}, 0x10) r5 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x2, 0x40) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f00000003c0)={0x2, &(0x7f0000000380)=[{0x8, 0x8}, {0xffffffff, 0x8}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r4) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f0000000480)={r4, 0x0, 0x7fffffff, 0x9, 0x1000}) getsockopt$bt_hci(r5, 0x0, 0x0, &(0x7f0000000280)=""/147, &(0x7f0000000340)=0x93) 05:58:08 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x16, &(0x7f0000000100)={0x0, @empty, 0x0, 0x0, 'wlc\x00'}, 0x2c) 05:58:08 executing program 7: r0 = socket$inet6(0xa, 0x1000000000006, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) getgid() mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = inotify_add_watch(r1, &(0x7f000003a000)='./control\x00', 0x80000d50) inotify_rm_watch(r1, r3) 05:58:08 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x401, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @remote, 0x5}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000340)='7', 0x1}], 0x1, &(0x7f0000000700)}, 0x40) 05:58:08 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000240)={0x0, 0x7530}, 0x10) connect$vsock_stream(r1, &(0x7f00000001c0)={0x28, 0x0, 0x2711, @reserved}, 0x10) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_read_part_table(0xec000001, 0x145, &(0x7f0000000200)=[{&(0x7f0000000000)="000000000e00000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000020000000000030d00f0043100c90000006400000000043200632020002d090000d306000055aa", 0x11, 0x1a0}]) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x101040, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x4}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000140)={r3, 0x2}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000002c0)=0x5, 0x4) 05:58:08 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x202000000802, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000000c0)={@empty, r1}, 0x14) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r2, &(0x7f0000001000), 0x1000) read$FUSE(r2, &(0x7f0000005000), 0xe83) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r2, &(0x7f0000001000), 0x1000) lstat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)) r3 = open$dir(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000001000), 0x18) write$FUSE_OPEN(r2, &(0x7f0000000640)={0x20, 0x0, 0x3}, 0x20) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r3, 0x0, &(0x7f0000000b40)) 05:58:08 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x102d}, 0x2c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x0, 0x0) socketpair$inet(0x2, 0x2, 0x1, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000003c0)={0x0, 0x9b, "bcd213bab09337eececbbae85a8ddbb0b747bd79535a66dee8662416d7a0e2236cda4bc0f6da1a8cd804fb5f0de878003ab562be6a66936873c3453477b8e80c84ef5633bca313f6188e720fadb6e12c75ed848b3f05b476a9e2be7f820597cf0b946e550dd47902b5e9a7290d65d9897ad1057409d4c5efdd08a136526d67a54f6b662e0269a1dcd5f83e22531f0213801873c774f7d437868463"}, &(0x7f0000000480)=0xa3) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000004c0)=@assoc_value={r2, 0x4}, 0x8) getsockopt$netlink(r1, 0x10e, 0x7, &(0x7f0000000140)=""/202, &(0x7f0000000240)=0xca) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xa5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="89180000000000000000000200000000006110040078000000000000000000000095000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000380)={0x7f, 0x1, 0x2, 0x7fff, 0x7}, 0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000280), &(0x7f00000002c0)=0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r3, 0x50, &(0x7f0000000040)}, 0x10) 05:58:08 executing program 3: capset(&(0x7f000043fff8)={0x19980330}, &(0x7f0000092000)) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000004503000000feffff7a0af0fff8ffffff79a4f0ff00000020b7060000000000012d6405000000000065040400010000000704000001000000b7050000000000006a0a00fe00000000851000001a000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 05:58:08 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000040)='f2fi\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)) 05:58:08 executing program 6: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) quotactl(0x2080000201, &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000040)) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x350c, 0x4) 05:58:08 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4000) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f00000000c0)={0x81, 0x9, 0x4000000000000}) readv(r0, &(0x7f0000001400)=[{&(0x7f0000000000)=""/46, 0x2e}], 0x1) 05:58:08 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000980)="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", 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x200000, 0x0) fadvise64(r0, 0x0, 0xfffffffffffffff8, 0x3) r1 = open(&(0x7f00000000c0)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000040), 0x12) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f93746174000000000000000000000000000000", 0x2761, 0x0) write$tun(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000aaaaaaaaaaaaaaaaaaaa17d0a967bc294fbafd26d64a6eafaaae0011007e5c"], 0xfffffdef) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000140), &(0x7f00000001c0)=0x4) ioctl$TIOCEXCL(r1, 0x540c) setxattr(&(0x7f0000000240)='./file0//ile0\x00', &(0x7f0000000280)=@random={'user.', '/\'\x00'}, &(0x7f00000002c0)="2f67726f9374617400", 0x9, 0x2) 05:58:08 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e13000)={0x2, 0x4e20, @multicast1}, 0x10) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r1, 0x50, &(0x7f00000000c0)}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000000140)="b7", 0x1, 0x18040, 0x0, 0x0) close(r0) 05:58:08 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0xffffffffffffffff) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_open_procfs(0x0, &(0x7f0000000300)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") fsetxattr(r0, &(0x7f0000000040)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0x1, 0x0) 05:58:08 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x200000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {&(0x7f00000000c0), r1, 0x5}}, 0x18) r2 = memfd_create(&(0x7f0000000040)='#em1#+\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) 05:58:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x11}]}}}]}, 0x3c}}, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x80, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) 05:58:08 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000040)='f2f0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)) 05:58:08 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) fchmod(r0, 0x40000040) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000230000000002800000850000000000fc0095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x0, 0x1, 0x0, r0}, @call], &(0x7f0000000140)='GPL\x00', 0x41, 0xffc4, &(0x7f00000004c0)=""/167}, 0x48) [ 198.858802] netlink: 'syz-executor5': attribute type 17 has an invalid length. 05:58:08 executing program 5: r0 = socket$inet6(0xa, 0x9, 0x7fff) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f0000000080)=0x8) perf_event_open(&(0x7f0000940000)={0x1, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x800, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xe1d, 0x100000001, 0x4, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xb5ab, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x2801, 0x0, 0x0, 0x7, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffff9c, 0x0) 05:58:08 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000040)='f2fl\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)) 05:58:08 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f00000000c0)=0x1, 0x4) write$P9_RWRITE(r0, &(0x7f0000000040)={0xf35428}, 0xfd40) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 05:58:09 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000780)=""/199, 0xc7, 0x0, &(0x7f0000000500)={0x2, 0x0, @remote}, 0x10) recvmmsg(r1, &(0x7f00000005c0)=[{{&(0x7f0000000480)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000000900)=""/236, 0xec}], 0x2, &(0x7f0000000300)=""/109, 0x6d}}, {{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000200)=""/40, 0x28}}], 0x2, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000100)=[{{&(0x7f0000000180)=@hci, 0x80, &(0x7f0000000b00)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/208, 0xd0}, {&(0x7f0000000ec0)=""/219, 0xdb}], 0x3, &(0x7f0000000000)=""/41, 0x29}}, {{&(0x7f0000002600)=@in={0x0, 0x0, @remote}, 0x80, &(0x7f0000005d40), 0x0, &(0x7f0000000380)=""/205, 0xcd}}], 0x2, 0x0, &(0x7f00000000c0)={0x77359400}) clock_gettime(0x0, &(0x7f0000000a00)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000005640)=[{{&(0x7f0000000540)=@hci, 0x80, &(0x7f0000000280)=[{&(0x7f00000010c0)=""/238, 0xee}, {&(0x7f00000011c0)=""/115, 0xffffffffffffffbd}, {&(0x7f0000001240)=""/174, 0xae}, {&(0x7f0000003680)=""/4096, 0x1000}, {&(0x7f0000002440)=""/249, 0xf9}], 0x5, &(0x7f0000002540)=""/38, 0x26}}, {{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000004b80)=""/13, 0xd}}, {{0x0, 0xffffffffffffff06, &(0x7f0000000540), 0x0, &(0x7f0000005140)=""/118, 0x76}}, {{&(0x7f00000051c0)=@nl, 0x80, &(0x7f0000005580), 0x0, &(0x7f0000000080)}}], 0x4, 0x0, &(0x7f00000057c0)={0x0, r2+30000000}) 05:58:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/14, 0xe) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x2000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, &(0x7f0000000200)) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000100)={0x10000000fffffdfd, 0x0, [{}]}) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f00000000c0)=0x2) 05:58:09 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xffffffffffff66ad, 0x8800) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f00000000c0)=0x2, 0x4) r3 = accept$alg(r1, 0x0, 0x0) sendmmsg(r3, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x10, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 05:58:09 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000040)='f2f*\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)) 05:58:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000700)='/dev/snd/pcmC#D#c\x00', 0x5, 0x448a01) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000000740)=""/79) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = open$dir(&(0x7f0000000040)='./file0\x00', 0x600200, 0x104) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000840)={r2, 0x0, 0xfffffffffffffffb, 0x7, 0x9}) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000800)={0xfffffffffffffffb, 0xffffffff, 0x1, 0x7, 0x7}) r5 = syz_open_dev$amidi(&(0x7f0000000680)='/dev/amidi#\x00', 0x82da, 0x2) ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f00000006c0)=0xebe9) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) ioctl$KVM_SET_XSAVE(r3, 0x5000aea5, &(0x7f0000000280)={"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"}) getresgid(&(0x7f0000000140)=0x0, &(0x7f0000000180), &(0x7f0000000240)) fchownat(r4, &(0x7f0000000080)='./file0\x00', r6, r7, 0x500) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x17a, 0x40000000000977]}) ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f00000007c0)) 05:58:09 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x5234) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x92000) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@mpls_getnetconf={0x2c, 0x52, 0x808, 0x70bd2c, 0x25dfdbfd, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x5}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x7}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040040) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xc, &(0x7f0000000040), 0x4) 05:58:09 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) r2 = getegid() r3 = getegid() r4 = getgid() getgroups(0x4, &(0x7f00000000c0)=[r1, r2, r3, r4]) shutdown(r0, 0x0) 05:58:09 executing program 6: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x10000, 0x0) getsockname$unix(r0, &(0x7f00000002c0)=@abs, &(0x7f0000000200)=0xffffff06) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f0000000040)='debugfs\x00', 0x0, &(0x7f000002f000)) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x2102020, &(0x7f0000000140)={[{@mode={'mode', 0x3d, 0x100000000800}}]}) 05:58:09 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x400000001fffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 05:58:09 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x800) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f00000000c0)=0x1000, 0x4) r1 = socket$vsock_dgram(0x28, 0x2, 0x0) connect(r1, &(0x7f0000000040)=@hci, 0x80) 05:58:09 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000002b00)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000100)={&(0x7f0000000180)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000016c0)=""/209, 0xd1}], 0x1, &(0x7f00000017c0)=""/201, 0xc9}, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000280)=0x0) ioprio_set$pid(0x1, r3, 0x100) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x800) setfsuid(r2) 05:58:09 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000040)='f2fc\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)) 05:58:09 executing program 7: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4040, 0xe0) ioctl$VT_WAITACTIVE(r1, 0x5607) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000400)=ANY=[@ANYBLOB="7281775698e4a33c97f7700000000000000000000000007cd6f753e5692a660009000000030000003002000000000000ffffffffffffffffffc0010000ffffffffffffffffc0010000ff874c8533570fca2537374e21c37ebae3763f9666ad585e6c903fcff62f6910d46629b186fecd53d102a388a81fcbeab3a96b6776788d4a3cf215d2bbb217b0ee4f9ea0baf5cee11462acbeec1a7b1d6d9397773c5ea4d717fea5cf4cfdec4a98e653380dcf44b35a", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="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"], 0x290) 05:58:09 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x8, 0x40) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000080)={0x1}, 0x1) mkdir(&(0x7f0000000180)='./file0\x00', 0x8008000000084) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000140)) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) keyctl$join(0x1, &(0x7f0000000000)={0x73, 0x79, 0x7a, 0x0}) 05:58:09 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00000001c0)='devpts\x00', 0x0, &(0x7f000002f000)) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x2102020, &(0x7f0000000140)=ANY=[@ANYBLOB="03000000000000003030303030344b2c4939f430343030302c00"]) 05:58:09 executing program 2: futex(&(0x7f000000cffc)=0x100000000000004, 0x0, 0x4, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f0000000000)={0x77359400}, &(0x7f0000048000), 0x0) r0 = getpid() rt_sigqueueinfo(r0, 0x24, &(0x7f0000000040)={0x2c, 0x4, 0x1, 0x6}) futex(&(0x7f000000cffc), 0x3, 0x1, &(0x7f0000cc3ff0)={0x77359400}, &(0x7f000044b000), 0x0) 05:58:09 executing program 7: r0 = timerfd_create(0x100000000000007, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x3ff}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={r1, 0x2, 0x1, 0x7ba, 0x5, 0x4}, &(0x7f0000000200)=0x14) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x80000, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x7fff, 0x80000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xd, 0xa049, 0x9, 0x9e, 0x4, r2, 0x3}, 0x2c) timerfd_settime(r0, 0x0, &(0x7f0000016fe0)={{0x5}, {0x0, 0x5f6c}}, &(0x7f000000ffe0)) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{}, {0x77359400}}, &(0x7f0000000080)) 05:58:09 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x801000010000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$alg(0x26, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0xa, @mcast1, 0x100000000}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000240)={0x0, 0xf, "4fe9af3ff1b428727bdf038959ddfa"}, &(0x7f0000000140)=0x17) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000180)={r3, 0x9, 0x9, 0x9, 0x598}, &(0x7f00000001c0)=0x14) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256-generic\x00'}, 0x58) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000700)=""/161, 0xa1}, {&(0x7f00000007c0)=""/155, 0x9b}], 0x2}, 0x0) r4 = accept$alg(r2, 0x0, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x20000, 0x0) ioctl$GIO_UNIMAP(r5, 0x4b66, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{}]}) time(&(0x7f0000000040)) sendmmsg$alg(r4, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)}], 0x1500, 0x0) 05:58:09 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @loopback}}, 0x100, 0x3, 0xfbda, 0x6, 0x1}, &(0x7f0000000200)=0x98) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000240)={r1, 0x9, 0x3, [0xd8, 0x3, 0x10000]}, &(0x7f0000000280)=0xe) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x3, @broadcast, 'syz_tun"\x00'}}, 0x1e) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000300)={'syzkaller0\x00', &(0x7f00000002c0)=@ethtool_wolinfo={0x6, 0x2, 0x1, "e1ec5dcb9e60"}}) 05:58:09 executing program 5: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) close(r0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0xf008, 0x0) userfaultfd(0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c00c2cea06d95110b31268f26e17c0e2bf7a5335c1d22a72d5d7b85a1d10fc34609e2ddc62f46711a614c85"]) [ 199.822950] devpts: called with bogus options [ 199.833834] 9pnet: Insufficient options for proto=fd [ 199.856759] 9pnet: Insufficient options for proto=fd [ 199.862905] devpts: called with bogus options 05:58:09 executing program 3: r0 = getpgrp(0x0) sched_setaffinity(r0, 0xfffffffffffffffa, &(0x7f0000d81ff8)=0x101) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000140)={'#! ', './file0', [{0x20, "717565756531000000000000001f00"}], 0xa, "47c79ba0458957e2ac1e587540a1c0d67c31c79fc8e10e748e861353b750715de6beb3ba7b22e89b3182f4d9ffbbf5d20ec4fcbecd4d44071e6a2c1400cefdcbe7548254f726773928e9295410e52f5d91f828e53e7b7b2cee89c7fbf542037357302f04e7d5ab199ed1f3cbb18539c126fa25f0b5cee3631162d4d6e2f7e325032fd56cd446ce32d7e4e1e143f7accad9372083335ebb94f48961d946389411fbcede68beed3f976df0f4d91557ce2183710245f6657603811b17192d3b35481cb0014ff29bace641e9118c34b7c05374db270751"}, 0xf0) read(r1, &(0x7f0000000000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc0a85320, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc0105303, &(0x7f00000002c0)) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000000480)) r3 = dup(r1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000600)={0x0, 0x100, 0x4, 0x9}, &(0x7f0000000640)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000680)={0x4, 0x8000, 0x9, 0x8000, 0x6, 0x0, 0x1000, 0x80, r4}, 0x20) tkill(r2, 0x1000000000013) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000000c0)='#! '}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r5, &(0x7f00000004c0)="3173b1bcdb2155fef4c4e0d39a3fd814aa99893688622c58eb18c0375d990acdf3fffbaae39774b977668a5c73b42626a82a0768a5f2caa6da6629e00e7502c8166956ae7ee97c3b4b9fd94646c571e3579ff684e39e347fda6151a31153eb12425e08763974c11556d5d6b5f6b52516e506a8dcca8e2fdbef3848f3004435e2ac2b82b5f5cabf931e82474b", &(0x7f0000000580)="b1b72c5720eab15c5a4435e023343e45e4f56194c9ab49e7904f3ce36818fe4f9faa8230e73b058dc172aa604c34130d7a3c5ab78162af0c5e91de7dd108a0ab18ae461c2714484efbb6fb5672f651fd7cdb9668dc59626d0f3e1588ecfe6a6a4177ded0acb5f3145062ebbd0690131be49f93c9077d94ef769d", 0x1}, 0x20) 05:58:09 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000040)='f2f\n\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)) 05:58:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair(0x8, 0x1, 0x200, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @loopback}, &(0x7f0000000240)=0xc) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f00000002c0)={0xf8d, 0x80}) fstat(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getegid() mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x1002085, &(0x7f0000000100)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xe000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xc0000}}, {@default_permissions='default_permissions'}]}}) 05:58:09 executing program 7: r0 = socket$inet6(0xa, 0x1080000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000180)=0x8) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) accept(r1, &(0x7f0000000000)=@ax25, &(0x7f0000000140)=0x80) 05:58:09 executing program 5: r0 = accept(0xffffffffffffff9c, &(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, &(0x7f0000000080)=0x80) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f00000000c0)=0x7, 0x4) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x40000) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000180)={'veth1_to_bond\x00', {0x2, 0x4e20, @multicast2}}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x10000, 0x0) read$FUSE(r3, &(0x7f0000000200), 0x1000) ioctl$KVM_GET_PIT2(r3, 0x8070ae9f, &(0x7f0000001200)) ioctl$KVM_GET_PIT2(r3, 0x8070ae9f, &(0x7f0000001280)) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000001300)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000001380)={{0xa, 0x0, 0x7fff, 0xcf, 'syz1\x00', 0x5ef7}, 0x4, 0x10000003, 0x6, r4, 0x5, 0x1ff, 'syz1\x00', &(0x7f0000001340)=['/dev/nbd#\x00', 'veth1_to_bond\x00', '/dev/nbd#\x00', '/dev/nbd#\x00', 'veth1_to_bond\x00'], 0x3a, [], [0x1f, 0x101, 0x190, 0x1f]}) fadvise64(r3, 0x23, 0x0, 0x0) ioctl$KIOCSOUND(r3, 0x4b2f, 0x80) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f00000014c0)=""/86, &(0x7f0000001540)=0x56) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r3, 0xc0405519, &(0x7f0000001580)={0x3, 0x0, 0x4, 0x7ff, 'syz0\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f00000015c0)=0x401, 0x4) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000001600)=0x2, 0x4) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000001640)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000001680)={r5}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000016c0)={0x5000, 0x1c000}) chmod(&(0x7f0000001700)='./file0\x00', 0x104) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r3, 0x111, 0x2, 0x0, 0x4) r6 = add_key(&(0x7f0000001740)='.request_key_auth\x00', &(0x7f0000001780)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000017c0)="29c82caf29d5fbd1e8f09958f5bda1650a97f571b5a35baf78b5c5e2d6a7dfc85485a1339dabd9d699d9e0c1a352fc7df2855a4c6d1ed23e4c484e7b011e2a", 0x3f, 0x0) keyctl$read(0xb, r6, &(0x7f0000001800)=""/91, 0x5b) pwrite64(r2, &(0x7f0000001880)="a92f0c9736fbdd962e18f1000634f8ccf83dce4f0b64f75ca614f09158947683a6e9b1c4", 0x24, 0x2e) bind$llc(r3, &(0x7f00000018c0)={0x1a, 0x25, 0x6, 0x1, 0x4, 0x800, @remote}, 0x10) 05:58:09 executing program 6: socket$inet6(0xa, 0x80002, 0x100000000000088) r0 = socket$inet6(0xa, 0x802, 0x88) recvmmsg(0xffffffffffffffff, &(0x7f0000006a40)=[{{&(0x7f00000053c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000005800)=[{&(0x7f0000005740)=""/49, 0x31}, {&(0x7f0000005780)=""/76, 0x4c}], 0x2, &(0x7f0000005880)=""/4096, 0x1000}}], 0x1, 0x0, &(0x7f0000006c40)={0x77359400}) socketpair$inet(0x2, 0x6, 0x7fffffff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(r0, &(0x7f0000000080)='g', 0x1, 0x0, &(0x7f0000000340)={0xa, 0x10000000004e23, 0x0, @dev={0xfe, 0x80, [], 0x15}}, 0x1c) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x8000, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000a80)={0x90, @tick=0x3, 0xffffffff, {0x6}, 0x3, 0x0, 0xffffffff}) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000040)={0x64}, 0x4) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000140)={@local, r4}, 0x14) 05:58:09 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1000000000000005, 0xb, 0x401, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000040)="9a", &(0x7f0000000200)}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000dc3000)={r0, &(0x7f0000a5a000), &(0x7f0000107000)=""/78}, 0x18) 05:58:09 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200280, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000040)={0xf, 0xc, 0x14, 0xd, 0x1, 0x100, 0x4, 0xb4, 0x1}) syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x80000) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0xc0000) ppoll(&(0x7f0000000080)=[{r1}], 0x1, &(0x7f00000000c0)={0x0, 0x1c9c380}, &(0x7f0000000140), 0x8) 05:58:09 executing program 7: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b707000001000000507000000000e0ff401e000000000000007f000700000000"], &(0x7f0000000540)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x12, 0x46, &(0x7f0000000280)="b80000f10000000000000000000089a46fb3", &(0x7f0000000480)=""/70}, 0x28) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xc000000, 0x460042) write$P9_RRENAMEAT(r1, &(0x7f00000000c0)={0x7, 0x4b, 0x1}, 0x7) 05:58:09 executing program 0: getpgrp(0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) getpriority(0x2, r0) 05:58:09 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000040)='f2f+\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)) 05:58:10 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) restart_syscall() ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000080)=0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f00004e7000)={0x2, 0x78, 0xdf}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) 05:58:10 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x0, 0x2}}, 0x68) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000140)={0x4, 0x8, 0xfa00, {r2, 0x9}}, 0x10) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000080)=0x47dc) 05:58:10 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") poll(&(0x7f0000000000)=[{r0, 0x6000}], 0x1, 0xfffffffffffffffc) r1 = socket$vsock_dgram(0x28, 0x2, 0x0) shutdown(r1, 0x2) poll(&(0x7f0000000040)=[{r1}], 0x20000000000000e6, 0x0) 05:58:10 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x1, 0x2000) write$evdev(r0, &(0x7f0000000040), 0x0) write$evdev(r0, &(0x7f00000000c0)=[{{0x0, 0x2710}, 0x1, 0x7f, 0x2}, {{0x77359400}}], 0x30) 05:58:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x81, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x84302, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000100)={0x2, r2}) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000588ff1)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r3, 0xaf01, &(0x7f00001e3000)) r4 = eventfd(0x0) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000040)={0x0, r4}) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000000)={0x0, r4}) 05:58:10 executing program 3: syz_emit_ethernet(0x42, &(0x7f0000000080)={@broadcast, @broadcast, [], {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x1, @broadcast, @local, @local, @remote}}}}, 0x0) syz_extract_tcp_res(&(0x7f0000000000), 0x3f0097aa, 0x80000000) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x2a0100, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000180)={0x2, [0x200, 0x90a]}, &(0x7f00000001c0)=0x8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockname$inet(r1, &(0x7f0000000040), &(0x7f0000000100)=0x10) 05:58:10 executing program 6: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000080)="b36ae48a2f6eb62fa5bb71a73d705827cbf34ba7fa634970ca16d2ada1007e983142f46f27f5e2ebe5c15692c6746eea3ff34221", 0x34}, {&(0x7f0000000480)="20241ac8b301dcdafa0b1139dcae8939ee1a630776c47653cf188303709ea6facdacc13ff478dc39a2fce35ec88a697940fe50f471b3df72058922ed43078ceb74aa4cb3acf7c5125d5760dd67ca87a32d4fa133992a5e532bd12f5ce8228bc98e18c29e34acdc865a3449f1f65303713c29c303ad07ab36af5e5e5a5cd31cac6b201c93d6bd212943553792f41bf914ef4ad95b387473a88ebd6506eaccc0d324", 0xa1}, {&(0x7f0000000540)="64698fd8d4a933d3d3a4053bf3716e79a55ae0d717687aaf66a39cc8919fde4fd1b685ad93a8d57e49c08116441d61a2514a7d46d93076d2091cb30269743473d96ba6bfa1130352b17b2f6db75c2d117bb4f50f71aff4da2a5471bfbb34c9935cb8e7bcd8b6d34b10eb84947c6cf72793b393966294eff4a07ea78d8dd8e2ce89893e7b9f7de19bb026e93d820de4f94a4b0557f73a8dbdbd845e9b98a1dae236e8635b7db22d8fcf495b789b3b5e5a8ba4611f388e", 0xb6}, {&(0x7f0000000240)="ea3745c427cffc6d8a66214a971ce0499257357d01be222e249474ed57c1d881d99f7c98a46e4a809feb14b2913bb3fd27c8b80f5c4ca8e7ef7d14dc2c5f4e42fb4f1769c7412a691b0049f5b8e6809383d631891dab72af2c66", 0x5a}, {&(0x7f0000000600)="c2c7e75e6a3e38fb19d3eaed81bc89fcb105ba1dca686b4b2a58e748627bd2f6545d1e2cde35accbf16ec7755616b0343f802a75e4d60e4022fc35d612a27e902482fae07d29541b4c32869e662492ebdb38f27f3001f2e83413e81ef40fe22659ed7cb711a7535e062320cef367044559964859d92aad1543bc7d9d4031c7aed3c648d4e758204c87f3d8fbccf7ec06d5906cd0b22cac537d84", 0x9a}, {&(0x7f00000006c0)="39c9afd8ca67f221d2f188fd98c055260d8d803b1a44a0763799c07eb2423203e44edd741ab09fe3ba31fd304bae8061229c70ad9053a537496409f5d9a2bf3ff153ca87b81a5ea1402f55a48307995c94e643273984bf2ba9c5d6ba9717e35e02455f9c208a16dd7ba661fa18356d10e4d94246f5f611d855be42aa384296ed9b8968c0ac0f6314799e8417b74a757b1f209dfc39aa94b120f92e", 0x9b}, {&(0x7f0000000780)="3c4722adca8a58c2fce63060b196e26400b39a3fa27a523a5856ce858364478cbaac2cf946fcaa5356e85922ccca84881263b9d57abc75ce2e6cc57792bd987b67c6711970aede76cf6951758c2d168a78305709e7f169c2d619f95016c5d8a8b40453afc2075eb5ca6a962423ec68874717e3532085888f9db3030c5685056990e7e9d9a023e3d0093840f4de264e569510bc8d22ca7cf1fb4b500aa36f803e30a7cbac28f468e71d1162bba7ffa197b385f52855af473ae6aa2e", 0xbb}, {&(0x7f0000000840)="a7f0dfe1612400f5067cb576deaa62ee8afe8993856dc42490f6b800d3a934b12463b93a6392a458c69908cd77eb78d156e61883c336d9b03bf9fc5f0c8bdd32ade164603265f933fcc95b87ec8f003863f602e6a56322f6c0423f43906906913ab48ed6afdf00ff3d3c1a21b7c00dbe7f7d1a77a82ee98243adb00e73b3c18e18f4dd705bc634a77011d2ed5a4afb245eae0642dd1d87c9a5ed5ea0", 0x9c}], 0x8) close(r0) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="45965a5c4f0f0000000030e12924ad83aa300fc6228476120f3c18"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="080000000000000000000000028000007a0a00fffffffffd6301"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='syzkaller\x00', 0x80000004, 0x718, &(0x7f0000008d40)=""/187, 0x0, 0x0, [], 0x0, 0x8}, 0x48) 05:58:10 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)) 05:58:10 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r1, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f) close(r1) getitimer(0x0, &(0x7f0000000080)) 05:58:10 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) fcntl$setpipe(r0, 0x407, 0x5) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0xb7, 0x4) write$P9_RWALK(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="67a0"], 0x2) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 05:58:10 executing program 1: r0 = dup(0xffffffffffffff9c) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x3b, @dev={0xac, 0x14, 0x14, 0x1e}, 0x4e23, 0x4, 'dh\x00', 0x1, 0x5f, 0x41}, 0x2c) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/217) r1 = socket$unix(0x1, 0x3, 0x0) bind$unix(r1, &(0x7f0000850000)=@file={0x0, './file0\x00'}, 0x1) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000140)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 05:58:10 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000240)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) rt_tgsigqueueinfo(r3, r3, 0x34, &(0x7f0000000040)={0x0, 0x0, 0xffeffffffffffffc}) getpeername(r1, &(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000140)=0x80) tkill(r3, 0x15) tkill(r3, 0x33) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'bpq0\x00', 0x4013}) tkill(r3, 0x2d) ptrace$setregset(0x4209, r3, 0x20000004, &(0x7f0000000100)={&(0x7f0000000040)}) [ 200.877470] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. [ 200.900295] attempt to access beyond end of device [ 200.906221] loop4: rw=12288, want=8200, limit=20 [ 200.912838] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. [ 200.927814] attempt to access beyond end of device [ 200.933089] loop4: rw=12288, want=12296, limit=20 [ 200.960903] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. [ 200.961076] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. 05:58:10 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, &(0x7f00000003c0), 0x10) 05:58:10 executing program 3: prctl$setmm(0x23, 0x8, &(0x7f0000ffc000/0x2000)=nil) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000080)=0x1, 0x4) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x101000, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f0000000040)={0x9069, 0x3, 0xfffffffffffffff8, 0x1f, 0x7fffffff, 0x1, 0x6}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000400)={0x0, 0xb0, "44ff86bf561459162db0bf42e9e028e5a2cd55c0e6f80608db85e758bfde616b557d1f6fe4295f9388db813dcd4efadc4b503b023c2101cb280f5a8747be5200b90b87cefe5bd6c73297f2eec3ed91dd542720cd3995c949910dbaef0adf4f939b48d46aa74978f4b17fff9d40ee5f8071a444fd2ade922150e8d8f5f8ffc7c7c31fca7db43179c95e313230dbc1fdafe94171da37d16d632b5d01a6bb09144051038a052b3d457554abe15068833919"}, &(0x7f0000000280)=0xb8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000340)={0x1, 0x6, 0x5, 0x20, 0x10000, 0x7, 0x0, 0x7, r2}, &(0x7f00000004c0)=0x20) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000140)={0x4, 0x3, 0xa4, 0x4a1, 0x20, 0x5, 0x8001, 0x3, 0xa4, 0x8, 0x80000000, 0x1}) ioctl(r1, 0x8912, &(0x7f0000000340)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000180), &(0x7f0000000300)=0x4) prctl$setmm(0x23, 0x8, &(0x7f0000ffd000/0x3000)=nil) execveat(r1, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000200)=[&(0x7f0000000380)="17706f7369785f61636c5f6163636573739d6d643573756d707070312e656d3047504c7365637572697479776c616e305c6c6f7365637572697479656d3070726f635d216574683100", &(0x7f0000000100)=',\x00', &(0x7f00000000c0)='\x00', &(0x7f0000000240)=',\x00', &(0x7f00000001c0)='/dev/vga_arbiter\x00'], &(0x7f0000000400), 0x800) 05:58:10 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) r2 = fcntl$dupfd(r1, 0x406, r0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000000)={0x0, 0x1, 0x100000000, 0x1, 0x81}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) r3 = semget$private(0x0, 0x4, 0x540) semctl$GETVAL(r3, 0x1, 0xc, &(0x7f00000002c0)=""/4096) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d4, &(0x7f0000000080)) 05:58:10 executing program 2: r0 = socket$inet6(0xa, 0x7, 0x7fff) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") io_setup(0x1, &(0x7f0000000040)=0x0) io_getevents(r1, 0x0, 0x0, &(0x7f0000000000), &(0x7f00000000c0)) memfd_create(&(0x7f0000000000)='\\self\x00', 0x2) r2 = socket$unix(0x1, 0x1, 0x0) io_submit(r1, 0x3bd, &(0x7f00000026c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0x0, r2, &(0x7f0000000080)}]) 05:58:10 executing program 7: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x2000, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000040)={0x3f0, 0x0, 0x5, 0x5, 0x80000000, 0x3}) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000100)=[0x6, 0x81]) select(0x40, &(0x7f0000000140)={0x1, 0x2, 0x7, 0x7, 0x3, 0x1000, 0x41dd, 0x7fffffff}, &(0x7f0000000180)={0x4, 0x2, 0x2, 0x800, 0x1, 0xd95, 0x4, 0x9}, &(0x7f00000001c0)={0x1, 0x800, 0xff, 0x6, 0x0, 0xd1, 0x5, 0x2}, &(0x7f0000000200)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000240)=0x2, 0x4) fstat(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getgid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000300)={{{@in=@multicast2, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f0000000400)=0xe8) write$P9_RSTATu(r0, &(0x7f0000000440)={0x74, 0x7d, 0x1, {{0x0, 0x56, 0x4, 0x6, {0x41, 0x3, 0x5}, 0x10010000, 0xfffffffffffffff8, 0x9, 0x0, 0x0, "", 0x1, '+', 0x11, '/dev/qat_adf_ctl\x00', 0x11, '/dev/qat_adf_ctl\x00'}, 0x9, 'cgroupem0', r2, r3, r4}}, 0x74) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000004c0)={0x2, r0}) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000500)={0x4, 0x4aa77f29b8cd4a0c, 0x8b, 0x9, 0x100}, 0xc) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000580)={'broute\x00', 0x0, 0x0, 0x0, [], 0x4, &(0x7f0000000540)=[{}], 0x0, [{}, {}, {}, {}]}, 0xb8) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000640)={0x7, 0x1, 0x5, 0x3, 0x7fffffff}, 0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000680)={0x0, @in6={{0xa, 0x4e20, 0x2, @empty, 0x100000001}}, 0x10000, 0xfff, 0x1000, 0x1, 0x3}, &(0x7f0000000740)=0x98) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000780)={r5, @in={{0x2, 0x4e24, @multicast2}}}, &(0x7f0000000840)=0x84) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000a00)={@nl=@unspec, {&(0x7f00000008c0)=""/250, 0xfa}, &(0x7f00000009c0)}, 0xa0) io_setup(0x43, &(0x7f0000000ac0)=0x0) clock_gettime(0x0, &(0x7f0000000b40)={0x0, 0x0}) io_pgetevents(r8, 0x8, 0x2, &(0x7f0000000b00)=[{}, {}], &(0x7f0000000b80)={r9, r10+30000000}, 0x0) clock_gettime(0x0, &(0x7f0000000bc0)={0x0, 0x0}) write$sndseq(r0, &(0x7f0000000c00)=[{0xfffe0000000000, 0x2, 0x0, 0xc6, @tick=0x3d, {0x2, 0xffffffffffffffff}, {0x4, 0x5}, @control={0x7, 0x0, 0x7}}, {0x72ac, 0x9, 0x10000, 0x0, @time, {0x9, 0x9}, {0x9, 0x9}, @connect={{0x42d0}, {0x446, 0xffffffffffff8000}}}, {0x800, 0x8, 0x6, 0x6, @tick, {0x505, 0x4}, {0x91, 0x9}, @addr={0x1f7, 0x3}}, {0x100000000, 0x1, 0x4, 0x9, @tick=0x100, {0xaf4, 0x126}, {0x6, 0x5}, @raw32={[0x5, 0x10001, 0x100000000]}}, {0x7f, 0x99, 0x7fffffff, 0x100, @time={r11, r12+30000000}, {0x80000000, 0x2}, {0xfffffffffffffff7, 0x2}, @raw8={"a6d53247fa0605657bbcc5a6"}}, {0x3, 0x2, 0x200, 0x100000001, @time={0x77359400}, {0x2, 0x80000000}, {0x1000, 0x2}, @result={0x6, 0x8}}, {0xff, 0x7, 0x32, 0x0, @tick=0x2, {0xf397, 0x7}, {0x3ff, 0x3}, @note={0x8, 0x10001, 0x9, 0x4, 0x3}}, {0x1, 0x8, 0x7, 0x7, @tick, {0x4378, 0x7}, {0x1, 0x100}, @time=@tick=0x6}, {0x10000, 0x0, 0x1, 0x4, @time={0x77359400}, {0xff, 0x20}, {0xef53, 0x1}, @note={0x1c, 0x1, 0x4, 0x1, 0x1}}], 0x1b0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000e00)=@security={'security\x00', 0xe, 0x4, 0x408, 0x228, 0x228, 0xf0, 0x0, 0xf0, 0x338, 0x338, 0x338, 0x338, 0x338, 0x4, &(0x7f0000000dc0), {[{{@ipv6={@loopback, @dev={0xfe, 0x80, [], 0xc}, [0x0, 0xffffff00, 0xff000000], [0xff000000, 0x0, 0xffffffff, 0xffffff00], 'lo\x00', 'yam0\x00', {}, {0xff}, 0x32, 0x9, 0x1, 0x40}, 0x0, 0xc8, 0xf0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x2, 0xfff}}}, {{@uncond, 0x0, 0xc8, 0x138}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x3, 0x10000, 0x1, 0x0, "45645c259ff607656e107ddc937728e4560d778db98267491b5d36f5c141cfb4245535a2591375e4b6353ae9612ca8ec3c536e6bfccc15cb2a3a00402688f371"}}}, {{@ipv6={@mcast1, @empty, [0xff000000, 0xff, 0xff000000, 0xffffffff], [0x0, 0xffffff00, 0xff000000], 'gretap0\x00', 'bridge0\x00', {0xff}, {}, 0x0, 0x8b5a, 0x5, 0x2}, 0x0, 0xc8, 0x110}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@broadcast, 'vcan0\x00', 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) bind$inet(r0, &(0x7f0000001280)={0x2, 0x4e24, @multicast1}, 0x10) ioctl$sock_inet6_udp_SIOCOUTQ(r6, 0x5411, &(0x7f00000012c0)) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001340)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x5c, r13, 0x2, 0x70bd25, 0x7, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x20a}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xd8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3a7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8811}, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000001480)={{{@in6=@remote, @in6=@dev}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000001580)=0xe8) [ 200.969917] attempt to access beyond end of device [ 200.982993] loop4: rw=12288, want=8200, limit=20 [ 201.002880] attempt to access beyond end of device [ 201.008055] loop4: rw=12288, want=12296, limit=20 05:58:10 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000fb6000)=""/28, 0x3) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) open(&(0x7f0000000000)='./file0\x00', 0x80000, 0x140) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000240)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000300)={0x0, 0x0, 0x0, {0x0, 0x1c9c380}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) [ 201.038323] attempt to access beyond end of device [ 201.043339] loop4: rw=12288, want=8200, limit=20 [ 201.048886] attempt to access beyond end of device [ 201.054098] loop4: rw=12288, want=12296, limit=20 [ 201.059851] attempt to access beyond end of device [ 201.064895] loop4: rw=12288, want=8200, limit=20 [ 201.070623] attempt to access beyond end of device [ 201.075675] loop4: rw=12288, want=12296, limit=20 [ 201.164173] QAT: Invalid ioctl [ 201.182330] QAT: Invalid ioctl [ 201.199749] QAT: Invalid ioctl [ 201.211069] QAT: Invalid ioctl [ 201.214354] QAT: Invalid ioctl [ 201.217639] QAT: Invalid ioctl 05:58:11 executing program 0: r0 = socket$inet6(0xa, 0x1000000000003, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) dup2(r2, r1) 05:58:11 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000040)={0x80, 0x0, 0x9}) r1 = socket$inet6(0xa, 0x80f, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x6}]}, 0x10) sendmmsg(r2, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 05:58:11 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000040)="66326673ff", &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)) 05:58:11 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000200)=""/253, &(0x7f0000000180)=0xfd) 05:58:11 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x20, 0x101080) accept$packet(0xffffffffffffff9c, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40842042}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@gettfilter={0x2c, 0x2e, 0x400, 0x70bd27, 0x25dfdbfb, {0x0, r1, {0xf, 0xffff}, {0xffff, 0xffff}, {0xf, 0x5}}, [{0x8, 0xb, 0xff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x5, 0x0) readv(r2, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x1, 0x0) 05:58:11 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000000300)=@assoc_id=0x0, &(0x7f0000000340)=0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000380)={r1, @in={{0x2, 0x4e20, @loopback}}, [0x6, 0x3, 0x80b, 0xc78, 0x4f1, 0x4a6d16a8, 0xfff, 0x200, 0x7, 0x800, 0x7, 0x1000, 0xfffffffffffffffa, 0xffffffffffffff6a]}, &(0x7f0000000480)=0x100) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000040)={0x0, 0xaba1}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e22, 0x81, @loopback, 0x27ba}}, 0x6, 0x7}, &(0x7f00000002c0)=0x90) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dsp\x00', 0x28440, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f0000000500)=""/137) accept4(r3, &(0x7f00000000c0)=@nl=@proc, &(0x7f0000000140)=0x80, 0x0) 05:58:11 executing program 7: r0 = gettid() timer_create(0x8000000000000000, &(0x7f0000044000)={0x0, 0x7, 0x0, @tid=r0}, &(0x7f0000001140)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) r4 = shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2000) shmdt(r4) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) tkill(r0, 0x1000000000016) 05:58:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="a277474334b5834d33ed277e455b2142e46ca506503a12ab09991a12247ecb6f54d656ae98d51d67d07d6818ff19edfe21972781c1ae56756792e85402"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:58:11 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x800, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000000c0)=0x432, 0x4) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000200)=0x10003) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000000)=0x800, 0x4) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000240)=""/238, 0xee}], 0x1) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/51, 0x33}], 0x1) 05:58:11 executing program 6: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x8000, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000001c0)=0x14) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x9) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f00000000c0)=""/137) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) r4 = gettid() r5 = fcntl$dupfd(r3, 0x0, r2) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) readv(r5, &(0x7f0000000040)=[{&(0x7f0000000280)=""/176, 0xb0}], 0x1) syz_emit_ethernet(0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r4, 0x1004000000016) socket$inet6(0xa, 0x800, 0x100) r6 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r6, 0xc1205531, &(0x7f000035dffc)) 05:58:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000280)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100), 0x28) r1 = accept(r0, &(0x7f0000000000)=@nl, &(0x7f0000000140)=0x80) getsockname$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000001c0)=0x10) 05:58:11 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000040)="66326673b4", &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)) 05:58:11 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x9}, 0x2c) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f00000000c0)="14"}, 0x20) lseek(r1, 0x19, 0x0) dup3(r1, r0, 0x0) 05:58:11 executing program 2: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000001c0)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000002000)=[{&(0x7f0000000100)="550000001e007f5300fe01b2a4a280930a06000000a8430891000000080008000a00000000000000000700029b84136ef75afb83de448daa720c036041526a7735c789b06dca27c43ab8220000060cec4fab91d400", 0x55}], 0x1, &(0x7f0000000180)}, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000200)={r0, 0x0, 0x7, "401b78cc440e6fc2f0000717e16cc8fb9067553a9819e78f2d004b417c78b223e5779699d2c7e7ff2806eea04dc26af1a6e7341f0d729b42d9f487a7af173d7cf45c1d08656d4520fe1707c7bfccb3fb5cb4299dc4b342c2db88773d9390de36449d39f60c84313d7664c8f78bb21c5613ffc3550fedea05f7de480372b7b05370ec246c9f1e033d29b7b72d664302b4e7ce40f1c4924e1bee53"}) [ 201.689487] tls_set_device_offload_rx: netdev lo with no TLS offload 05:58:11 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x21003, 0x40000000003a8}) r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x9, 0x101000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000001300)={0xf8, r2, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x17}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x20}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10000}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0xc}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1c}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xc1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1a}}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1e3c2911}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) read$FUSE(r1, &(0x7f0000000300), 0x1000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000100)={[], 0x0, 0x7, 0xc942, 0x5, 0x7}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x3, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001500)='/dev/loop-control\x00', 0x0, 0x0) r3 = getpid() ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000001400)={[], 0x1, 0x3, 0x7, 0x80, 0x100000000, r3}) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000014c0)=@int=0xfffffffffffffffa, 0x4) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) accept4$alg(r1, 0x0, 0x0, 0x80800) unshare(0x40000000) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000180)={'tun\x00', @ifru_names='bridge0\x00'}) getsockopt$packet_buf(r1, 0x107, 0x7, &(0x7f00000002c0)=""/22, &(0x7f0000001480)=0x16) 05:58:11 executing program 7: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) write$P9_RREADLINK(r0, &(0x7f0000000200)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000380)=ANY=[]) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}]}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000080)=[@in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000001c0)={r2, 0x7}, 0x8) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001300)={&(0x7f0000001340)='./file0/file0\x00', r1}, 0xc) unlink(&(0x7f0000000180)='./file0/file0\x00') [ 201.740591] netlink: 49 bytes leftover after parsing attributes in process `syz-executor2'. 05:58:11 executing program 3: socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000040)={0xffffffffffffffff}) socket$inet6(0xa, 0x1000000000002, 0x0) mknod$loop(&(0x7f00000001c0)='./file1\x00', 0xc020, 0x0) creat(&(0x7f0000000140)='./file1\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x40002, 0x0) write$P9_RWSTAT(r1, &(0x7f00000000c0)={0x7}, 0x7) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) ioctl$FUSE_DEV_IOC_CLONE(r1, 0xc028660f, &(0x7f0000000180)) 05:58:11 executing program 1: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x0, 0x82000) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb}, 0xc) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000180)) r1 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) rt_sigsuspend(&(0x7f0000000000)={0x400000009}, 0xfffffc3c) fcntl$setsig(r0, 0xa, 0x24) write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYRESDEC], 0xfc8c) ftruncate(r1, 0x0) 05:58:11 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc80700145f8f764070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffe60, &(0x7f0000009ff0), 0xfffffffffffff98, 0x0, 0x0, 0x4004090}, 0x0) [ 201.798973] netlink: 49 bytes leftover after parsing attributes in process `syz-executor2'. 05:58:11 executing program 6: syz_emit_ethernet(0x2b, &(0x7f00000001c0)={@random="77b0e1efedfa", @random="6b463781edad", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @igmp={0x11, 0x0, 0x0, @empty, '\x00'}}}}}, &(0x7f0000000180)) recvmmsg(0xffffffffffffffff, &(0x7f0000005040)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000080)=""/22, 0x16}, {&(0x7f00000000c0)=""/116, 0x74}, {&(0x7f0000000200)=""/153, 0x99}, {&(0x7f00000002c0)=""/202, 0xca}, {&(0x7f00000003c0)=""/83, 0x53}, {&(0x7f0000000440)=""/195, 0xc3}], 0x6, &(0x7f00000005c0)=""/251, 0xfb, 0x800100000000000}, 0xd04}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000140)=""/52, 0x34}, {&(0x7f00000006c0)=""/110, 0x6e}, {&(0x7f0000000740)=""/129, 0x81}, {&(0x7f0000000800)=""/32, 0x20}], 0x4, &(0x7f0000000880)=""/4096, 0x1000, 0x6}, 0x1}, {{&(0x7f0000001880)=@can, 0x80, &(0x7f0000001a40)=[{&(0x7f0000001900)=""/170, 0xaa}, {&(0x7f00000019c0)=""/88, 0x58}], 0x2, &(0x7f0000001a80)=""/219, 0xdb, 0x9}, 0xfffffffffffffff9}, {{&(0x7f0000001b80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4}}}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001c00)=""/199, 0xc7}], 0x1, &(0x7f0000001d40)=""/216, 0xd8, 0xffffffff}}, {{&(0x7f0000001e40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000001ec0)=""/4096, 0x1000}], 0x1, &(0x7f0000002f00)=""/4096, 0x1000, 0x875}, 0x5}, {{&(0x7f0000003f00)=@l2, 0x80, &(0x7f0000004580)=[{&(0x7f0000003f80)=""/129, 0x81}, {&(0x7f0000004040)=""/224, 0xe0}, {&(0x7f0000004140)=""/85, 0x55}, {&(0x7f00000041c0)=""/12, 0xc}, {&(0x7f0000004200)=""/104, 0x68}, {&(0x7f0000004280)=""/82, 0x52}, {&(0x7f0000004300)=""/252, 0xfc}, {&(0x7f0000004400)=""/148, 0x94}, {&(0x7f00000044c0)=""/66, 0x42}, {&(0x7f0000004540)=""/50, 0x32}], 0xa, &(0x7f0000004640)=""/250, 0xfa, 0xffffffffffffffff}, 0xd8c}, {{&(0x7f0000004740)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000047c0)=""/237, 0xed}], 0x1, 0x0, 0x0, 0x8}, 0x3}, {{&(0x7f0000004900)=@nfc, 0x80, &(0x7f0000004980), 0x0, &(0x7f00000049c0)=""/158, 0x9e, 0x1}, 0x9}, {{&(0x7f0000004a80)=@nfc, 0x80, &(0x7f0000004c00)=[{&(0x7f0000004b00)=""/104, 0x68}, {&(0x7f0000004b80)=""/68, 0x44}], 0x2, 0x0, 0x0, 0x2}}, {{0x0, 0x0, &(0x7f0000004f00)=[{&(0x7f0000004c40)=""/218, 0xda}, {&(0x7f0000004d40)=""/109, 0x6d}, {&(0x7f0000004dc0)=""/139, 0x8b}, {&(0x7f0000004e80)=""/27, 0x1b}, {&(0x7f0000004ec0)}], 0x5, &(0x7f0000004f80)=""/184, 0xb8, 0x199}, 0x8}], 0xa, 0x1, &(0x7f00000052c0)={0x0, 0x989680}) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000005300)=0x600) 05:58:11 executing program 2: r0 = getpgrp(0x0) sched_setattr(r0, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x9}, 0x0) clone(0x200, &(0x7f0000000100), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000040)) mknod(&(0x7f0000000080)='./file0\x00', 0x1040, 0x0) mount$9p_rdma(&(0x7f0000000280)='127.0.0.1\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000380)='9p\x00', 0x20000, &(0x7f0000000540)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@common=@version_L='version=9p2000.L'}, {@sq={'sq', 0x3d, 0x2}}, {@timeout={'timeout'}}, {@timeout={'timeout', 0x3d, 0x9}}]}}) execve(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400), &(0x7f00000000c0)=[&(0x7f0000000300)="6c6f766d6e65743075736572657468315e65746830706070316370757358d9415628afa15f", &(0x7f0000000340)=']\x00']) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=[&(0x7f00000003c0)="6c6f766d6e65743075736572657468315e65746830706070316370757358d9415628afa15f"], &(0x7f0000000800)=[&(0x7f00000006c0)='ppp0#\x00', &(0x7f0000000700)='}\x00', &(0x7f0000000740)='group_id', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='}@\x00'], 0x400) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000040)) ptrace$setregset(0x4205, r1, 0x7, &(0x7f0000000100)={&(0x7f0000000840)="8c34eac17b2139bf5bfb9084ae280bf97ed9be13ef101a76dca013985b95f2ff04284edad0bdcff92253d467446a00bd065b9cba2613f2f649f38ae5906db34d5c1ce2a7f3126f30896c0d7f8213c841faa62f41d5081cb9b6c933f4600dd790d5baa3e810a0343d4972460db9fcd7a2dd22586d8011c447726b0dbd3b26d9736c1e730934e8776ebf690cdc074369636c03bd89b700bf3ec39f1b3b15a2804d0264b849d2b5f3002d15fefaf012974b5cb42c7da90e0f538d544ccd8501", 0xbe}) 05:58:11 executing program 7: futex(&(0x7f000000cffc), 0x80000000000e, 0x0, &(0x7f0000000000)={0x77359400, 0x1}, &(0x7f000001d000), 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x8b, 0x400000) write$FUSE_OPEN(r0, &(0x7f00000010c0)={0x20, 0x0, 0x7, {0x0, 0x1}}, 0x20) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000080)) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f00000000c0)=""/4096) 05:58:11 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e22, @dev}]}, &(0x7f0000000200)=0x10) listen(r0, 0x2) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040)=0x2, 0x4) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r2 = accept4(r0, &(0x7f0000c71ff0)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000f5effc)=0x10, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x200, 0x0) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f00000002c0)) ioctl$KDDELIO(r3, 0x4b35, 0x3) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f00000000c0)) recvfrom$packet(r2, &(0x7f0000000300)=""/89, 0x59, 0x2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x703000) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x2) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x9682, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xb) r4 = add_key(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000380)="5038fabdbe5a6e8d924729a0a5ca79e7435f6566e2668b24fe61a6570be948021a37e72d983b24ece42aa50f16054dbc5939cef3ba837cb69f13951cfb857a3e81a9d23b811ca5ab96357f09f17a2cde71656631970709ff21e131fe148d1b1251992543e183a8fe86fc7aef55eade2d001dc97a46daf72379fc1da1704a86cfdec513315539ea00b14006db070a29771cf6f6aaac74cf19823dd30da29536533b2c432ab3aaeb70dd602d9f520bc2a0053c8f4ffba6840f1644e1b650c7aab69ee7dc99f138", 0xc6, 0xfffffffffffffffb) keyctl$read(0xb, r4, &(0x7f00000002c0), 0x0) 05:58:11 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)) [ 201.947324] IPVS: ftp: loaded support on port[0] = 21 05:58:11 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x2200, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/sequencer2\x00', 0x200, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000001300)={r1, 0x4, 0x0, "459e60d9b10cbf8ca463b6c2d0c8f620635828377f3fcd19539f72f3f65d0c17de1c6c545bad98cb0342702c32c416de93bf8124fcb1"}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0xde3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = socket$kcm(0xa, 0x400000000803, 0x11) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0x13, 0x20000103, &(0x7f0000008000)=ANY=[@ANYBLOB="85000000009502000000000000"], &(0x7f00000000c0)="00d5bca845b47a0a90cc13e70d955f7813bc2cbd7ee8", 0x2, 0x1000, &(0x7f0000000200)=""/4096}, 0x48) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8901, 0x709000) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001240)='/dev/mixer\x00', 0x40, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000001280)=0x7f, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000001340)={r4}) r7 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0xfffffffffffffffb, 0x82) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000001200)) socket$kcm(0x29, 0x2, 0x0) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000001380)={0x2, 0x0, [{0x1, 0x3, 0x0, 0x0, @sint={0x6, 0x3}}, {0x8, 0x3, 0x0, 0x0, @adapter={0x4, 0x8, 0x9, 0x7}}]}) r8 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x890c, &(0x7f0000000000)) openat$cgroup_ro(r6, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x0, 0x0) [ 201.977584] FAT-fs (loop1): Directory bread(block 128) failed 05:58:11 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0xfffffffffffffe05, 0x30, 0xaff, 0x70bd27, 0x0, {0x3}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040)=0x6, 0x4) 05:58:11 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x1000) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x40, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) [ 202.023701] FAT-fs (loop1): Directory bread(block 129) failed [ 202.077565] f2fs_msg: 26 callbacks suppressed [ 202.077579] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 202.089431] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 202.099064] FAT-fs (loop1): Directory bread(block 130) failed [ 202.115825] FAT-fs (loop1): Directory bread(block 131) failed 05:58:11 executing program 7: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x206081, 0x0) epoll_pwait(r0, &(0x7f0000000180)=[{}, {}, {}, {}], 0x4, 0x3, &(0x7f00000001c0)={0x7}, 0x8) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000080)={0x3, 0x0, @pic={0x1, 0x4, 0x2, 0x0, 0x5, 0x100000001, 0x5, 0x7, 0xfff, 0x4, 0x5, 0x2b33, 0x17, 0x8000000000000, 0xffffffff}}) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x28, 0xffffffffffffffff, 0x4}, 0xfffffe4b) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="1800000000005100000000000000000079000000000000099500"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) setsockopt$packet_buf(r1, 0x107, 0x6, &(0x7f0000000040)="87b6b0520fdb724ca78c7241f4cdbedabcfde467f37b747280e98f5c8d47bab5eb9519300b87091e27", 0x8) [ 202.130907] FAT-fs (loop1): Directory bread(block 132) failed [ 202.160045] attempt to access beyond end of device [ 202.165224] loop4: rw=12288, want=8200, limit=20 [ 202.171106] FAT-fs (loop1): Directory bread(block 133) failed 05:58:11 executing program 6: r0 = socket$inet6(0xa, 0x100000003, 0x1) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x8, 0x4) r1 = semget(0x0, 0x0, 0x400) r2 = getuid() lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000340)) openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000500)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000640)=0x46c) r5 = getgid() semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f00000002c0)={{0x1f, r2, r3, r4, r5, 0x2, 0x2}, 0x7ff, 0x4, 0x2}) r6 = socket$inet6(0xa, 0x1, 0x2) ioctl(r6, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev}, 0x1c) [ 202.180140] FAT-fs (loop1): Directory bread(block 134) failed [ 202.227577] F2FS-fs (loop4): invalid crc value [ 202.246355] FAT-fs (loop1): Directory bread(block 135) failed [ 202.254819] attempt to access beyond end of device [ 202.259932] loop4: rw=12288, want=12296, limit=20 05:58:11 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = fcntl$dupfd(r1, 0x406, r0) getsockname$unix(r2, &(0x7f0000000000), &(0x7f00000000c0)=0x6e) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=ANY=[@ANYBLOB='\vc \x00']}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00004ee64e)}) dup3(r1, r0, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 202.274788] FAT-fs (loop1): Directory bread(block 136) failed [ 202.298774] F2FS-fs (loop4): invalid crc value [ 202.303503] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 202.313846] FAT-fs (loop1): Directory bread(block 137) failed [ 202.321123] binder: 15060:15062 unknown command 2122507 [ 202.326949] binder: 15060:15062 ioctl c0306201 204edfd0 returned -22 [ 202.330406] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 202.340726] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 202.375777] attempt to access beyond end of device [ 202.380850] loop4: rw=12288, want=8200, limit=20 [ 202.390094] attempt to access beyond end of device [ 202.395116] loop1: rw=2049, want=310, limit=128 [ 202.399831] Buffer I/O error on dev loop1, logical block 309, lost async page write [ 202.408454] F2FS-fs (loop4): invalid crc value [ 202.413356] attempt to access beyond end of device [ 202.418424] loop4: rw=12288, want=12296, limit=20 [ 202.424145] attempt to access beyond end of device [ 202.429344] loop1: rw=2049, want=311, limit=128 [ 202.434158] Buffer I/O error on dev loop1, logical block 310, lost async page write [ 202.452472] F2FS-fs (loop4): invalid crc value [ 202.457198] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 202.463740] attempt to access beyond end of device [ 202.469120] loop1: rw=2049, want=312, limit=128 [ 202.473855] Buffer I/O error on dev loop1, logical block 311, lost async page write [ 202.483050] attempt to access beyond end of device [ 202.488183] loop1: rw=2049, want=313, limit=128 [ 202.492896] Buffer I/O error on dev loop1, logical block 312, lost async page write [ 202.501386] attempt to access beyond end of device [ 202.506461] loop1: rw=2049, want=326, limit=128 [ 202.511181] Buffer I/O error on dev loop1, logical block 325, lost async page write [ 202.528326] attempt to access beyond end of device [ 202.533366] loop1: rw=2049, want=327, limit=128 [ 202.538083] Buffer I/O error on dev loop1, logical block 326, lost async page write [ 202.546350] attempt to access beyond end of device [ 202.551392] loop1: rw=2049, want=328, limit=128 [ 202.556101] Buffer I/O error on dev loop1, logical block 327, lost async page write [ 202.557999] attempt to access beyond end of device [ 202.564633] attempt to access beyond end of device [ 202.569053] loop4: rw=12288, want=8200, limit=20 [ 202.578837] loop1: rw=2049, want=329, limit=128 [ 202.583541] Buffer I/O error on dev loop1, logical block 328, lost async page write [ 202.599887] attempt to access beyond end of device [ 202.605068] loop4: rw=12288, want=12296, limit=20 [ 202.610735] attempt to access beyond end of device [ 202.615893] loop4: rw=12288, want=8200, limit=20 [ 202.622204] attempt to access beyond end of device [ 202.627330] loop4: rw=12288, want=12296, limit=20 [ 202.649266] IPVS: ftp: loaded support on port[0] = 21 05:58:12 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000180), 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) read(r2, &(0x7f0000000480)=""/203, 0xa6) 05:58:12 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x1fffffffffffff81, &(0x7f0000001fd8)=ANY=[@ANYRESDEC], &(0x7f0000000100)="504c20004cf7d12af11ce92537b5e3191e66de5d4ec18e4c2df01484a86d77842f624946eae310794c8c96ff1466232e25951139bda5d2990e523f8ec3080ffc1224d8dc4c84a9c8e8ab31576806715523fa749e8615c61049b8b1be6aa7740702cc5addf2212fc732cc0b256b2f405c874c77e9451d8e3c186873f268a91fe613cc7f3a0558d4418c96820e9c98bc5c718b190666c0b3030b5a4d6537bafe2b90cd2287b7089ee9a2b9969207b715d591ea36e9f93d43fb07f280cdb3f0dda5bb825d1a20a23ef068ba261178cf88f151", 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0xfe32) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) recvmsg(r0, &(0x7f00000003c0)={&(0x7f0000000280)=@rc, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/88, 0x58, 0x9}, 0x40000022) r2 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0xf4ea, 0x900) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r1, 0x18, r2}, 0x10) 05:58:12 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) accept$unix(r1, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='yeah\x00', 0x5) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) 05:58:12 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)) 05:58:12 executing program 0: socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_IO(r1, 0x2285, &(0x7f00000001c0)={0x53, 0xfffffffffffffffe, 0x2e, 0x80000001, @buffer={0x0, 0x26, &(0x7f0000000040)=""/38}, &(0x7f0000000080)="774d2a264d7e8d9bb02efdc84ae2169d2b4b96a603b85e7f6e80c46c7ac59a63a027dc156793fb2ce892fa5293ce", &(0x7f00000000c0)=""/179, 0x200, 0x12, 0x0, &(0x7f0000000180)}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000240)=0x0) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000280), &(0x7f00000002c0)=0x10) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e21, 0x8, @loopback, 0x401}, 0x1c) r3 = memfd_create(&(0x7f0000000340)='bdevwlan0md5sum\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000380)={0x7, 0x7b, 0x1}, 0x7) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f00000003c0)={r3, r3, 0x3}) close(r1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) fstat(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r5, r6) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000580)={0x1, 0x2, 0x100000001, 0x9, 0x0, 0x9, 0x8, 0x83a6, 0x3, 0x4, 0x3c82, 0x5}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) tee(r0, r1, 0x8001, 0x4) r7 = accept4(r1, &(0x7f00000005c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000640)=0x80, 0x800) symlinkat(&(0x7f0000000680)='./file0\x00', r3, &(0x7f00000006c0)='./file0\x00') ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f0000000700)) ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f0000000740)) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000780), &(0x7f00000007c0)=0x4) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r3, 0x800455d1, &(0x7f0000000800)) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000840)) write$FUSE_LK(r4, &(0x7f0000000880)={0x28, 0xffffffffffffffda, 0x7, {{0x1, 0x0, 0x1, r2}}}, 0x28) r8 = accept(r7, &(0x7f0000000e80)=@hci={0x1f, 0x0}, &(0x7f0000000f00)=0x80) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000f40)=r9) socket$can_bcm(0x1d, 0x2, 0x2) accept$unix(r8, &(0x7f0000000f80)=@abs, &(0x7f0000001000)=0x6e) setsockopt$inet6_mreq(r7, 0x29, 0x15, &(0x7f0000001040)={@mcast2, r9}, 0x14) openat$kvm(0xffffffffffffff9c, &(0x7f0000001080)='/dev/kvm\x00', 0x200, 0x0) 05:58:12 executing program 7: r0 = socket$inet6(0xa, 0x1000000000006, 0x4) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000080)=0x18) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="b890008ee0ea000860000f2211640f23ca0fc7ad03000f22da2e0fc79a0000b807008ed8f3a726360f2114", 0x2b}], 0x1, 0x0, &(0x7f0000000180), 0x0) [ 202.771126] attempt to access beyond end of device [ 202.776226] loop4: rw=12288, want=8200, limit=20 [ 202.793282] attempt to access beyond end of device [ 202.798349] loop4: rw=12288, want=12296, limit=20 [ 202.806710] attempt to access beyond end of device [ 202.811762] loop4: rw=12288, want=8200, limit=20 05:58:12 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x44083, 0x0) r1 = eventfd2(0x40, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x1000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap='nodevmap'}, {@posixacl='posixacl'}, {@version_L='version=9p2000.L'}, {@debug={'debug', 0x3d, 0xffffffffffff0001}}]}}) write$eventfd(r0, &(0x7f0000000180)=0x3f, 0x8) mkdir(&(0x7f0000001140)='./file0\x00', 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, 0x1000}, &(0x7f00000001c0)=0x10) 05:58:12 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x28000, 0x0) recvfrom(r0, &(0x7f0000000140)=""/198, 0xc6, 0x102, 0x0, 0x0) r1 = socket$nl_xfrm(0x11, 0x3, 0x6) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in=@rand_addr, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000380)=0xe8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000240)={0x0, 0x18, "e7802312433e026bd02b3e7eee90946b39930afa27795d00"}, &(0x7f00000003c0)=0x20) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000400)=r3, 0x4) bind$packet(r1, &(0x7f0000001300)={0x11, 0x3, r2}, 0x14) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffd}, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x2b, 0x0, 0x0, 0x0, @loopback, @remote}, @udp={0x0, 0x0, 0x8}}}}}, &(0x7f0000000080)) setsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f00000000c0), 0x1000001a4) 05:58:12 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000879ff8)='./file0\x00', &(0x7f0000106ff8)='./file0\x00', &(0x7f00008d2ffa)='ramfs\x00', 0x0, &(0x7f000063bffe)) mount(&(0x7f0000037000)='./file0\x00', &(0x7f0000c4fff8)='./file0\x00', &(0x7f000002effa)='ramfs\x00', 0x100000, &(0x7f0000ce3000)) mount$9p_virtio(&(0x7f0000000000)='}:\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x800, &(0x7f0000000100)={'trans=virtio,', {[{@access_user='access=user'}, {@cache_mmap='cache=mmap'}, {@cachetag={'cachetag', 0x3d, 'ramfs\x00'}}, {@access_any='access=any'}, {@cache_none='cache=none'}]}}) mount(&(0x7f0000442ff8)='./file0\x00', &(0x7f000039cff8)='./file0\x00', &(0x7f0000ff6000)='9p\x00', 0x1001, 0x0) chroot(&(0x7f0000baf000)='./file0\x00') r0 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x80401) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x80, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) pivot_root(&(0x7f00004cffff)='.', &(0x7f0000432000)='.') [ 202.838951] attempt to access beyond end of device [ 202.844039] loop4: rw=12288, want=12296, limit=20 05:58:12 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x10000, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000002c0)={0x7fffffff, {{0xa, 0x4e24, 0x10000, @mcast1, 0x200}}, {{0xa, 0x4e20, 0x3f, @mcast1, 0x4}}}, 0x108) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='ts\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x26e1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f0000000040)={0x7, 0x3, 0x3, 0x685, 'syz0\x00', 0x7f}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000080)=0xbec) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000100)) [ 202.913708] attempt to access beyond end of device [ 202.918776] loop4: rw=12288, want=8200, limit=20 05:58:12 executing program 7: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$P9_RRENAME(r0, &(0x7f0000000300)={0x7, 0x15, 0x2}, 0x7) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0) mount(&(0x7f0000000000)='A::2:e:\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ceph\x00', 0x0, &(0x7f00000000c0)) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000140)={@empty, 0x0}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@deltfilter={0x24, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, r3, {0xfff3}, {0x7, 0xe}, {0xfff1, 0xffef}}}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x20000000) sendfile(r2, r2, 0x0, 0x7fffff29) write$P9_RXATTRWALK(r0, &(0x7f0000000040)={0xf}, 0xf) 05:58:12 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0x4, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f0000003ffc), &(0x7f0000002000)) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) waitid(0x0, 0x0, &(0x7f0000002ff9), 0xc1000006, 0x0) [ 202.959880] 9pnet_virtio: no channels available for device }: [ 202.966161] attempt to access beyond end of device [ 202.971184] loop4: rw=12288, want=12296, limit=20 [ 202.985838] attempt to access beyond end of device [ 202.990917] loop4: rw=12288, want=8200, limit=20 [ 202.999194] attempt to access beyond end of device [ 203.004330] loop4: rw=12288, want=12296, limit=20 05:58:12 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)) [ 203.009983] 9pnet_virtio: no channels available for device }: 05:58:12 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000380)="0a5cc80700315f85714070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x24000, 0x0) bind$unix(r2, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e23}, 0x6e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r3 = syz_open_pts(r1, 0x0) ioctl$TCSETAF(r3, 0x5412, &(0x7f00000000c0)={0xd}) 05:58:12 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x4, &(0x7f00000002c0)=0x0) close(r0) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x8, 0x2001) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000080)=0x7) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x700000000000}]) [ 203.087932] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop7. [ 203.098478] libceph: bad option at 'minix' [ 203.129284] attempt to access beyond end of device [ 203.134337] loop4: rw=12288, want=8200, limit=20 [ 203.153936] attempt to access beyond end of device [ 203.158997] loop4: rw=12288, want=12296, limit=20 [ 203.177502] binder: BINDER_SET_CONTEXT_MGR already set [ 203.183394] binder: 15060:15156 unknown command 2122507 [ 203.199576] attempt to access beyond end of device [ 203.204645] loop4: rw=12288, want=8200, limit=20 [ 203.217735] binder: 15060:15150 ioctl 40046207 0 returned -16 [ 203.221114] binder: 15060:15156 ioctl c0306201 204edfd0 returned -22 05:58:12 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f00000004c0), 0x1000002c0) sendmmsg(r1, &(0x7f000000d8c0)=[{{0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x24004800}}], 0x1, 0x0) recvfrom(r2, &(0x7f00000005c0)=""/174, 0xae, 0x0, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x703000) r5 = fcntl$dupfd(r3, 0x406, r4) ioctl$KVM_PPC_ALLOCATE_HTAB(r5, 0xc004aea7, &(0x7f0000000040)=0xff) [ 203.256092] attempt to access beyond end of device [ 203.261158] loop4: rw=12288, want=12296, limit=20 [ 203.279432] libceph: bad option at 'minix' [ 203.284866] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop7. 05:58:13 executing program 6: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x4, 0x1) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0x3d, "317f26c4b0f4ab512cf457c37c7f0ec8fee2e31ee3ad8f8cdffd822af39d4cf22949f3d92723d5c96b26d974882fa28c30736ebff553df198d0a0183e9"}, &(0x7f00000000c0)=0x45) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000100)=r1, 0x4) ioctl$KVM_ASSIGN_PCI_DEVICE(r0, 0x8040ae69, &(0x7f0000000140)={0x7, 0x400, 0x9, 0x1, 0x7}) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000180)={0x2f, 0x6, 0x0, {0x2, 0x2, 0x6, 0x0, '{wlan0'}}, 0x2f) syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={r1, 0x8}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000280)={r2, 0x7}, &(0x7f00000002c0)=0x8) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000300)={0x1, 0x1}, 0x8) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000340), &(0x7f0000000380)=0x8) r3 = syz_open_dev$rtc(&(0x7f00000003c0)='/dev/rtc#\x00', 0x3, 0x420000) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000400)={0x1, 0x8}, 0x8) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup/syz0\x00', 0x200002, 0x0) write$FUSE_BMAP(r0, &(0x7f0000000480)={0x18, 0xfffffffffffffffe, 0x6, {0x20}}, 0x18) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@mcast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f00000005c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', r5}) r6 = getpgid(0xffffffffffffffff) fcntl$setown(r0, 0x8, r6) fcntl$getownex(r3, 0x10, &(0x7f0000000640)) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) kcmp$KCMP_EPOLL_TFD(r6, r6, 0x7, r0, &(0x7f0000000680)={r0, r4, 0xce9}) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000006c0)={r1, 0x4}, 0x8) read$eventfd(r0, &(0x7f0000000700), 0x8) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000780)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x7c, r8, 0x101, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bcsh0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000008c0)={'vcan0\x00', {0x2, 0x4e23}}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000900)={0x1, 0x4, [@local, @empty, @dev={[], 0xd}, @local]}) ioctl$KVM_GET_PIT(r7, 0xc048ae65, &(0x7f0000000940)) ioctl$KVM_GET_DIRTY_LOG(r7, 0x4010ae42, &(0x7f00000009c0)={0x2, 0x0, &(0x7f0000ffa000/0x4000)=nil}) 05:58:13 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000040), 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x40485404) 05:58:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x131000, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x2710}, 0x10) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") get_mempolicy(&(0x7f00000001c0), &(0x7f0000000200), 0xfffffffffffffffe, &(0x7f0000ffe000/0x2000)=nil, 0x4000000007) 05:58:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xffffffffffffff9f}}], 0x400000000000159, 0x0, &(0x7f0000000240)={0x0, 0x989680}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ac0)="728d01c8d87c29f7770e", &(0x7f0000000000), 0xa}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1100, 0x6) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000000)) mknod(&(0x7f0000000080)='./file0\x00', 0x120, 0x26e) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:58:13 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) 05:58:13 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)}}, 0x20) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") unlink(&(0x7f00000000c0)='./control/file0\x00') lstat(&(0x7f0000000280)='./control/file0/file0\x00', &(0x7f00000002c0)) rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x8, 0x4) 05:58:13 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000040)="66326673ff", &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)) 05:58:13 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000575000/0x2000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100000, 0x8001) syslog(0x9, &(0x7f0000000000)=""/27, 0x1b) 05:58:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000000) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa8000000000000008000f0fffeffe809000000fff5dd00000009000100070a0100000000000000fcff", 0x58}], 0x1) 05:58:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000011000106000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c000100626f6e64000000000c00020008000d0000000000"], 0x3c}}, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x8501) ioctl$TIOCLINUX2(r2, 0x541c, &(0x7f0000000080)={0x2, 0x8000, 0xbe34, 0xff, 0x20, 0x40}) [ 203.618294] kvm [15184]: vcpu0, guest rIP: 0x44 Hyper-V uhandled wrmsr: 0x40000011 data 0x800000000011 [ 203.642308] kvm [15184]: vcpu0, guest rIP: 0x44 Hyper-V uhandled wrmsr: 0x40000011 data 0x800000000011 [ 203.652045] kvm [15184]: vcpu0, guest rIP: 0x112 Hyper-V uhandled wrmsr: 0x40000012 data 0x0 05:58:13 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f000000ac80)=[{{&(0x7f0000001240)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000001600), 0x0, &(0x7f0000001640)}}, {{0x0, 0x0, &(0x7f0000002bc0), 0x0, &(0x7f0000000080)=[{0x10, 0x29, 0x8}], 0x10}}], 0x2, 0x0) recvfrom$inet6(r0, &(0x7f00000000c0)=""/167, 0xa7, 0x1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @local, 0xff}, 0x1c) [ 203.660961] kvm [15184]: vcpu0, guest rIP: 0x112 Hyper-V uhandled wrmsr: 0x40000013 data 0x0 [ 203.686759] kvm [15184]: vcpu0, guest rIP: 0x112 Hyper-V uhandled wrmsr: 0x40000011 data 0x0 [ 203.700134] netlink: 64 bytes leftover after parsing attributes in process `syz-executor3'. 05:58:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000480)='syz_tun\x00', 0x19) socketpair(0xa, 0x5, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCLINUX2(r1, 0x541c, &(0x7f0000000040)={0x2, 0x5, 0x8001, 0xb9c, 0xffffffff, 0x3}) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x200408d6, &(0x7f00000011c0)={0xa, 0x0, 0x0, @remote}, 0x1c) mkdirat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x1ff) 05:58:13 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000c00], 0x0, &(0x7f0000000000), &(0x7f00000003c0)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES32]]]}, 0x80) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = getpid() fcntl$lock(r0, 0x6, &(0x7f0000000140)={0x0, 0x4, 0x7f, 0xfffffffffffffffa, r3}) bind$unix(r0, &(0x7f0000000040)=@file={0x1}, 0x6e) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x400, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000300)={0x1}, 0x4) bind$unix(r1, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x1}, 0x6e) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000400)={0x4, 0x8, 0xfa00, {r5, 0x3}}, 0x10) bind$unix(r2, &(0x7f0000000200)=@abs={0x1}, 0x19) 05:58:13 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udplite\x00') ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000040)={0x6f10, 0x101, 0x5, 'queue1\x00', 0x5}) fallocate(r0, 0x2, 0x6, 0x100) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000100)={0x8d, 0x1, 0x4, 'queue0\x00', 0x314a}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0xcc, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xd}}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, @in6={0xa, 0x4e21, 0x100, @mcast1, 0x4483}, @in6={0xa, 0x4e21, 0xfffffffffffffffb, @mcast2, 0x200}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e22, 0x9, @local, 0x3ff}, @in6={0xa, 0x4e21, 0x2, @mcast2, 0x100}, @in6={0xa, 0x4e24, 0x5, @loopback, 0x6c}]}, &(0x7f0000000300)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000340)=@sack_info={r1, 0x776, 0x8}, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380)='vlan0\x00', 0x10) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f00000003c0)=""/103) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x282000, 0x0) syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x400482) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f00000004c0)=""/19) getsockopt$sock_buf(r2, 0x1, 0x1f, &(0x7f0000000500)=""/100, &(0x7f0000000580)=0x64) r3 = semget(0x1, 0x1, 0x2) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) semtimedop(r3, &(0x7f00000005c0)=[{0x2, 0x50, 0x1000}, {0x1, 0x1ff, 0x1000}, {0x7, 0x7ff, 0x1800}, {0x1, 0xb8, 0x800}, {0x2, 0x8001, 0x1800}], 0x5, &(0x7f0000000640)={r4, r5+30000000}) r6 = add_key(&(0x7f0000000740)='.dead\x00', &(0x7f0000000780)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000007c0)="5fa70b7d5358f14d7ad644347dd7823af6db0db7c7ad07f9438e0bb5d503fcf6ec0e13da722ee35aced0ec3680ac7ca763cb0fa373ec57d82e65dd20213fbac1fe2fed604f7df1aa7d3f6b4641fbdab02a70702df8494c5a4d997421c5c3b4a1e2ca5181659ee5b56552226ddb688fd4f81a06e8705b890e544142ef07a8e7ba24dfbaa287788958034ec74108da57a7622b1a60a89c944af7f67ccffaeb8d7022e39b5c83c7e755f7ac77b7cc054e839ef8db512fae2cc3e056f2734f3ff09b8a8c54ad70be806d48378f5e483daf4a506d92a5c1fef93e22ad81b965d0db915aa83144ad0519fb1f130d774eb4be5ab7e6d57c0de45deb948380ad0e07a8aa65617c90e32da4e1d13716b3f69e0aae8185125db17a1dc42b456d0a67d344e178a738600b1e91dd2f5c33ea2873e3888ac7d81e68e317fdec8d9a6e03ff2deaefb4deaae5c547e3341bb90143383a6b6f8ce4f681667aa4a38818f4edc5be5b63c46676f1c8c5d40a5bce3c38e92120ea26fee36c1a41863173989489e263f8bbea71c8ca5e6517b63873801f5e73e667ce2116bd24a316ca6d11ab0dfcbe6d22a811fdaa8122bbe4b3d007831ee9f2bfff5b35a7220181cc3837981f457c0c44a8680c9f416038c7f219df8a7d215cbbe36a2c521689fcb5197a0e866163695d4d57ba759eca0ec30a11e6bc5ac9d4d22fbaef31726b914c3ddefb8c4eec3bd4656ce5dee7ed664372cb6b8f0494bfb51b1e6303056247b75ae9e592dc2821fbba9a938c51cd8f6a636d0009e8ff1ee690ea5fb97815fc8e66300e1e6647a39186106a46bb871b17d464fe1706be7d417fa53184f51abf605c851d422e9b99127b09374e72b4f57ae7bc95cb6fffb437717c2d23f9c108621511a34035df0e2efd01701250750f561ea919410589c7c3cb8de5b42236947d935894c0d9207215552e7093aece215536b453a7e8ade8dd92d50a47f7dc6f5458d495cb37bfccbd1180c0d48dd766d3eea51300ae1975264a90d8682950b4790ae120887137463b7586f1a5dc6e8d4b7d5b82e9de09c59578aeff570ae8c10440da0cd14acbebb76d8b3db619c7623ec3f5aa00dad18a34b0b79b930aaacebd36e61aab80a01f4b0ac98e218472ab7f47b832234126788f8d5f5b92858fef3dec1cd3d0e57a59c717d49764d373350f9bdd7fc2ddc0fe8966021d4ea3a71b9f98827206bfb023debd10895f28d6ebf676107cbb4ddc1d1f25d9bbb26c37df3be8f224691051785b6fd1874cb5d6f0659600391723bd6ad5061c6953294e629df18cad196ef0787ca27673abfb056baf36949bcdfa448ffefa4bb0d60e5272a96e2aa119654310ad4409c6d20dcbe6cb23950d7fed57a9f2bbf4eddb151408da6c832ff564a6d56098125a36cd4106eced8a017ffc579f145c8b431548f239fb5d29687fa74b2b6da675598179c5cd74d5485d2bbb3d8bea13a33360b89b939a755b14f07de716329cbd56ddf34272c0d7167097ccdc5b03b6361ba5ab8128c5f9553f9386ab83c6e648d5fa5c9353f94ed2d82d99b94c888207060ad065bf72ee966acdaf189563f54ce1043c0aeb8e6a0411779b7f663ffc21138ec16f8e45e05ca258e36ed8d7bab8650c7ffba242a8e8fc0d682e370846ce8aff61b2645796a51e9f5ec64ff1e6716225db44663702f0a4b3d7eb32f721d3fa68c5ba65c73554d7ca6893570a08329a228b03cd596604f611181a7a8129712dc094162efcdcc7d5425ffb86a7f42c073d51256a278486c4347e2c6aa0ed7ec67c6d61be9a45824ada9f6e6df443cd1ff2e46a486fafb0d0502c8f29be43b1bc505de91a26496b1494eb87fb9d6bd378c1381f6e8240885cc209f20e60c37425802da8bc7ca2f79ee2ce1217d089a7dbf71338cca6207c3e1d9d4c40fc74e69fdfe31d9894d35ba323f98571ba14c0be20d232a383689997449f3a4d461a91dfecae0ac8227484af9217bbcb70088b4397006deed5fd127fe37e5cfe6537164beb9c6e388e5e7bb8e187c1f64fdddd335d7397c2ff351567fc605c50b5f303c006cdf7e4feb975f76464facaf007ab32233fb1b1dcd7b11024a785b37de3c3e4065a6a3eb54c8b6d07629176e953b1bee296847bc5fc16def800c9d18dc35e7f308bb4c35cb3319f3225f7a80c16602ac281d911f42fe04f441f2f6d683ff3a42e445614b69a50c936943d3d6dc70a83c91c44b43ebb56ea02ec957ab79258af8ed541f9db056f7dc168df52a7721dabf3c13494aa06a3779b3a6e27745ccdbd24ea4c332acf89fbe568c9bae771ce6819a5b0926edc31875f618470845e472076bb66cd18df7c89142bb66de903716fd32f21cb9f38e41c7c6e72be81a72431ee192933e82a3da6068f0222e4ad0c10a87eef68876137a9529bd44a7856e4e804c2320ab0969fe31715f6c04602d508fc11b8854e02cbec92e3ca3ac6121b39f493cdf691387909f4937f5d6d3649d06401fcade79d4998d5359a9abcb8deb01f95fadc116a1bb53cbf4fbbb8fe25835b75f1ebc54d57e4761d58efcae011c9ef7de7a1464907abb8d8773a769ada162f3211b07bba9061e2500ebf66dff4ca17e04a409105909949fd723c6ee3999501b340687d61caa4fcedd27f4025399a19547fced92c517e1709a8626b417cbfa18f32bbe2dba0d928759287fd982e1ec602c0d7dbd9f1c672e65c22db58d60859952ae80ea13b3e93073a16305e28f29c7beb9d6e97d7c7eb8f85434828831b4426e5cf5364685a4352cffe97cb4debf3c517843ce2055ba3d70d8e5e381504ba3666b572492de38351623cdbd7e1c1b707d9dbf9d3b25d034dae3b425255b33a6281a2f4a3b85d885091e4948381346cd2398b0c63562b20972ce9779aec3c24b757fa1127d21716990f05afbbbe2c505259f0a43a44bc4871e748f776133408a02ec379f8592b523e8bf41d3a7ee0709a70c7fc062798c473c6f712179dd7609c5b0f3ca7e3899913cfffffcc63c921b5779c1cae01fccaf496df96a14ffb1cf26674feba7c969e467710a25ee5aa03f8a4e95633a4d66d66b2ff4f071cf83a0ab7fe9232c3f3b2076113b4330864dd9a8f05ee7d1ffca67259e1884e091bb3d01096a4120e720159b6f9a015e5a805915a0f9fdc604ec30c0db77066336691a45885616d6964bc284792eca5598bbf20047e94eed3410f39be4b404d47b5f0d8d37914def02ecb760c30e3668343cc63956acc3149bfec8a737692a09329b35c3bc1ec440ca8c6f4e1a4405c82f0ff56c10791b00ae92c0c5a550784c4bb3d09d7a8f37027d69f13acae5a12af08c7d697c0fcf3024dbfd19bf82a670ae3e16d475864459ffdcd5e0d82b0f0c8bd6c5b796d79585d2048e8ce87fe2450be3f13a03de97493781a22e361c0a76a3f790493adbd0565346e1680eeaa7c7514dc15a81fa3e79487277c2519de44d134d8854a480423cb0df12543d0f74dc909181d030d67b9221bea79f29a06c1e92370339feac2f590257caabb213b1cd48738384d3cea40b689c355930a4f9e84f968517b335e5233dc4b194a22eac3aeb221ea091220d02d6648494feeaa693fe330dc764110eca5dbbd51ba54586782c86ab233e9cf358c8d12bc890b41df8c87efcbe077a3f19faf7fd48340dd55603c27650c3351be948d3a8f49352de8457bc317e4d07ca5cd2b244e4fee01afc6ea6b49788c64b5508a9e51b62f7cac9b77b51bf953bbbb71c094f948851d9c2dec74c3568a944b6f74b958ed7d43bd51a110980445782e30dce9026adad7d4dc73e0a7c80da61631b872fa0a9e28295ce6ae4ddca526cb7f58fbed7438317b1b32d1349487f0e7ad6420c125429c5a17ebbe8fba1fbc68b5ec0f8158883b56bd0516d7a79ea43f8b2f6cf4ba5e8020c7d87fdc21a3708f1724ef7654e3126c97bf0320500e662245e6e3ac2cfe56f2278b4db1eff7903fcdd4d8a22ad73db485f3b440721a531f5ea735744b5a693e108859c4c2d3c62f834f991f73f97175461d2b475041e50d565cd7c76670e636e1205d2be4a1222400a4c6f9db8983749e36549691f9ae6cd499a2317e335584f3924d01b345bdae743d1512c849d010d54fd3f1dce598c76337b4759e88e19f8c2c4335cbe73b9e359c8014adf40108798eaae741f7b59f05d0f096b1c5ed87dca3497868c400a864f08a0df33505330c3e53f6a541ebc5c84cb609702429fa38888d4aa10ee04e08f64cef492467ed1856ff5fcca4934fe0d00ef3e21830a695360aaa8465a30a73fa45ece264daf635a3ed27fcc58a04173ea015903227e4a16f444e6954323130370c267c244b20fb3fa950be57b0b25bb74dca3d319926d7f627542b3510e445db51f19686763dc648c0a701ad137cb847a42d2ac397f66eaf6fa77baf9418eaa17521ea503394e9020a663e0471508a49ee15e885f2c258ce12cad7a2e5544892ea5c85d79ad84d5e4581ea827b4a3b86f99e1d09285c97c51ab46980d73777e30b38b67bde42dcb39150691ca5d02c6f2cca49dbdd47833ca68fb8bd9d83ca291f3f85b275b37148ecc204cc7a50320242413d6fe2a1aac25a4c4a61fd5c865c46ff8e8dc056e7ac4ce4d5365a4fc2c24e396c8de1b88e28ee03a444d2c32ccad279cebaec0c1a76ded2b72a7cd4c3e6f4508b0b8e37dce4f1cacd2290095d122b154dc2ae431772a3d8d6593cdf9551f83169197e620cbacf646f7abf669f6a39a6537887572bedcdcef2cf749c13b1d00b4f16a63e164525e24a713d2aa1a8bef9103c302eb572cfc0b5e1d2daffcd4ea22040435a2036b4fa5ecf433f2463eb19ed253978b60c0f85e52bc144fb7e0736b6ef16aa60a6220754b1b2ff99d4a66d978f7f6f7ac30d6af64e8e2d944fab71a89cb2bf623adf75f18c41a674f2690753cc4f7b7ed7d33788662a721c6c5a9d72da376846bf49a008c27aef8e48150a8a0d7fb7f07eb43632e22961933ad2e587702d4d822ae218cb11d58fec43d6fc2e6e955a46391030fb5ae4d7941c60833ebb41c9af63ee4697b7d3e0c54df4e886903f9b752fda970cb8e85956141c9c3976bce6cba4bd45e7b6a844d6e1404155d00697b80b199b0802caa037ad5e1bbf831f1d8d3597523495dae897599eb370290cdce1036d21a7d576546842bd4f2b3821d19ef9c13814e71302110bf4cac66b613f9aca8772520f829ef7722e294b874b116edd613abbf50f071f4c6f9dbc2d2cdcf3214d24b5682e6b463d02d0312f85ed1ee96a891a8b6778cf097195c2db309bc26da01d7a63dcccef6308518c468fa84a91a2abd96dbb730407c9e0750db384c68b403423830cb57688e63214b369177d0a331db70a1aa0449f72886165b20901147b4c3471e101ff180d20d80bb61997edc8c8ee98ddaf01b35be536b36fb3129c26f213110806e3078e31576831e95dcf7c25f809146eb69d13aa29facca4931889937b41066b06241badcf378895bfa70fbee0dbc6f66a0a272cd6ac9039936c084f7db06a9dce8ca929befe61e9c0d3ce3a4438ded36794570a11da7b384342d2989251c7a8530a3c5de344ce6df96a2ef6ed11762109301882a2d2de77ff3bac530a309222b8f058bfb4636b432218039896f292cf140536130d615e3b60edaa206bed6566461dab91d6053651d27668ffedbea3012fdb7cf576c6be45b5591687d69bb2b6f20b3d7fcf8cb8142ae99395e6d682a58a1cf57ec29322e4da8a752a6b4537aeeff0111b2413251543e08a6dd9751756f3681f61ec28", 0x1000, 0xfffffffffffffffb) add_key$user(&(0x7f0000000680)='user\x00', &(0x7f00000006c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000700)="be4f", 0x2, r6) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f00000017c0)="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") ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000018c0)={'veth0_to_bond\x00'}) r7 = syz_open_dev$sndseq(&(0x7f0000001900)='/dev/snd/seq\x00', 0x0, 0x40) request_key(&(0x7f0000001940)='user\x00', &(0x7f0000001980)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000019c0)='queue0\x00', r6) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000001a00), 0x4) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000001a40)="c6a3f674b50d6eb0c41957cb88dcc374", 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000002240)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002200)={&(0x7f0000001ac0)=@newtaction={0x704, 0x30, 0x400, 0x70bd2c, 0x25dfdbff, {0x0, 0xffffffffffffffd7, 0x9}, [{0x110, 0x1, @m_nat={0x10c, 0x17, {{0x8, 0x1, 'nat\x00'}, {0x2c, 0x2, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x9, 0x20000003, 0x0, 0x200}, @dev={0xac, 0x14, 0x14, 0x13}, @rand_addr=0x4, 0xffffffff, 0x1}}}, {0xd0, 0x6, "a53e3b494fd6cc849066ca8be0a69a5b39d669cf6a9e020e085bc25b215d5e183f8cc33911a53b90e455cf1aa0fa870c82e12e78667e7c1b3a042563f25cd92da6815debe3ebc374b771e235f1307367c2852adc1aec9871a17f1c3f640c5394871bcdd64876363466cd9313b3edb9ee8cc928a1c79a03f0d0b29f593736f725e3a42aeeb79ddbdddb45382a1fe922dc076e93e1e8c8dfaef090115e3d7031350e3de419f22853b2a4a46e4a9232a2b70d5009ac43c7844faf45d0559649b1d39c41cb8fbb3853cb48567a"}}}}, {0x1c0, 0x1, @m_ife={0x1bc, 0x0, {{0x8, 0x1, 'ife\x00'}, {0xa8, 0x2, [@TCA_IFE_METALST={0x4}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x1, 0x4, 0xd5b, 0x4}}}, @TCA_IFE_SMAC={0xc, 0x4, @local}, @TCA_IFE_METALST={0x38, 0x6, [@IFE_META_TCINDEX={0x8, 0x5, @val=0x3}, @IFE_META_TCINDEX={0x8, 0x5, @val=0x8000}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x6}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x8, 0x5, @val=0x2}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffffffffffff7, 0x1ff, 0x0, 0x4, 0xd4}, 0x1}}, @TCA_IFE_SMAC={0xc, 0x4, @dev={[], 0xe}}, @TCA_IFE_SMAC={0xc, 0x4, @remote}, @TCA_IFE_SMAC={0xc, 0x4, @local}]}, {0x104, 0x6, "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"}}}}, {0x144, 0x1, @m_sample={0x140, 0x3, {{0xc, 0x1, 'sample\x00'}, {0x3c, 0x2, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x4, 0x5, 0x10000007, 0x32, 0x3f}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3ff}]}, {0xf0, 0x6, "0581075c32276b526d15b6fc0a8ec6ca33234a2f2877d8a91c95781854ecdb32d95b79ad6b3ee62638ecb0d95163bcd68d872a4c685a7ddab4d36dedb9f99e519a182fbcfbb748ee422cd05e99ebd37e32610021386b1724cccdade4d2b08d876d073aabe24267cb4fa3a3b89f57070779d097a4359662739c237124748e8ca85aaacc5a47e81efd66441d86a7f1be144678686602839a89380ed35923fe802fb2df72e252fb162bf1405e642d73ac16ff6f264d758c3a0f8ca4283b4b5b64dd5b61bfb8c1d6a70f7ec602efadd488e39c9d8f1e0d57ae7b8c73acf0a84b55ef1997f42393138ff5655ae1"}}}}, {0xd4, 0x1, @m_skbedit={0xd0, 0x11, {{0xc, 0x1, 'skbedit\x00'}, {0x14, 0x2, [@TCA_SKBEDIT_PTYPE={0x8, 0x7, 0x7}, @TCA_SKBEDIT_QUEUE_MAPPING={0x8, 0x4, 0x100}]}, {0xa8, 0x6, "7b786f1eb30ae5b81a2b54062ac0f415265bf501b2f85f70d60a345facc8a21695c40d139757b467b35bf9cda06ceb6435ec28d2c1457e7728d89bbe3c10eebd647bc26ab90b314130e5410cc37fc9a4d5c9624071e1ca7fed422e2dc655fac7f2cf046dbf0374801aa3c425dbac87eb5cc43232dc45f48d3ae16230a177d7ab29fa6f839add980cb8226cf06ee1f1c2de784874aef2e702c321fa0436f38ba866ea4568"}}}}, {0x90, 0x1, @m_vlan={0x8c, 0x7, {{0xc, 0x1, 'vlan\x00'}, {0x74, 0x2, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x3432, 0x5, 0x77, 0x4c}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x8, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_ID={0x8, 0x3, 0x222}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x8, 0x4, 0x89a8}, @TCA_VLAN_PUSH_VLAN_ID={0x8, 0x3, 0x76e}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x3ff, 0x3, 0x8, 0x100000000}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x8, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x8, 0x6, 0x7}]}, {0x4}}}}, {0x178, 0x1, @m_simple={0x174, 0xb, {{0xc, 0x1, 'simple\x00'}, {0x5c, 0x2, [@TCA_DEF_PARMS={0x18, 0x2, {0x6c, 0x1, 0x6, 0x8, 0x100000000}}, @TCA_DEF_DATA={0xc, 0x3, 'queue0\x00'}, @TCA_DEF_DATA={0x20, 0x3, ',usercpusetsecurity!cgroup#\x00'}, @TCA_DEF_DATA={0xc, 0x3, 'queue1\x00'}, @TCA_DEF_DATA={0x8, 0x3, '--#\x00'}]}, {0x104, 0x6, "362534569bab586ac9f5cede9d9d38be29a22313837749386d4b86c6b2c0be8a8611adbe95c136b6dac2469caff4793797f3ade0d1016a356c0451c1a362d39c1e73d395bacdd0a6341fafda6704f1d31aa390cc0309af80b96f85defe84477a70c53d544e2a2ce8f8f6c0cc8ef2f2711b350d1c49e71735e07779a0e70ac153989ae46652495ea124550b305b7ae209eb585fd6970f24f8f1a6de3a21735c215a3b565a0c53d1ada2c441d2b054244b7b936bbca532118d9f7c5a7ea7b3d204a72e84015646b62774d7d43aa292cb1fdd053ba37be4f1fa9d757cb74bea97e49f5c4ed6e59f8da0c52dd3f63dfe2dee0759ae80ccfee6ad0cf76dd1bedbb5"}}}}]}, 0x704}, 0x1, 0x0, 0x0, 0x24004000}, 0x48000) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000002280)={0x7, 0x14, 0x4d7, 0x4, "532ae67720d63217815ab088caddbace325fe67de53fc16da9ed1ff585c83d7f"}) write$FUSE_OPEN(r2, &(0x7f00000022c0)={0x20, 0x0, 0x8, {0x0, 0x7}}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x46, &(0x7f0000002300)=0x64d, 0x4) setsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000002340)="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", 0x1000) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000003340)={{0xffffffffffffffff, 0x2, 0x40, 0x3, 0x1}, 0x3, 0x20, 0xfff}) fsync(r7) 05:58:13 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) read(r0, &(0x7f0000000180)=""/11, 0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)) r4 = syz_open_pts(r0, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x200000, 0x0) ioctl$RNDADDTOENTCNT(r5, 0x40045201, &(0x7f0000000100)=0xe) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000140)) dup2(r2, r4) 05:58:13 executing program 0: socket$netlink(0x10, 0x3, 0xa) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x8, 0x2, 0xffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) linkat(r1, &(0x7f0000000240)='./file0\x00', r2, &(0x7f0000000280)='./file0\x00', 0x1400) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="4bbfeba66a15a86d74c3e8a48ba23b297fa5689dd690a742249029b813afffe44b0e62578dff0b67bbb9bdc87552"], &(0x7f00000001c0)=0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0x4, @empty, 0x7ff}, @in={0x2, 0x4e23, @remote}], 0x2c) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000200), 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/dev_mcast\x00') stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc) getegid() getgid() stat(&(0x7f0000001640)='./file0/file0\x00', &(0x7f0000000540)) geteuid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) getgroups(0x4, &(0x7f0000000640)=[0xee00, 0x0, 0x0, 0x0]) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000001580)=@nat={'nat\x00', 0x19, 0x5, 0x370, [0x20000680, 0x0, 0x0, 0x2000077c, 0x200009c0], 0x0, &(0x7f0000000380), &(0x7f0000000680)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x9, 0x10, 0x8884, 'bcsf0\x00', 'veth0\x00', 'veth0_to_team\x00', 'bond0\x00', @broadcast, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x9c, 0x9c, 0xcc, [@cpu={'cpu\x00', 0x8, {{0xc4}}}]}}, @arpreply={'arpreply\x00', 0xc, {{@local, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x2, [{{{0x5, 0x4, 0x8eff, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veth1\x00', @remote, [0xff, 0x0, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xbf293e6f7cbd676f, 0xff], 0x70, 0xcc, 0x114}, [@snat={'snat\x00', 0xc, {{@local, 0xffffffffffffffff}}}, @common=@mark={'mark\x00', 0x8, {{0xffffffc0, 0xfffffffffffffffc}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x24, {{0x8, 'syz1\x00', 0x800}}}}, {{{0x0, 0x10, 0xfbfb, 'team0\x00', 'eql\x00', 'team_slave_1\x00', 'dummy0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], @remote, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], 0x70, 0xd0, 0x100}, [@arpreply={'arpreply\x00', 0xc, {{@empty, 0xfffffffffffffffd}}}, @snat={'snat\x00', 0xc, {{@random="7e5f928f3509", 0xfffffffffffffffe}}}]}, @snat={'snat\x00', 0xc, {{@random="fb287e438640", 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x5, 0xa99c262bfff77ac}]}, 0x428) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000000040), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f00000000c0), 0x8}) ioctl$RTC_AIE_OFF(r1, 0x7002) r4 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) setsockopt$packet_buf(r1, 0x107, 0xd, &(0x7f0000000a40)="a45a3fcdae88bc0bb640d1f07b6563796182d9c31abb1e206fc72f86a503d39b1ef43be5b02ff6da802a356ce0cdc566796aa7f69a2dc2e08d1af77eb9ff8a75d229a8f7227a", 0x46) setsockopt$inet_buf(r1, 0x0, 0x0, &(0x7f0000000340)="e491e2af322266621f168d45fccef3594e23cb8ae334ddfbba5aa865905a8e1a057506a54e631d9bb5c2", 0x2a) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f00000002c0)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000002000000000000ee00000000000000000000f1033a53c15e7b740000000000000000000000000000"], 0x48) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x10, 0xffffffffffffffff, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={&(0x7f0000000040), &(0x7f00000000c0)}}) mq_timedsend(r4, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) 05:58:13 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)) 05:58:13 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") clock_adjtime(0x0, &(0x7f0000000640)={0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) r1 = gettid() r2 = memfd_create(&(0x7f0000000100)="73797374656d650dfe487468312d47506c008dec0d9401d62eb5a80e5b871579d89f9414773f09eb0abd9a21cdfc0000105232ade147aa8b17e4e11052890000", 0x2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x10000) tkill(r1, 0x14) delete_module(&(0x7f0000000000)='systemeth1-GPL\x00', 0x800) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001d40)='/dev/sequencer2\x00', 0x80, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000140)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@remote}}, &(0x7f0000000040)=0xe8) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000240)=0xc) sendmsg$netlink(r2, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000740)={0x13d4, 0x26, 0x8, 0x70bd2c, 0x25dfdbfc, "", [@generic="c9b8f3809efca8d0e55e7e56ca511b8f46fc119449dce852b7fa5781bc4d0a32e2ddc128c35fb68c5dd525fba126e86180becda6c6f32d8bcd08648e6f1a21a4a0744815d30604a25d4b2823c890b8360817621e931e155266ed296d6dcafce23eed8a172702acf6de44d8550d91620e0ee6ed46f9fb055687af0c175eb1a9534cea3a2f05b91c08e855ed9fe34df11a82188edaafe2e223cd872a055e38ccde4412f524dbf251f5689a99dbb653fe92352145a53d161ad9426d", @typed={0x8, 0xf, @u32=0x10000}, @nested={0x11e4, 0x44, [@generic="a690883c7cc369bdffd5fe839bd590c12b15b6b8db552fac0b4029f09acd4513c5224a28cd75b6e6521c592c03121f32039f38497913b7f991dd8438e54e6eda7ed6fcb4cd7606032f24ee469497564a31e30b3d35f26f71a4af6acae0c0c89d52e8315279e1c9cc33cf48bc656989373220bc7beb8171d2b1043aea6ea583f3c6c40139788f8f44a6e8d00229c63d49237ba057fe86c015bdcc6a700bce1f008579716cf723fad0177233a27e7d70c3b3f5492c55a9d2d324ce30a4733d", @generic="7c9cb4c50a5fa7c2196090981e941684f3011112688bba16873ed9dc38c6c0f86335398672afe9a4371e085b26cfe7e393e5a3b497b9984799cec048f2f3ab4f581a5cfb8d7529dcb19264cc524b2d6aaa189db655627d97f9d69397121499ac36d350daa8517c3ad043d33e8ad23ae2b54b1ec1d96e3bd6d1b311ca24ee8d1e92e61a90e6c7804ef854a01c814b27ead109a9951421911b1306ff981e07b5619577f55780c6d44e6adbd2ee1096c2376052734ed76ee900567325f6ee0215a25f2c831aa4e0e6b36bcdf2deef447f9c96a95fb8ce59e15f362ecc14bd0f1a3275339bae7f430d20efaf473233927eb611d74792f2c521b978f3f270244463f13fc35191e418edf4c86ea5ed881100aed2d9e7dde8d2f05ff82277f3b7b1b32cd75aef3a7fd555b6f9c52c64f35fc96def427912db7f404cb34604f6a11fcbed391b94b0ccf56b419ae6b8fa78f8adc757416f499b71c31af633abf2a6022d0f8e77a0c8bbb39b4a763de888bbee06eba29e6de9b55fa57acc066518e3c8e854bbf7b8ca5bd75279f2b9191868df45d14dd9cb815ef4e36d0b167ec28440f1b8730e866dffd120671997a1d429e032cb184e524a872dd115775a769f33235ce481881fe905bdc10659837737152006b4dba8a597d29e71c338a4b3404cc9c356984a76d6bed289064e7cc3646a0841fd3eb3698d1ef0e7bd8ab98f07fad0e466e86451295cbff9f10135585bf95c7684aebbaed203b6c9f22eb3dd4a707cd7c5af0b51776c2d79d82ffb4b3e3001d52fcc2f5875fb949322216ad0fa83f3e542de5c399d0dac97b38055c4826665d3c03666703d839f1939723f59f6f5222829640c0679a94233dd7b87ccc987bd8721119f89095376ca22884f19214f7ce66a20db24df999f03dd98d5618be8cbab7b395fab5084f31feb48b2020b0c132e9eeba9d559f787d1940070e2d10db2ab9cd010c4dbcf7d69193dac2eb4e8c28d689e6828fb9b0368a2584b9900716d0511309f4af958409392b96b4d9b26a33f999af5398c5e52ec6918d8c0358b74b4946042e08af74fed9d0c4d15e26b1f69d675330ae954f33e51995da8a09ebd0744b85cb3299746c04f64262c475e0effd6b131d553b3e96935bf2192cc8ff0186e6e0fc320d14e8cb007fb0f084e4b344b6267ded8b808b583d1699c038c01aaf71a26ee2c632e6510a672c5e8c6ca57138488f754557094e2a8172ce207f6d0fa034ceaee4c9aa12cfff27a847b3aea5f7b00da09dfa92dc3e7b5b30d8118e9d6ac99ee005fdaecb6239dcb03abb3b8e496ce0f7845f035b9d200ad7a04b9db86df5bf370cabba2c7c8ab6289d33bc1391470d8808f6ac7df572635eaa2efad2f070b52de5a417d34a8bd637dc859c2c108e96aa6d0aaba864cd284b57a6b758c726677988142c0f880969a45757d2c27a2e6afe05c18b60734ae213ec29eea8124c87d92162608b6ab0ffcdbc4faa189cdd845b8e6594c1ad2db5e426864c2da7f56c8a7f125aca1d97261df965246b1b9e4e582f25a54db2ccb5f7a118f4872fecbf5fcc99fc63f3d617097d47168935b6c4f4bec5c1f6646ffcebf443d4e05ce325bfa0a1f62c39585629c5edfbb800655c3571cc673d1284b31aa86516ab78ed476d59e72cb4f2eb7b03701665bc832e637fbacf68d6c0ce71f31697e74ee4b070b92175f2aa7f92bf6a29c2ce23f93e5d49cb2fe981d4e9575ea475b5cd3d89e7a2cf7598d502f714785668959ce0b2beaeb7d5e1e160a09494b4873d5fc20b439ef99f09602394fde90c9a909603647c06f2052d7c0686367a8f7211afc3867c17f5dc532f4b463630a014f0789ea4cc319957ec86101450f6d49ca0cd22917d19ef97aec0685207784e6a7fd5dd0b9e327fade8ec57a9aa8ed534be7a6f39a6fddd1e0f8612842adcb9a7a65bda609b54af007f15f9de5020f54dbb621ef0f95e791acac848d72472ccd43130037a4850ee4745422e42852f28d764e2990ca7595a5a9767acc37547ff6bb9ccc1e6cac2fdd53f59db8caba3c38ac5d76ee20129a2a110634dfd2d0e5fcc092f877435c6103ac42d2bf260dfe986d26e68b7dd42137542b9810c919f02431bad7d3b2a759d6251d7405e37ec89e4f5f0667f92c49c66a1541b3d50df4ff01586bcb302c7fdfcfa96803e6c9e249a430e9bb29b88b2ac2199f6ccbec3be3b95a2e6d11e850ea24a5891aea4d05faaf7e0e943d2a1e5a13b3711f65c2d7c70c8b15bb94bda248b30038d909d6f2f05b3370c348516469bbd60f5b14e01d6b7f72898da37acbf688e82c0f4a806f6984fc8a86239bcc70f9be9d6e99c1c60af66583fa34c77c40dec67e60ebb5af91901e9356004b773391162e954507e844d327070e764c68f0f984a3452cb2650e3e2d9a98146975cfa39233ff29618faea13fb9e23d6cfef64a784c34ad9115234bc5602bd23d6681666fd85822c26bdd53ee2d3b4fd4f0e7aa2553e34174a0418fe848ac4a8845cba2744b2bb51a802efa1891ed9ff5d84054d72229d307767373f0a372d7c344df0976a394fa88660f2ce4c3ce90c66b89c2e06835e1b533963f8c33cce83edfaa7775d4fb616fb48f537d8a3a7f28a87d7829be7b68b10b4b9c09accaf5835792dfb63a87b79aa09cfabc69b884b771b6417b3f72c3bdd73e857cabf14e23d891287c9c90725582bf700ee7d74a3c304b395ac0e27e070b9016c88f9bccd2c1f62ce44c9fd8709b568feeef4c3a274655c25690c93d325a332b7a1ba27d541e49e85bace5f3f74ce074fcd3a44e5e597dc00330180138b66a64c32ec87824fdaba2ce05bf7bda5f59364bfc05b1e022dbd6895300aa1450e22b7d7ff7b1e47a995e25f28b37c06a5bde5b07b558796698c13f2c16e6f2532c8c7006b2ff3920ea4688b6f4f9b90336056b67e6ce38c6f021dc36c9a1f821d436126f41a3b2fdbfb45af0314fd1da65511760e674411404c8ec7bb77a290e04ee5ae58466c9ee1393badd93885db00ca308d4dcf77563263c48b920519ae344cce37893700fe133d0e1e70a5fffa19199b3eabcd99f0efd36b29686de784f313e7fa22402689743feaa7a26a556cf171c2c8423596f1b75f765bd5576ca60f78affb1379d9e91012cd1b2a5a95b9edaa6b507be1d494aa631156af7666261d1ddfe82f73f1acf523c5d72c9dac842acd0e8bd6390f465db71212ef1742b6bef77caa1fc512814b3f2041e99079259230a338bf54419d5741d016a1e3d9ccfa88978f41c1ece480a2bf43e557775a1f46b4653441efe306a6393bd64850edc4efc66973a2435ba2d60f934588c0dd674c3634ebf16939aa7e5083e31a5ef13694e9ac3aa6eb90cb678141830d1fa58081c804784793f0943eab5e3b19bfed123fd477bab9f3b546d9ddfdcb4a9b8aa102890b20959db99a4143816c9c09396e01dcc80d2fab84985720aadf8f69208a3afc8b9214daae60f6dbc25e3d7b1a16b21c8f679a7b002fb2b31ec75ef16675ab3f3b836ef0f55d27d6b447563809a235651a655e1f5db7222cea6dd4ce822d2dfc4d5cc34706508adfc3ff0d1e55858745f84893651eb91c0bdc106610f81fbdd6716dc24977ed60982cd5ccc61c6859e25d609496263becfcae65e16897c43a55d1c427a784b080d5b0d408d2de006b7990fcb691ca9d2396852393ee5671399f96c481b461190b6b3f9de6ddcef01f2425bffa4902df8ccd79375f20f4bf1c5564f1c23d451cef5a52aff232427e579233347be9a2a50cba1a9dd6a9f35d78f642d4ae4662c7549d4a97eacca8ce02398d255bb579b4eff046a659a9af8e7f87db3f4130fbd1272edc227210597f7fd954c20ea3cbe79c94b50ad4087be4573f5a5edee0ad73e43e5523e10d35b333d2c862945d14325b36576a375041133d7410e7ff5eff21125b95584569b1a605181e9d735cbb464b22723e547a0fd7485f882ddf951c6e2f67d1337d1c1070bfb8f9fb37ab599aaa8bb2877b76a3b6c3ba5e3f453930894d339c24cc0775a594228545c5c49ca87657f24e708cfdab1ee75fca0c0cef81af46759c664aad4dfdd3bf6bd702ffa0395d54c0171c6fff9357d379f1879044af937f6d011c1b8d46aba726eea6cde7dc334faa274c419922ccc675245ee048de389062feb46ed313e269e517f9e948c6f7d2d358b823f4f437258e8e955fe80563d361055ae044781bc2821ad20c535268a1e93227a0db3774519c65ff47fa82fadfcecab12abbb8ceea044284378751e1f99fbf6bae483c4ef35e004df76575ec92e36360be52f00571309383f75651cd3b14c175e3eca280ba336821cda2220d70afa96e80b1e3d7b722a8efb4df214e3f3024e381bbaffb3c58ec3d0881616ed318bf8528d92bee1fbc5e92e062b6379170e35e34a391d18f489ccc2517884a570f6cd61284e1073fe32f1ab60b8d8b66ebbd6e6a6b246f3171a55ee06038663321863374c9d1f0c8781017c37d415e0950d5a8d045e3287fcece63574ecd8d07488d055cad02c3b98d16eefc13ef635c24514535a872aaa6eb998912e4b40685c9a117b8431919e71fc79164ecb57eab32820a09fc99dd1d84bf6ffeebbdb508941b8496086d6aa8cd7608a444b4ad88a678be1e93b20b93884ab55b8c149c89e46c6839a081c9645f037a02d765bc92fc9d12ff2ddadb34c2718f551e852defbd351ae553c5f752b8e734196a46d71844b81542e7f14e2686134653a90d7672104d6a96c59e786dc0b6006f53b7c8c90a68f0a8564d3cd61f0b5dc402ce4b8fe6daa50439bba07f02a548026049fa78ab796cbd5ad479350f884b88e5636ebed407cdef2a142e6a792d0ee99afbfaedaea839fa487430300da150a100b0ed72d5685b4e7478686e35936b1bdda6bfdb87d58aa07b94529db589f670ab5a550fc27efe93337c32167dfe99294c3218c6acd611175baafc93d8a767e6147034ebac4e9d8750a840f3fc3b8d57db1efd5f2fe06d2dc8c533efcd2c6651727d4500876ad79122762be0bb82240e1273f76fd29c906d2de7a747f2e46362084b491d98477d576749ad5d5fa47dd2b777271721d4e5f62cc81783b8b82f2e9c5526a5d305d2d10ba6eb42791a4acda59b0716218beba2d31491c66e1ead65d5405aac2c7b1753986bce7d69a2f2b425cff960416cce91a6ca65e3d73462fa247dbaaa221a0a2ea1329babddff3d1aaa3392aee3c799799f25408746a625805af9cf03ad23c103163693ec9ea081c36748525e66239cfed055f7b0fb01b8829427fdcf385de81f9172d445ccd04ff20e26b140bd30d969c7a2adb3bbcceef961b2653a5cd04adaf94c6364a3f06ae527728995b1452ee37a79180fc25f82dc15582645dc254d1a208c8ec0f6bc287a30d5d97951dca07013dd1d178a44a518b21909b100fa54d38647ceb71f8449402776e67b9fa25179f14457321ccf9369906c8fcb22b66aee639770e509c15c63d349edcd1e91146683074a739d3e65d6e24214eb7299b59c34ac88e0c9d81174cb91d347393f6a452e63a080fef8f8113953afa6956c4212579e1d2ecb1b4ddd410b860f52475ce21fef6911cf2442d62820a5b2ec4e5e5f180783114d4715894813b2c97cadcc2750530ca2f7ec748481b2c849391b27d6aa80c50a56431428cc9e90a948951b42e40ab7e3ce185925656ce595487b10037df60d26e0caa679f55ca013e296ca934f297c710604a17b9604e55f0e0c93a35bd2d75da32d7b6072d533ae1b56c5b8ae832a445", @typed={0x4, 0x56}, @typed={0xb4, 0x36, @binary="aefa6872201b08e72dba75e777a6dc06c5282ca3d39a2123238436d9a177e888dcbafab9fd433b397774e117012dee1285a6537e62246dcaef80605b13c884ad9a1e78802f6e373dbe47bd52d4a19b004af7b9eb696d19edbb100256cdbbf98606ad18b7b527eea7f21c5e6ea39ea2267a16915351858990b21d22c09f1f8612f36c74ed7f13173a9cdf13feabcead992bfef4493f154831ed07655faa09a548b1319a5f7acde911074ac3ec93"}, @generic="738b2b342c3bc758fb695d30b230359081bd96cd1f4af28ce7d43dd164b0163b4604d37a399e0c9d3160b1197c808b3f8635b82aafb73f95383d25f6bb00f8870a47c0c0376573b72d8e7249aef2afa95d692dcc1ba3776aa09af57e52cdfa3b0054c76d1fd0afcf"]}, @nested={0x11c, 0x4a, [@typed={0x4, 0x3e}, @generic="6aed397d4f8aa04b042587e0a39ea53a4baa1bc31d8663623f9c6725aaac9fea1549ab2d1dce67d2b429304002e7d6190a6804f1de0208815e60dcdcfc8d66c1c182b8d87f669b6166b643b87334e1d240034b00a399bab5fd37ebf1091d0d43a861ab960f46435ddfc8a87c9416f887cacd9f92ebee92fc8239fcf7f4e0bd9ee0421b875e819f46cae4f3fb78c967e442c869afa1034d39bde9175ca15d15b340ebaf827bb310ca6abdfba9ae29f8315268decfaf3cafa33d6860df7862c59bb8c319c66ba81a5f4be6dda2", @generic="cae2929ed1117465a61f366a6ff8dc04497e03b2f0dfcc5382d73c0ea69fe6f123c43c3e7d341754c347962fd844934f2a6c59900106b9c7c76f277e5281e50e9120a5cfefeaaa14"]}]}, 0x13d4}, {&(0x7f00000002c0)={0x314, 0x1d, 0x500, 0x70bd2a, 0x25dfdbfb, "", [@generic="4f006f9e17b7a8c3dcdf3294a8c478232ca5e396b67e7376ef9d7c7d71d5c2a1d4d9da985abaa122f458e756ca62c70785a47e974704d1a2bbddc6d92cc57d7e801c2685fb5036b2f9d2c2868afb58077fb8923c53c4b0da44a48d5bd23d866f4738e742619f166c8e5f595abc01268cddecdb0cd7fbc1e428a7ad5f9c028fcb4a674ad1fa557cd6925d505c270fc585e09044cdc08982070d4dea5d794138912b6696a9ca352ac2b03d6ebdd2fd4d3cbda289939a22281194cb3b99800f2abfdf69ab79df0b50fd2c6ac910b9b7d223f1f4a8484854", @nested={0x144, 0x2e, [@typed={0x14, 0x3e, @ipv6=@remote}, @generic="668f26501dccb60c1bb4e5a520854c01d335bc6d912fc85a6ccb1c2a83fd4deed71f3c1ee8a66d79691bad81c5c77c0070143aceb9d6d0c58ec5bce140e1dcd7f9ccfb750ea5fa60ba3bf95fdb6e9e73ab7451c62a46210ca342f4a4bcb70488f4f7fb2d5032a94c", @typed={0x8, 0x81, @uid=r3}, @typed={0xb4, 0x5d, @binary="91ab59fd55bbdc8a15d8cc15f509048c8952436fe345ecaa1310c666114d04a15ffce34716a1c1081a8c3bc2a14721e7506872bcfae17e5c0f5a9121949d0f0479a61e5fd54b86faa7b9e534f838dc52807abd153420f42a9d6555280904814f944898bff66675605a5588c0ab1961d752ca687c63cb1d4443dd4fa3ad564cc028393977048cf63d02217c1390eaef9e88fff2b2010fef696cd6010cb10d4e483a8b6c0c3691e2303c9c51aeae"}, @typed={0x8, 0x64, @u32=0x8000}]}, @generic="86acc7e37610fe8c4e66976dacd54e74130714768e17eeeabe6dd600ccb5f055c7b6a64330d27c51a148641e30a6032feff67f78ddb0317f49754aedac571a0f1743cf3b9cdbadc0b096d65a57b9754195e876bbc55d418108ad1fd1e798c4e253", @typed={0x8, 0x6c, @uid=r4}, @generic="21799b56df00727b8bc675ab3baf436a28b74452bb3138002b6f5dd362", @generic="2872d5b391e1f6dd6083ffe017bfa4ff6a5c746e60aaa5e096dea0f170a7847b4706a528151243b327aec1b043a9b5f5f684dbeda784ce6f068a2ee60c36c4404a98c696bc9f3ca27fbada217f02dcc1ef5914e6b50c5dae39b8114a4523de5a83d6"]}, 0x314}, {&(0x7f0000000600)={0x14, 0x32, 0x8, 0x70bd25, 0x25dfdbfb, "", [@nested={0x4, 0x6e}]}, 0x14}, {&(0x7f0000001b40)={0x120, 0x2c, 0x1, 0x70bd26, 0x25dfdbfe, "", [@nested={0x110, 0x81, [@typed={0x4, 0x49}, @generic="e6110fcbb1aa81a8216bd1cfba332713b4405dc882efa3628eabef1376a350c86b485b7a363d9470553820ee3fed80a8ae184b14e37b83010e0a8fc02be4165223da8574872a3f2633e40852b221adbd1ab6d1b8db62ec3e4aa2c987eafa6aead5424ffb0491a97d6c3bd471f8a982f6db8339864946836293e1eab65a649a7717346c3e8a335106de6d0f3c21de747f304c45e1814b3bf252abcbb5d818f4ff359737b322d1eb8cbf6a0ebf10defece01aa093b8a53bbdd2c624591c0d4a5df263caf2b7d530ba37224ef727cdf4989470264407a2ad1e0d7167dab66026be39968993ee0d489b38d4638ea007898edc9afab0c74444a", @typed={0x8, 0x88, @u32=0x7}, @typed={0x8, 0x87, @fd=r2}]}]}, 0x120}], 0x4, &(0x7f0000001cc0)=[@rights={0x28, 0x1, 0x1, [r0, r0, r2, r0, r0]}], 0x28, 0x40000}, 0x10) 05:58:13 executing program 2: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x1a3) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000000080)=0xe8) bind$can_raw(r2, &(0x7f0000000140)={0x1d, r3}, 0x10) geteuid() connect$unix(r2, &(0x7f0000000440)=@abs={0x1, 0x0, 0x4e21}, 0x6e) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0xc811, r1, 0x0) get_robust_list(0x0, &(0x7f0000002600)=&(0x7f0000000280)={&(0x7f00000001c0)={&(0x7f00000025c0)}, 0x0, &(0x7f0000000240)={&(0x7f0000002580)}}, &(0x7f0000000300)=0x41) 05:58:13 executing program 7: syz_read_part_table(0x0, 0x1, &(0x7f0000001ac0)=[{&(0x7f0000000000)="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", 0x200}]) r0 = request_key(&(0x7f0000000200)='cifs.idmap\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000280)='/dev/audio#\x00', 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x10000) syz_open_dev$audion(&(0x7f0000000740)='/dev/audio#\x00', 0x0, 0x0) [ 203.949526] attempt to access beyond end of device [ 203.954581] loop4: rw=12288, want=8200, limit=20 [ 203.988196] attempt to access beyond end of device [ 203.993292] loop4: rw=12288, want=12296, limit=20 05:58:13 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = accept(r0, &(0x7f0000000000)=@un=@abs, &(0x7f0000000080)=0x80) getpeername$netlink(r1, &(0x7f00000000c0), &(0x7f0000000100)=0xc) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000196fe4)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000327f68)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty={[0x2]}}}, @sadb_address={0x3, 0x8, 0x2, 0x0, 0x0, @in={0x2, 0x0, @multicast2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x3}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x88}}, 0x0) 05:58:13 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x800, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f0000000000), 0xc, &(0x7f00000006c0)={&(0x7f0000000240)=@newsa={0x13c, 0x10, 0x721, 0x0, 0x0, {{@in=@rand_addr, @in6=@dev}, {@in=@broadcast, 0x0, 0x833}, @in6, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x13c}}, 0x0) close(r1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x4, 0x1, 0xbb6, 0xac, 0x7}) 05:58:13 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x9}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000000c0)={r2, 0x4, 0x30, 0xdb45, 0x8b}, &(0x7f0000000100)=0x18) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0xc86) setsockopt$inet_dccp_int(r0, 0x21, 0x5, &(0x7f0000000180)=0x100000000, 0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000001c0), &(0x7f0000000200)=0x14) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000240)=0x308ed054) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000280), &(0x7f00000002c0)=0x30) ioctl$TCXONC(r1, 0x540a, 0x81) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000300)=""/228) getuid() ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000400)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000440)={0x0}, &(0x7f0000000480)=0xc) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) rt_sigprocmask(0x2, &(0x7f00000004c0)={0x3}, 0x0, 0x8) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000500)=0x5, 0x4) sched_getattr(r3, &(0x7f0000000540), 0x30, 0x0) llistxattr(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)=""/82, 0x52) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000640)=[@in6={0xa, 0x4e21, 0x2c3b, @dev={0xfe, 0x80, [], 0x1d}, 0x20}, @in={0x2, 0x4e24, @rand_addr=0xffff}, @in={0x2, 0x4e20, @remote}], 0x3c) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000680), &(0x7f00000006c0)=0x8) accept$packet(r1, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000780)={'team0\x00', r4}) r5 = openat$cgroup_int(r1, &(0x7f00000007c0)='cgroup.max.descendants\x00', 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r5) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000800)=""/70) r6 = msgget(0x3, 0x80) msgctl$IPC_INFO(r6, 0x3, &(0x7f0000000880)=""/69) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000900)) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000940)=0x3, &(0x7f0000000980)=0x2) syz_open_dev$loop(&(0x7f00000009c0)='/dev/loop#\x00', 0x1, 0x400000) [ 204.014820] attempt to access beyond end of device [ 204.019851] loop4: rw=12288, want=8200, limit=20 [ 204.039722] attempt to access beyond end of device [ 204.044743] loop4: rw=12288, want=12296, limit=20 05:58:13 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = dup2(r0, r1) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb957) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0x10) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e1f}, 0x0) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000040)) 05:58:13 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000065c0)=[{{&(0x7f0000000e40)=@ipx, 0x80, &(0x7f0000001240)=[{&(0x7f0000001980)=""/4096, 0x1000}], 0x1, &(0x7f0000001340)=""/249, 0xf9}}], 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) io_setup(0x2d6, &(0x7f0000000000)=0x0) r4 = dup(r1) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f00000004c0)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in={0x2, 0x4e20, @multicast1}}}, 0xfffffcb2) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x4, r1, &(0x7f0000000180)="98a4444b1ce722621d9ca56ea59f05db6521d61f9b42e9614c3aaa71f3f43a2287e90e751e7d350555422bc317d80fd43db2a93ccde6f2cad59f8841475b5d2ae2655d4a4d09201aafc9753db83d9c83795db17ba9429b0dc8e852078422ffc19b0c7a9444a57fcd130958aeb08ca0c939202fcbd5c03e29c560c06ce49aba596d0ffed20913a47534b18a7a17d242a94acd34ced31c214b86816c1a0c384c00ca3bfda4794b9fe16852220de41930d748dca1b1be925a661307bc9a3d9c3e5e5e9b4dab150aed40efb47d790635a8bb3453eb65fcb7df0200e9e655c6534c59588e78bb", 0xe4, 0x8, 0x0, 0x1, r4}]) [ 204.100764] attempt to access beyond end of device [ 204.105792] loop4: rw=12288, want=8200, limit=20 [ 204.113007] Dev loop7: unable to read partition block -728282209 [ 204.119350] loop7: RDSK (1732800000) unable to read partition table [ 204.137309] attempt to access beyond end of device [ 204.142364] loop4: rw=12288, want=12296, limit=20 05:58:13 executing program 3: r0 = epoll_create1(0x0) fsetxattr(r0, &(0x7f0000000c80)=@random={'security.', '/selinux/enforce\x00'}, &(0x7f0000000000)="eca5ba1bcd4179be815a498512c718", 0xf, 0x80) r1 = socket$pppoe(0x18, 0x1, 0x0) sendmmsg(r1, &(0x7f0000000900)=[{{&(0x7f0000000040)=@generic={0xa, "b9f6c5a2bd282b7f1ef09be1e42d4d3c91a2f862aee43546e8c83258cebfa0cfe6a49c6b9dbb5b078889dc936724e58b8d5e9d09c5595d9987ec29f59a552001813288a5cee383cef61a84e8cd8a7b798372f9dd930d9ab2dd5026cf2145890c635a0fc713f229602ccc916a91497d57a02b558e0e54e9414524e62665f7"}, 0x80, &(0x7f0000000540)=[{&(0x7f00000000c0)="e1780bfb598fdffaff71af7c4e1df7ceb1744092fe40c6e117a7d0d5e0fa3debcfa321fe2a7f56ff423a931b590da653ef724c7e4ca6ef0f8ec977", 0x3b}, {&(0x7f0000000100)}, {&(0x7f0000000140)="b0fa438e8a555f87d9f247382a9cf0a3e77e522166ffe05074de376a9333532979ca175fbe1c31fd5f7d92b40e6622d112b42fe40cac080822c3687496df3b794256e9aadfb4f2e5abbe92b29d5bec352a3b3499b060bd61d2591dde0c97d739ad6f02260200eff8e6ed04c1a7ca6624defce87e22ed8305bd2770b92c585d4caf765b8ef6970cb3", 0x88}, {&(0x7f0000000200)="d80cb5762ea748d73314a202a1cc0d060ae7", 0x12}, {&(0x7f0000000240)="943a63b6b3", 0x5}, {&(0x7f0000000280)="cd7801d724f18ee6bd5f39031be424792f03dabaae8a3b3afaa7ec8a8b1c576ce983827b6aa65050fe7719d1b2b6320fd3d0c8bc0da0d2bb9f3a97c243b35fec15476f8438ddc0096bfc6f7bfdf1622d252677158f63256a07d266c481d6ca1650cb799d3b3602de5300b4b99255f753f0681c992308b2ee9646a3b680b94678e3dfdebf5d867f29ac323ea2f5b82bdac85e1afd24a5313f38037230c8168104807d1528c6953abc79e4a08851d74d8f", 0xb0}, {&(0x7f0000000340)="74c77db6969c384349a71aa41fede5c24aff17a96fae8c121b54923ec96d20326c6cd281240981b9a057a567243da44068a91e8bfbbbbb9903f5527a0875b2cbae4fdc0587831b86e89e0e7af13ccd81c0bca8e7ee14fa4225dc5c1961dfe61361c90a7cc04e878c46dea08781e0d5368c639741f1601f86344a2894e2b1ca830b6fa46041a67100f84c5a58841592a1c6e241f56e5d3618be0abb21476d86c825bfaa08ff05927760c98ac4045457", 0xaf}, {&(0x7f0000000400)="44a7f9f56fe85e73911a0fe41f0092109d83619cfa9f083b96329d5150e3cf621b0ad385010b8d14552bc04c45b8a9c1f5672d5b5f23ea1e0e4617b7565a1f5d5c37b8c18a4ddf5761a31594cdab6f8ca3f13e", 0x53}, {&(0x7f0000000480)="2202949acce061a3eec288660eb5e0328cdb2ac7f93c0b1fcd35362936823ca301b68ce56bf1fde59e1d92eaff86908a2b52cc54878973d045ac622c119222dbf735db59dffd5abc6797776ce18ea3e26f51b124d3a82a51fa2f541ada87f486ec33ef95de821b62cfdefa4ececb248ab4ac6b43c61ea96f64dbf4b3d4506e4abe6c35aba6b68b7abe7ea31d48", 0x8d}], 0x9, &(0x7f0000000600)=[{0x70, 0x101, 0xff, "afccec28a273f1707c75bdb6d114e687a049b138eebc65cb7b7baeaf3e3358314101cfe234ef17d4e9feae727ccea3830d7a44d4b29a72b9d9ed4c64ac2420ac8b70bcdc8e243ba35057088aac628c282ef9d32736c65c92661bffa845dc"}, {0x70, 0x10d, 0x9, "b3a3d8386d2be598240dc8d9f41cf78ed6bc26f0c333510b0a5cac6fc1a476793092ab8140b5eefeacf593afb5abe8d64058819e96ccc544b81bb79030c6c98d9d82946b088ef34d5bd429c14c4f9bbf97bd2d302d8c956bdb5ef42278"}, {0xa8, 0x113, 0x7, "0f13452f6cc349358098088781d3a7ef3c953b4bccd0f2d4a543540310aaea5c4dafcc84133fcf0b2ae3c1628826ae2b3d456ccd7f22cf34313ebdb7574971acc808771b58b4da3d9cb5174dd88f1f96b8284751aac671867549aba91b03308f136ae494d843c14354754b1f119391234652aef3b2da857a239b6b053445d0793ec6e78ecc662a3ac53dfaae0b7950f7332ab1e8d8"}, {0xf0, 0x10c, 0x5, "03fd9c63d016dce6b5cd0b27d045bee71c8d2c77a8c2902976efbcffc96ceec4411317216d266680f5c2b0038d85be6bce856d98bfa15cc10a15ced3f44e9e9955ed26e4a215526f52bb13a8e5ff26aaffd63963daffc66765da719d5332890d92d07a58f4426daa03abb7b75080f208d31263454a6e65ef00ed373624eef373d08d8e5928264a53617d00f80fa98b9a1dbba2fa11f896a561aa035fbf1a4185806a93d5bdd9af0ec5b2a482efe18aff74c3a6f75d92f5e0a86029d0a5ad2b5aaa82659622961f75ebfc3b21b4ee703aac9ff3ee5f986828b10b02c0abf7c5"}, {0x50, 0x117, 0x5, "4f3ce43b85a33f58309d75b47bf4089d2c35b96f6cc24a64debbcafb9911ef8f9295b9380aa01d3756cda4d2e6be1ba5e4e010cff43063ea30af842307"}], 0x2c8, 0x40804}, 0x3}], 0x1, 0x4000) [ 204.190853] loop7: partition table beyond EOD, truncated [ 204.196510] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 204.241371] attempt to access beyond end of device [ 204.246426] loop4: rw=12288, want=8200, limit=20 [ 204.278188] attempt to access beyond end of device [ 204.279133] Dev loop7: unable to read partition block -728282209 [ 204.283233] loop4: rw=12288, want=12296, limit=20 [ 204.289381] loop7: RDSK (1732800000) unable to read partition table [ 204.338464] loop7: partition table beyond EOD, truncated [ 204.344001] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) 05:58:14 executing program 6: r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x8e}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) ptrace$getenv(0x4201, r1, 0xb2, &(0x7f0000000180)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000913000)={{&(0x7f00004b3000/0x5000)=nil, 0x5000}, 0x1}) r2 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000280)={'nat\x00', 0x10, "bbdb793ee985beaf64b1b442b66f3f86"}, &(0x7f00000002c0)=0x34) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0), 0x8) clone(0x10000, &(0x7f0000000140), &(0x7f0000000100), &(0x7f0000001000), &(0x7f0000000180)) read(r0, &(0x7f0000000200)=""/100, 0x64) 05:58:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x2, 0x11) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@ipv4={[], [], @remote}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f00000003c0)={{0x8000, r2, r3, r4, r5, 0xa8, 0x7}, 0x74d1}) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) msgget(0x2, 0x1) msgget$private(0x0, 0x0) r7 = msgget$private(0x0, 0x2c) msgctl$MSG_STAT(r7, 0xb, &(0x7f0000000180)=""/12) msgget(0x1, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r8, 0xc008ae88, &(0x7f00000004c0)={0x7b, 0x0, [0x40000106]}) 05:58:14 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8948, &(0x7f0000000000)={"7623e0359d942e7d00", @ifru_map}) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000080)={'ip_vti0\x00', {0x2, 0x4e20, @remote}}) 05:58:14 executing program 3: r0 = socket(0x15, 0x80005, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x100, 0x0) write$9p(r1, &(0x7f00000000c0)="bec2110f3ade1e1b9ae9c3788fa68d8a3f95d14774dfb77a192a0a9d7ba41493281108fdcf3abae2f4fd699a1cec4b6f1115", 0x32) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$inet6(0xa, 0x0, 0x63) ioctl(r2, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000080), 0x1c) 05:58:14 executing program 0: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x200, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f00000000c0)=0xffff, 0x8) r1 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000180)="864a7131f5499e5328b8e96b74519119741e42a54240348a0bf13a9ba68ada885b71f4a0420c733e44376fadc9632b0acbd6566fc7cbdc0091aad269bb2e0c211b9224a5fdc83c40dc814364453d3ec2fafb04bd64", 0x55, 0xfffffffffffffffb) r2 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$reject(0x13, r1, 0x10000000, 0x3f, r2) r3 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x78, 0x400) ioctl$KVM_DEASSIGN_DEV_IRQ(r3, 0x4040ae75, &(0x7f0000000040)={0x80000000, 0x4, 0x83569b0, 0x100}) syslog(0x2, &(0x7f00000003c0)=""/147, 0xfe83) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000280)={0x0, 0x7b, "e1f38c20e1edc4b873f954c594cb31755d5f3775f9e40638b682bb128f400d7c55511f775a6f57482704d748af6f869f971e30f92772a1a5907ede5f1515bf56ae770e10bae023f19d52171c5eaedc92265abfe037b690668dd4da47a9a12884b17849a46843d0b735c79a66b9834766de718f52a42742a300e8b0"}, &(0x7f0000000340)=0x83) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000480)={r4, @in={{0x2, 0x4e20, @loopback}}, 0x5, 0x2}, 0x90) 05:58:14 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)) 05:58:14 executing program 7: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xffffffffffffffb5, 0x100) bind$bt_sco(r0, &(0x7f0000000080)={0x1f, {0x5, 0x5, 0x20, 0x800, 0x3, 0x4}}, 0x8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000040004006, 0x0) r2 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x4, 0x9, 0x9, 0x0, 0x0, 0x1, 0x10020, 0x8, 0xffff, 0x6, 0x5, 0x4, 0x1375c00000000000, 0x4, 0xc2de, 0x3, 0xff, 0x71d, 0x4, 0x7, 0x200, 0x7, 0x5, 0x7, 0x87c, 0x1, 0x0, 0x3ff, 0x7194, 0x8, 0x800, 0x0, 0x7, 0xb, 0x3, 0xffffffffffff0000, 0x0, 0x72c, 0x7, @perf_bp={&(0x7f0000000100), 0x1}, 0x2, 0x3ff, 0x0, 0x0, 0x9, 0x3, 0x1}, r2, 0x6, r0, 0x3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000300)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1) io_setup(0x8000, &(0x7f0000000140)) [ 204.597270] attempt to access beyond end of device [ 204.602296] loop4: rw=12288, want=8200, limit=20 [ 204.619204] attempt to access beyond end of device [ 204.624232] loop4: rw=12288, want=12296, limit=20 [ 204.678923] attempt to access beyond end of device [ 204.683950] loop4: rw=12288, want=8200, limit=20 [ 204.727362] attempt to access beyond end of device [ 204.732398] loop4: rw=12288, want=12296, limit=20 [ 204.758399] attempt to access beyond end of device [ 204.763481] loop4: rw=12288, want=8200, limit=20 [ 204.768632] attempt to access beyond end of device [ 204.773607] loop4: rw=12288, want=12296, limit=20 [ 204.779917] attempt to access beyond end of device [ 204.784893] loop4: rw=12288, want=8200, limit=20 [ 204.791985] attempt to access beyond end of device [ 204.797004] loop4: rw=12288, want=12296, limit=20 05:58:16 executing program 1: r0 = open(&(0x7f0000000140)='./file0\x00', 0x80000000004d40, 0x0) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380)=@known='security.capability\x00', &(0x7f0000000140), 0x0, 0x0) r1 = semget(0x3, 0x5, 0x504) semctl$GETPID(r1, 0x1, 0xb, &(0x7f0000000000)=""/21) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000016420000000000000200000000000000010000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000980000000000005cca9a7b16775271343f80e6dd6262daa46bc01eb972e15d31e62a0f2352e3b0a8b3ea96589a9e473c4d4dd153936ccc43aabe10a5e3"]) 05:58:16 executing program 0: mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000000)='./file0\x00') mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000100)) lseek(r1, 0x0, 0x4) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r3, 0x25) close(r0) 05:58:16 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f00000000c0)={0x7d, 0x0, [0x6b1f, 0x6, 0xdd52, 0x5]}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="230000002e000104000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000400000000000bc8dc75403a4dff222ceee2c723d98242d75e5447859660d325e4183e7a2fdea2b608f275a358f22ece4c46038f4defa63c6ccc14584b8651cc190b0271fdc84fb809d37b54fca70839046bd117f6149fe01eb6fbfdfe6adc6010c9a72a4de34fceeeec943d8986226299882c3ff7773fbee008fee7a8220f0f45581f16a920159"], 0x24}}, 0x0) 05:58:16 executing program 7: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x400000, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000100)={{0xa, 0x4e23, 0x200, @mcast2, 0x8}, {0xa, 0x4e22, 0x9, @local, 0x80}, 0x9, [0xad, 0x5, 0x4, 0x34f, 0x8, 0x5, 0x1, 0x6]}, 0x5c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") clock_gettime(0x7, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x0, &(0x7f00000000c0)={r2, r3+30000000}) 05:58:16 executing program 5: keyctl$set_reqkey_keyring(0x6, 0x9) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8, 0x101001) shutdown(r0, 0x0) 05:58:16 executing program 3: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x80) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) setgroups(0x1, &(0x7f0000000000)=[0x0]) 05:58:16 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000040)="6632667393", &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)) 05:58:16 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000989000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r4, &(0x7f0000000240)={0xb, 0x10, 0xfa00, {&(0x7f0000000140)}}, 0x18) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r7 = accept$alg(r6, 0x0, 0x0) sendmsg$alg(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) write$binfmt_script(r7, &(0x7f0000000300)=ANY=[], 0xffffffaa) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000200)) recvmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/32, 0x2f5}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x2, &(0x7f0000000340)=""/123, 0x7b}, 0x0) fallocate(r4, 0x10, 0x0, 0x5) creat(&(0x7f0000000000)='./file0\x00', 0x0) dup2(r1, r3) write$binfmt_elf32(r4, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x401, 0x2, 0x0, 0x2, 0x3, 0x6, 0x2, 0x337, 0x38, 0x352, 0xff, 0x986, 0x20, 0x1, 0x2, 0x9, 0x8}, [{0x5, 0x6, 0x5, 0x8, 0x100000001, 0x31bf1102, 0x5, 0x3ff}, {0x6, 0x5, 0x0, 0xfffffffffffffff9, 0xff, 0xfff, 0x1, 0xfff}], "22506f4a2536cbe82210e5fef34f87ce7325650c9a64167806d597a05bddad8acc66c67ddf925de16e35ca0f9e4ec8", [[], [], [], [], [], [], []]}, 0x7a7) 05:58:16 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r1 = inotify_init() r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000000)={0xff, 0xfffffffffffffffa, 0x9, 0x1ff, 0x7, 0xb366, 0x6, 0xbe, 0x800, 0x7fffffff}) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000080)) inotify_add_watch(r1, &(0x7f0000000040)='.\x00', 0x80000003) write$binfmt_elf64(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="eb"], 0x1) creat(&(0x7f0000000480)='./file0\x00', 0x0) 05:58:16 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xfffffffffffffd45) r0 = socket$kcm(0xa, 0x522000000003, 0x11) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffff9) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$reject(0x13, r2, 0x2, 0xffff, r3) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000300), 0x1a4) recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000140)=@nfc_llcp, 0x80, &(0x7f0000000000)=[{&(0x7f0000000280)=""/103, 0x67}], 0x1, &(0x7f0000000340)=""/171, 0xab}, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x2a, &(0x7f0000000000), 0x1}, 0x0) 05:58:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x11) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x12000) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000000040)={0x400000000000000, 0x6000, 0x9, 0x9, 0x1d}) madvise(&(0x7f000000f000/0x2000)=nil, 0x2000, 0x4) 05:58:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000280), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000002700638100000000000000000f0000170c000700040002cf3fb1b03f340ad9c4e1d7c19636d8141b308aada7fd62b8c182e1e309d8c3964a02d181e4eb2e9e134800618125d70179a4a78bc04780ead6eb325c93a6e17caf7f9b128184f49104d11805feb6dfc7b073f4d90becd9227553507b0822803e53389740225c6b2087528ce8798650463a995a464b004b0f7c4ee1b2"], 0x1}}, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000500)=""/4096) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x400, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x16eeb14c, 0x6}, &(0x7f0000000180)=0x8) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"]) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f00000003c0)=0x100000001, &(0x7f0000000400)=0x4) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000300)=@assoc_value={r4, 0x1000}, 0x8) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000001500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000227bd01000000040005000800040003000a0000000800010053240000030397ae277c5580c3ea30b27f2e31c624abc96826f98864811227ee0bac0324726ad3bc2339bfe088dfb4623137fc575bd2557d1f06a3ef3ee37f96f83bf863e8421c26a3044c83a82918ecc22a0064e9714ba5cd2f54f7dfa18b5c2037fc73b81efa28cc389f30f5bc941cc8389f6df2af0e0700c5eb1d5e1c9417454ba03b571bf671ed066dd18fe2cf3d35cf36af"], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) getsockopt$inet6_int(r3, 0x29, 0x5c4ce8f48a4666e3, &(0x7f0000000440), &(0x7f0000000480)=0x4) 05:58:16 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') writev(r0, &(0x7f0000000240)=[{&(0x7f0000000040)="bd9fc071528eb7d25a600542", 0xc}], 0x1) 05:58:16 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)) 05:58:16 executing program 0: syz_mount_image$hfs(&(0x7f0000000840)='hfs\x00', &(0x7f0000000880)='./file0\x00', 0x0, 0x0, &(0x7f0000000a00), 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB='codepage=ascii,iocharset=iso8\x00\x00\x00\x00\x00\x00\x00\x00']) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt_cache\x00') ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000040)={{0x5, 0x96, 0x4, 0x8, 0x2, 0x80000000}, 0x100, 0x9, 0x3, 0x9, 0xfffffffffffffffc, "87d17d9fcca12f05236a6bba8f48d8e99fe3d2a3377fc22cd6005398e33e65da00682dd275a6f9fd499de7a81bbb0d6605764f235c52eac157902637342300c946a765669bc5bfed820f51d1d0383e17e1aab4038569064bcfee3a4d575a7922c6c195038d87025c50490deada8f962727472f4d278ffb687fbd6888feb27737"}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000100)={0x7fffffff, 0x7, 0x2, 0x0, 0x0, [], [], [], 0x1000, 0xc7}) 05:58:16 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r3, &(0x7f0000000240)={0xb, 0x10, 0xfa00, {&(0x7f0000000140)}}, 0x18) fallocate(r3, 0x10, 0x0, 0x5) creat(&(0x7f0000000000)='./file0\x00', 0x0) dup2(r1, r2) rt_sigqueueinfo(r0, 0x39, &(0x7f00000000c0)={0x18, 0x3, 0xffffffff, 0x7f}) 05:58:16 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c000000000042139ace58940000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000f000000670600000200000007060000e4d923e3bf050000000000001f6500000000000067070000020000000707000f4c0000000f75000000000000bf540000002174d7e6911aa900000007040000040000003d430100000000009500000000000000050000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 05:58:16 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000080)={[{@resize_auto='resize=duto'}]}) [ 207.191823] f2fs_msg: 80 callbacks suppressed [ 207.191835] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 207.203599] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 207.221324] attempt to access beyond end of device [ 207.226447] loop4: rw=12288, want=8200, limit=20 [ 207.232470] F2FS-fs (loop4): invalid crc value 05:58:16 executing program 3: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000000140)=""/116, 0x74, 0x29) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000100)={0x2, 0x1, 0x9, 0x1}, 0x10) r2 = open(&(0x7f0000000040)='./file0\x00', 0x28042, 0x50) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000080)={0x7ffffffd}) fallocate(r2, 0x0, 0x1, 0x87ffffc) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000280)=""/101) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000000)={0x2001}) fstat(r1, &(0x7f0000000300)) [ 207.249112] attempt to access beyond end of device [ 207.254202] loop4: rw=12288, want=12296, limit=20 [ 207.259285] F2FS-fs (loop4): invalid crc value [ 207.263955] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 207.274036] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 207.281164] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 05:58:16 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") perf_event_open(&(0x7f0000000040)={0x2, 0xd, 0xaa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x8000}, 0x0, 0x4, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000200), &(0x7f0000000400), &(0x7f00000000c0), &(0x7f0000000300)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) getpeername$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) [ 207.295453] attempt to access beyond end of device [ 207.301267] loop4: rw=12288, want=8200, limit=20 [ 207.306175] F2FS-fs (loop4): invalid crc value [ 207.311012] attempt to access beyond end of device [ 207.316012] loop4: rw=12288, want=12296, limit=20 [ 207.322396] F2FS-fs (loop4): invalid crc value [ 207.327055] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 207.333627] hfs: unable to load iocharset "iso8" [ 207.338529] hfs: unable to parse mount options [ 207.362320] attempt to access beyond end of device [ 207.367410] loop4: rw=12288, want=8200, limit=20 [ 207.372332] attempt to access beyond end of device [ 207.377336] loop4: rw=12288, want=12296, limit=20 [ 207.400402] attempt to access beyond end of device [ 207.405465] loop4: rw=12288, want=8200, limit=20 05:58:17 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f00000001c0)={0x4, {{0x2, 0x4e22}}, {{0x2, 0x4e20, @broadcast}}}, 0x108) getsockopt$inet_int(r1, 0x10d, 0x85, &(0x7f0000000080), &(0x7f0000000180)=0x8) 05:58:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="021ce80700145f8f000000007b16523ec930d16c98bab1f1bc84e8d5cd5c9e95e8dd0aaab206aec3f234d7355c9ca515ac78421c265fab64cfafe98e6e1d") symlinkat(&(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00') syz_mount_image$btrfs(&(0x7f00000013c0)='btrfs\x00', &(0x7f0000001400)='./file0\x00', 0x4, 0x3, &(0x7f0000001640)=[{&(0x7f0000001440)="5635f1eedecba99f557676e110552164be010e4ff68e1455c806241b8ce129b9e2b606452837f7c7b394e6f8b987c2673771fbe9b190a1c2c388f46e4cace1abe7e3616a2c8d11ba7d70a0f702776ebea011c532e8c1b3520c8d931ce3658c91a04a21ad391eb5c69986", 0x6a, 0x3}, {&(0x7f00000014c0)="bd20021423ad106288b672ee8336600289cc33520925d41da997cec1488b95d94f61160aa9a10196d322536b7c90d4cd8abeeaf4f538f27f15dc7510df0368af0a4445183aa7fe1000057aca3a48eadd3ef957230731b64390b3b4a84423809a256ac1f79dfced116a2b38974cd7faf5e823119ba71a4dc4edf895726f216e759ddbf4bea921dbaa3d6d9a3695f21e405a8ae63d7e3339f0708184ea79755b36215df2bf3b16aef227a3d52292b0e86ba341dcecff917cddd07f1cbd0d6c0dd4ae1ca1", 0xc3}, {&(0x7f00000015c0)="e88756bf09f174095bd80e5b5207ab701898098a4dd4748ccf96c5285b7edca4cb597e9c0ebf6cca7d10fa52c15790b9cf93964076f39148a47859b7b630defaf3cda3ae1bf5d7a3933d58b8116dd3ac42545596145966776cfdc761dfbb57e5c39a", 0x62, 0x7f}], 0x4080, &(0x7f00000016c0)={[{@metadata_ratio={'metadata_ratio'}}, {@degraded='degraded'}, {@ref_verify='ref_verify'}, {@compress_force='compress-force'}, {@nossd='nossd'}, {@noflushoncommit='noflushoncommit'}]}) ppoll(&(0x7f0000000080)=[{r0, 0x100}], 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000040)={0x7fffffffffffffff}, 0x8) removexattr(&(0x7f0000001340)='./file0\x00', &(0x7f0000001380)=@random={'user.', 'bdev--#\x00'}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000280)={0x0, 0x1000, "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"}, &(0x7f00000012c0)=0x1008) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000001300)={r2, 0x8, 0x30}, 0xc) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x40) write$FUSE_GETXATTR(r3, &(0x7f0000000100)={0x18, 0x0, 0x1, {0x1}}, 0x18) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r4) [ 207.433313] hfs: unable to load iocharset "iso8" [ 207.438195] hfs: unable to parse mount options [ 207.456225] REISERFS warning (device loop7): super-6507 reiserfs_parse_options: bad value duto for -oresize [ 207.456225] [ 207.470673] attempt to access beyond end of device [ 207.475663] loop4: rw=12288, want=12296, limit=20 05:58:17 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x75, &(0x7f0000000000), 0x8) close(r2) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x80000, 0x0) connect$nfc_llcp(r3, &(0x7f0000000080)={0x27, 0x0, 0x1, 0x5, 0x90e, 0x1, "53258219c599ea135a256eabd96e504e596795d9d88675c626909188a6f739969b67ead1d1399f9545f0a6d2d7c4991543b0d61694423788cad368dfc43a54", 0x1e}, 0x60) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000140)={r4}) close(r1) 05:58:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x8000000000015, 0x80005, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x80000001, 0x8, [0xb9d, 0x4, 0xffffffff, 0x1, 0x58d4, 0x8, 0x6, 0x7f]}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r1, 0x8, 0x4}, &(0x7f0000000200)=0xc) getsockopt(r0, 0x8000200000000114, 0x0, &(0x7f000047c000), &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x80000000}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={r2, 0x3ff, 0x1}, &(0x7f0000000100)=0x8) 05:58:17 executing program 3: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000000140)=""/116, 0x74, 0x29) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000100)={0x2, 0x1, 0x9, 0x1}, 0x10) r2 = open(&(0x7f0000000040)='./file0\x00', 0x28042, 0x50) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000080)={0x7ffffffd}) fallocate(r2, 0x0, 0x1, 0x87ffffc) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000280)=""/101) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000000)={0x2001}) fstat(r1, &(0x7f0000000300)) 05:58:17 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)) 05:58:17 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia-generic)\x00'}, 0x58) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e3010000000ced5c54dbb7", 0x10) r2 = accept$alg(r0, 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000000)={'mangle\x00'}, &(0x7f0000000080)=0x54) sendmmsg$alg(r2, &(0x7f0000005200)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000036c0)="c6b64e03f4b5870e334f0bee3b2cced561ec79bdd8c76fafff1a4d08fec8b36d0675cbced940beb7abc8a8685e1822cbec65a166a937b0efbb08d4875371543613906b63e3cb09a65efbab12f5e758303bfe2df9a21a2df3fbe94ac2b46b821b16461f4043d2c38e6aed4c3bd4b430e41e05603587905632cd74572fccc885204779c850016df1b8f3ef0c28543c069b4bba951d548e760d7706dfb8a64e6f4423c4036fda03c760fddda4b60275a0a5a94748f8d2047c58d486efe8c61efceb5a6f0e295b39f396edd5cf2ffdd2ea9364a03a8f1e44b976e99b4c5d4282ac2cb2458704f7d0eb33f89dd3aa21ae9a0dd1f9fec1574d44d2d3bd6c1ea7fae2181570400b35ce38f7e68ce3928d674d7203f5c0e450a16425cae53108e95e7e2042144fad87201137e6a7bbb78999a5c61059885f6fe5d461afda4245caf53e3b10f10f3a0b28064bb48120e1969cca210d6447ee91887c6338c62e1e0eecf275187a09197e87ec0e6dd9dd92de8a9380c007820e7ec9ec430c7e006bcdb31cb220d9a80a7f0ef2d43dd5fd801726db2e8a982b20f349272e3be301c6d10c2b0f81186c5ed54cd5adde2002737043d745dcdbbcbf8743c9d54e30450637d4c1b65527832f527f55f175ce0389f0356bb39d4ee6b819169613f80ae186528f7c14ab6443e3629a61daf797f332d6c2475604bf37942dd5fa4b9e1435283ec57071f8e2edb379885c7dc77ae731a53d51b18620b16264343b479adc7acab84d2315eacd892f56f4132333505942a4f627758de6dd8902f9042d4f97a8b9d1c4befafb091c5dee86ee5a1bb695bb6fb92e1f5b5f353a2f4bee67a0a71c03e2f9a490d85b683ca31896afb243b56a4bdcc154629237e2e1ed36ec28bbe1db5b91f799f58bd55c4e3c80980bb4e75e84f07e0918c23f51412ffeaedc115d51f16b5ceebff5fc0febfdf08629e7f6f6ae2a3d670eaf120e790240d09728e2b7def35eed8cfb1b00914ad134c39a6c19bb67b8e0bcb55d0bbfa8b22365ccfdcf517655b22d669ee7260bcf8903053335c3592bc8ce40819872d8a8d8e0d64f998146076b1a082f1297f436f72942ca389edf6b19b840dbbfb8f5e03003b762ae4fa128ab21954a0c9c58ca291d690b789ca2e188b6255ca774106bfcbe7fad9cc45022dabb15ead45aee2cfccb2341ca676cd18ff3faca74ab3259c21888d43cb651d2448f9b6b6b096742d4f3843aaa6a2f6ca885983fb8dd083d6194e44c9ec9cafd0469b23fbe02f2241d93e3736b75015708f37deb4542239d30724ef9b153c32b8efb27fc4a79487bb22ffdf3f4eebc8c695307e38d976760284d580604e3a1a055e117c991966611adaa74bbc04171731ff40e0999ca7e8eddb3c30639ccd81ad9b964c0dc19b27deff9634d14f52ca5e04a598691304d390b6d05cb0442ee68ace13a9f56e4478686f9e34ac0dc598be346d7c7b75561ca84286e49010c5f95c0413c6f2e3f0ee655fe064053e3ba55c6f9074d6423326cc233fef05e0719b68cecf909bf42d5ea6394b2b2835f0ca7269af3a918aa543acb10014c8090d7ddca72e0ae43fc08af213cffb97a790703586541fecf9f45afdcb06e4ef2f88e4556760fc796adf12b70b2ee26f094f13f8beb463b41b7062074b43c9d442f34fb53110fdbd9cb307db9e6070a686b82e286ee30612b9668af1c5a4c01d5ed924c64c5bb4387a62e16126c02c252e1a5f603e818f9aa7ecd5239688b501652390b69aaca6b58d64b179a929a228a294be2329bf9b6010c18605a0057b43f80511a64d54668728f21d363f263fc7a2f8055765cf349195925181dafdb9b29b33b4617df61d8580127958d1e94880569c53f51769f472fd7f1314c22fcd591ca396d832c98ef736ff2bb70c76634b3b733e185cd6d917b98eaaeca39e44c33c96677c12eca05410ce04c630ddb39ea5ffbf1960a4da06639dd38b3d89ead091ca2b324edaf4d9a27696ecc46bce6eb95d916fc7cd2b73ca619eeeaf05f8aeb41b6ccfba0d61b952fe403ec98f60604b001c4ef4ddc84870c25f29541bb44c0ba3dc67222599b6b92d83ca3a094f66b05593bd1fc0574218fe490abf6b8a18c1cdea95fb528d7fc9da3eae51ddbf6c517aa41fee7960fad7b747b89e98c4c764e54d9dd599844304a87ca9058f44ba3fc0cbb6d6bb9d400daef4920bbf967df1bd0d5378e2584df7f6bd3c2926a9cdc9b275a3b26e8faa2d79005485125cd54dd839ff9b6367b61e154e02aaf7011cbbd6f1ab8dcb32a20c1a9fd2975936b77a220e0c2c06cc476c31e71a7ae83a4298c5549bd99f5815aa2d76574d257dd464af5bc33d27a7bdf74203237b919f291c47168ad2c3b1470cd942ca2cb361bee044b6502f58592f911917c829ca2e3e9f7e8dd66ee4aeec5e96aaf13ede57696dc8ecb36d0fb20808fbc462f95fb36bdc8bd962bb321293bb042b4ed11ef87eefa4bb0b1e1c49c2112bb5443991da9357d5b6a94a6f06a8f03bd189f22bb2026f913fe530ec270dbdef82e6291f4f4b7f830dac80ebbc3da99f9a425dc59c9383548718029ae417a2ff102b6237d4b488411d3be4f87d003acd1a53b4ee281ef16a69005059140d1edee2b97e273b0f79fbfb63bf36d38887941afe18264b0911dd8d3effe4525b941940cf08c710d9bf7f8973cb609851e9cdc3c208349ad5864d36c281e714e8382376583095a5d460b8a4732d21aa952d1a56c55348fabbccb32f495451bae83628904f40900ead221e6d1327087012ae4c05cb566e8d5ad4f6eaa0c31f38cfba535cdbdee26cfd692cd24d5847062595ec86f1fce420552607ce283db00bb51a51f0ffbaaf7da1cc810472c849800433b00a545a22408eaec49570b6ac1859a7306a9b19528bfd127bd024b2f924a7c00d18d6f1ed5b4aff4bfa2fd22aa2656b3d69d44bad3c5cf92711a6e859dd0d15ec09cf96ec40967272d7189e627846da797b7c21745a8999958a5779b153fbb46697814232eeafe4b799d0fd3379e821044d108d5cd07ac9ed8453ea9d346ffa98bb5c7e9f350296ccd2f25623be905896f9ece8b2026487fbe0f931119142614877fb6a8d6ae3bcaab83fd694e7c8aa7b2d01cc6455b692be5ead148703b6f2d60b2798875788df301a9919f34fdc44955680a390a116202992c4301b34e2ed20aaa9f15cc6d19cb4e00f74f0050d67a91ff2938c0d4cac3c82a0ebfef7188e5d1c1da31c5e5df682d133db2169212d4b78241e7850dffd2cab0465559876f04231a97960cbf9b5ff2f4d2475013d9384700226b54937d6d8bea551e4ce5d79867c3ae3342c2bf1a4323fb3321bfe28cb303351718fa87c391c2177950b6872bbf36d97e386ba1ac97abb33a0cf11eb474cb0a0818e6e22e2642abca9612377cb46aae629f063df510586fedea4d75f0ab41d945343cd43a408b7fad323f96d62eabedb00c0f3cee0fc3152552eb01153f1e622a58cd4efa80e6776ba2d6f5cc5793528176d77841ffd5e9166d297d0439503eea95106f858a3e609b25539aa08575eb54e76276366ec24ab55036d166378eb3fa721378a31281d311f953227ce6e633b9e47ca0fcb85d70296e73d412e9c6cadb1c9807c53a6083c4b44076d3306de92abd325d6e7cd6e13ae1542da5d1e109be66e2516984c77943aaa972a1a866ce6571a6f3fa4f0ec656da9d8af6a7626ea50e5e8ad0626fa7943464fae231f8a6591f02e7d01a9c2dd9ffea2a8dd471cb023d09935faee3db468489f2ef42e4e9e0bdc7daa1d0236555f1ecc50d19f82481276f98af0f7fde0cbdbbac368da5b09e4f9b6302abc972a6319fe62d8ef1c23358a5a89494875f2a640e316a8e534291145619c79890b9af0925e63a9e5f691f88237550873d7ebc5c6dd208ba0139323bbe7c3db4b0a09c852adc093f54000c7a2fe2344502d364c9774a58e6ed378aa8addd232710eb218d84fad44c03ac79144da885e689a6e065dda134c4634e3f53a98b086fcb00b8c2798acb3b3ba7f43c1f35f69ac0d894891027374f71f6d52b80ae9f6a7b177994802303a1d19e8f3a3b6abc245dceb6c763835cb78294338bedc7b7e3a022be264739b26573df2c671fd5b18160f287606fee4da76c07d8c1d9698554812b2b5a5ec239f0654f3e733b35658c2642b13ac8842dd1c72c6743e78adbd20bb2ffcca0485f3ac2bcc898d75ef4c5c343c35cb8caa663686ffa9ffa51404048c16c1c82c2a536985c5a77f6853f0a435b50c141a19aa44cc10925c61885a9f62b690ad25e7e4993476d6e10f9bdc9345dd2db1b010ab42d050d1bb71ef1f85b27254fcb8c8a7749189058f7a85e0a9f7c8df7835052689f8423508c8fa75acf9f130ae3e2da84024ee450c32e1547d067250b5c190f41278f8e56b256a4b8e57529cb5a765ec6036b69e8a324c1213d8d", 0xc50}], 0x1}], 0x1, 0x0) 05:58:17 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)={0x0, 0x0, [0x0, 0x9bd]}) r0 = semget(0x3, 0x3, 0x20) r1 = geteuid() r2 = getgid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000000)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000400)={{0x5, r1, r2, r3, r4, 0x1, 0x10000}, 0x3, 0x0, 0x40}) 05:58:17 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000080)="a051a76ad5e23ee61bd2a34c449ea3df281232817faaab1e448bd877dc62d71a413608fa89d21861ed7d1003940071523db34f280b7b7fc09bb4ab6839b7addba8bfe9166c7e5f192a769032f5c7c15518bc2ee98eca65fab41768323500779ae251557c52ff3681") r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f0000000140)={0x6, 0xc413}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000100)=0x0) socket$vsock_stream(0x28, 0x1, 0x0) io_getevents(r3, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000000)={0x77359400}) io_submit(r3, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r2, &(0x7f0000000140), 0x703000}]) 05:58:17 executing program 0: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20) getsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000000), &(0x7f0000000080)=0x4) r1 = socket$inet6(0xa, 0xf, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x800, 0x0, 0xff}, 0x20) 05:58:17 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x713}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={r3, @in6={{0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, [], 0x1d}, 0x9}}, 0x4, 0xff4d, 0xff, 0x8, 0x40}, 0x98) tee(r0, r2, 0xfffffffffffffff9, 0x2) 05:58:17 executing program 0: request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040), &(0x7f0000000080)='wlan1*+cpuset\x00', 0xfffffffffffffffd) add_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000100), &(0x7f0000000140), 0x0, 0xfffffffffffffff9) r0 = memfd_create(&(0x7f0000000140)='keyring\x00', 0x2) keyctl$negate(0xd, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") socket$inet(0x2, 0x803, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@link_local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0xe805, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @broadcast}, @udp={0x0, 0x0, 0x28}}}}}, &(0x7f0000000380)) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}) [ 207.923249] attempt to access beyond end of device [ 207.928647] loop4: rw=12288, want=8200, limit=20 05:58:17 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x101800, 0x100) setsockopt$inet_mreqsrc(r1, 0x0, 0x25, &(0x7f0000000200)={@rand_addr=0x2, @loopback}, 0xc) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$inet6(0xa, 0x80803, 0x7) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)) sendto$inet6(r2, &(0x7f0000000340), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x7, 0x0, @mcast2}, 0x1c) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) ioctl$KDADDIO(r1, 0x4b34, 0x200) 05:58:17 executing program 7: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x3, 0x0, @loopback}], 0x1c) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x5, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)=0xffff, 0x4) ioctl$TIOCGPTPEER(r1, 0x5441, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000140)={{{@in6, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}}}, &(0x7f0000000240)=0xe8) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r1, &(0x7f0000000340)={0xa0, 0x19, 0x1, {0x30, {0x80, 0x0, 0x4}, 0x4, r2, r3, 0x7fff, 0x8, 0x41c, 0x5, 0x6, 0x81, 0xfffffffffffffffe, 0x5, 0x7, 0x4, 0x0, 0x7, 0x2, 0xa2, 0x3}}, 0xa0) 05:58:17 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x12, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000180000008100000088a8"], 0x0) 05:58:17 executing program 1: mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x0, 0x2000032, 0xffffffffffffffff, 0xfffffffffffffff9) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000100)) mbind(&(0x7f00009e8000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000040)=0x100000001, 0x10001, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000140)={0x80, 0x7, 0x52, 'queue1\x00'}) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000000), 0x10) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000200)={0x8f0a, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e24}}}, 0x108) [ 207.984082] attempt to access beyond end of device [ 207.989217] loop4: rw=12288, want=12296, limit=20 05:58:17 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="025c3f0a00145f8f764070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r1, 0x227b, &(0x7f0000000000)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x2, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r2, &(0x7f0000000380)="64552c1b48d919acfa3cc34f2e8646ba088592ea6191dbb50c5f037aca2126a33cab11b59cb6be5f5205cd9815c761b2d1af0c5055479c1fb430164374e871a6a33cbc2f3b8d1b5f9c32aeff82be3fb73e77ebacf676ed1b0ba4381337fc2255b0b413d9879c3cf98c3ec42177283d3e19bc2916c049c5cc980544e79fb39bf88d853edef1e8e753c0a729e0cbfb36ab901be48c8822aed841f0054449f4aa3beed6ec4c10e09e0084d24f3e04200456ab14a0d85ae04517eb8778f914bafb088f69c92e8d3405b77ecfafd5d706f0eefe75f8e06a67ca5cd007415d738029496cc87b1aef4bf2a1b049cc54139c806ad6ad6f3186eecadd"}, 0xd0) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="21000000030000000000070000000000000000f3d72954729939c786ba9d54340ddcd04bc52930e73f442664c8197637e6e8bbac00c89fd1dae4394d3fe37f203dd62971a3bf9a6eb0312bd3b2576e15a3834e2b40d18d756e5002"], 0x21) setrlimit(0x7, &(0x7f00000000c0)={0x1, 0x2}) 05:58:17 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000100), 0x8) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x20) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000200)={{0x1, 0x3, 0x3, 0x100000000, '\x00', 0x8}, 0x1, 0x4, 0x3f, r2, 0x9, 0x6, 'syz0\x00', &(0x7f0000000140)=['user!)vmnet1vboxnet1keyring\x00', ']cpuset\x00', '@\x00', '#wlan0!\x00', '\x00', '{\\\x00', 'vboxnet0security*keyringbdevkeyringvboxnet1system\x00', "ff2d6367726f7570736563757269747923706f7369785f61636c5f6163636573732d00", 'proc\x00'], 0x8c, [], [0x4, 0x401, 0x8, 0xfffffffffffffff9]}) 05:58:17 executing program 2: r0 = getpid() r1 = socket$inet6(0xa, 0x80802, 0x100000000) clone(0x200, &(0x7f0000000000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f00000001c0)) read(r1, &(0x7f0000000140)=""/223, 0xdf) mknod(&(0x7f0000000080)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000ee6ff8)='./file0\x00', &(0x7f0000000000), &(0x7f00000000c0)) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, r0) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(r3, r0, 0x4, 0xffffffffffffffff, &(0x7f0000000100)) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) open$dir(&(0x7f0000000380)='./file0\x00', 0x27e, 0x0) 05:58:17 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xb}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @local}, 0x1c) listen(r0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e22, @multicast1}}, 0x8, 0x140000000000, 0x2, 0x7, 0x8319}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000180)={r1, 0xffffffffffff997e, 0x8, 0xfffffffffffffffa, 0x36b, 0x1}, &(0x7f00000001c0)=0x14) ioctl$sock_netdev_private(r0, 0x89f9, &(0x7f0000000280)="806e1b9971b146f8c6d4862efdc9b56ea2277cc632598ab405fa91f5") syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x8a00}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x755f78d2}}}}}}}, &(0x7f00000002c0)) [ 208.057942] attempt to access beyond end of device [ 208.062970] loop4: rw=12288, want=8200, limit=20 [ 208.069876] attempt to access beyond end of device [ 208.074876] loop4: rw=12288, want=12296, limit=20 [ 208.099064] attempt to access beyond end of device [ 208.104146] loop4: rw=12288, want=8200, limit=20 [ 208.109239] attempt to access beyond end of device [ 208.114229] loop4: rw=12288, want=12296, limit=20 05:58:17 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='uid_map\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000006) [ 208.151885] attempt to access beyond end of device [ 208.156904] loop4: rw=12288, want=8200, limit=20 05:58:17 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)) 05:58:17 executing program 3: sched_setaffinity(0x0, 0x1cd, &(0x7f0000da3000)=0x2) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x402, 0x118) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000140)={0x80, 0x7, 0x4, 0x0, 0x0, [], [], [], 0x7fff, 0xfffffffffffffff8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) read$FUSE(r1, &(0x7f00000020c0), 0x1000) umount2(&(0x7f0000000100)='./file0\x00', 0x0) 05:58:17 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000440)='{posix_acl_access@%vboxnet0\x00', &(0x7f0000000480)='/dev/sg#\x00', &(0x7f00000004c0)='/dev/sg#\x00', &(0x7f0000000500)='GPL#\x00', &(0x7f0000000540)='{vboxnet1]em1\x00', &(0x7f0000000580)='/dev/sg#\x00', &(0x7f00000005c0)='/dev/sg#\x00', &(0x7f0000000600)='/dev/sg#\x00', &(0x7f0000000640)='/dev/sg#\x00', &(0x7f0000000680)='!wlan1%L\x00'], &(0x7f00000007c0)=[&(0x7f0000000740)='\x00', &(0x7f0000000780)='-eth1[cpuset%\x00']) r0 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) sched_setattr(0x0, &(0x7f00000000c0), 0x0) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) dup3(r1, r0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000280)=0x1) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000340)=""/141, &(0x7f0000000040)=0x8d) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000300), 0x4) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000240), &(0x7f00000002c0)=0x4) fchmodat(r1, &(0x7f0000000080)='./file0\x00', 0x88) ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000200)) 05:58:17 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r2, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) fstat(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000000300)=[r3, r3, r3, r3]) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltgid={'dfltgid'}}, {@noextend='noextend'}, {@access_client='access=client'}, {@cache_loose='cache=loose'}, {@uname={'uname', 0x3d, 'vboxn\x00t1(}%$'}}, {@version_u='version=9p2000.u'}, {@cache_mmap='cache=mmap'}]}}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 05:58:17 executing program 5: r0 = msgget(0x0, 0x687) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000100)=""/89) r1 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'veth1_to_bond\x00', &(0x7f0000000080)=@ethtool_coalesce={0xe}}) 05:58:17 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0xfffffffffffffffe, 0x3) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000140)=0x4) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000400)='0', 0x1}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f0000000240)=0x8) [ 208.207658] attempt to access beyond end of device [ 208.212672] loop4: rw=12288, want=12296, limit=20 05:58:17 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b700000000000200bfa30000000000000703000028feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000012d400600000000006506000001ed00003f140000000000006f460000000000006b0a00fe000000008500000007000000b7070000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0xa8}, 0x48) 05:58:17 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000140), 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080), &(0x7f0000000140)=0xb) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f00000002c0)=@ethtool_flash={0x33, 0x0, "294eb049fe0b3aa6ddc3dc9c4cb5d42183ed183540d2841caf7df5924e89a6cd6fcd6906699230b8640506141e3e27276e2e0bbaf4d69f24553f08e95f3a2d22c4836a08ba09217700a29bc4108bf36ec66c6daae395918a507cf58b6ff686a06adcb10e936b6843782146c4a6882d05530c3b33120380ce60023efe71b101be"}}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae8a, &(0x7f00000001c0)) 05:58:17 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r2, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) fstat(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000000300)=[r3, r3, r3, r3]) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltgid={'dfltgid'}}, {@noextend='noextend'}, {@access_client='access=client'}, {@cache_loose='cache=loose'}, {@uname={'uname', 0x3d, 'vboxn\x00t1(}%$'}}, {@version_u='version=9p2000.u'}, {@cache_mmap='cache=mmap'}]}}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) [ 208.356241] attempt to access beyond end of device [ 208.361278] loop4: rw=12288, want=8200, limit=20 [ 208.378156] attempt to access beyond end of device [ 208.383182] loop4: rw=12288, want=12296, limit=20 [ 208.392464] attempt to access beyond end of device [ 208.397484] loop4: rw=12288, want=8200, limit=20 05:58:17 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x7fffffff) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x2) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) clock_adjtime(0x4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365, 0x10000}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c460af93aadae11b75b76f8f1afeca90ebd99af0800060000000071020000000010"], 0x14) open_by_handle_at(r1, &(0x7f00000001c0)={0x6e, 0xe48, "a9600cb536e86d9baeca951cb1288e5e30c0ee54d197fc518000cbc1228a261a97faa3caf5c615751e16e15d93033278e1254ef51fadd43524f8d8c0e686d651267c25adf436f0f33bc11b12226b64cfac79f7d8a225e09f833fa10604ff79a7543fefc5f0c4"}, 0x8000) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f00000000c0)=0xe8) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0) 05:58:18 executing program 7: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000080)=0x5, 0xfffffffffffffea0) 05:58:18 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/autofs\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r1, 0x8, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x894}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x8}, 0x2c) r3 = socket$netlink(0x10, 0x3, 0xa) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x404000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x7c, r4, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1bcb}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x1a}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x1c}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x41}, 0x80) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r2, &(0x7f0000000240), &(0x7f0000000040)=""/200}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r2, 0x28, &(0x7f00000002c0)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={r5, 0x6, 0x10}, 0xc) 05:58:18 executing program 5: unlink(&(0x7f0000000200)='./file0\x00') syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001440), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRESHEX, @ANYBLOB="dd22f1562ccb"]) mount$9p_virtio(&(0x7f0000000080)='\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x40000, &(0x7f0000000180)={'trans=virtio,', {[{@nodevmap='nodevmap'}, {@privport='privport'}, {@mmap='mmap'}, {@debug={'debug', 0x3d, 0x47}}, {@version_L='version=9p2000.L'}, {@noextend='noextend'}, {@version_L='version=9p2000.L'}, {@access_any='access=any'}]}}) [ 208.424551] attempt to access beyond end of device [ 208.429621] loop4: rw=12288, want=12296, limit=20 [ 208.500679] attempt to access beyond end of device [ 208.505728] loop4: rw=12288, want=8200, limit=20 05:58:18 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x102d}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x10, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x5, 0x201a7fa6, 0x0, 0x1, 0x5}]}, &(0x7f0000f6bffb)='GPL\x00', 0x800000001, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x24002, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000040)=r0) [ 208.557747] attempt to access beyond end of device [ 208.559968] FAT-fs (loop5): bogus number of reserved sectors [ 208.562826] loop4: rw=12288, want=12296, limit=20 [ 208.568599] FAT-fs (loop5): Can't find a valid FAT filesystem [ 208.602006] attempt to access beyond end of device [ 208.607018] loop4: rw=12288, want=8200, limit=20 [ 208.612150] attempt to access beyond end of device [ 208.617150] loop4: rw=12288, want=12296, limit=20 [ 208.670521] FAT-fs (loop5): bogus number of reserved sectors [ 208.676459] FAT-fs (loop5): Can't find a valid FAT filesystem 05:58:18 executing program 1: r0 = epoll_create1(0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = eventfd2(0x0, 0x0) r3 = dup2(r2, r1) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40401000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)=ANY=[@ANYBLOB="01000000", @ANYRES16=r4, @ANYBLOB="00022dbd7000fedbdf251100000008000500ff01000028000100080004004e220000080008000008000008000b00736970000c000700040000002800000008000400090000000800050000000000080006000100008008000400080000001c0002000800080006000000080008000180000008000500ff070000180001000c0007003500000002000000080004004e2100000c000100080001000a00000008000600ff070000"], 0xac}, 0x1, 0x0, 0x0, 0x8000}, 0x41) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000780)={0xfc, 0x1}) io_setup(0x3, &(0x7f00000005c0)=0x0) io_submit(r5, 0x4, &(0x7f0000000540)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0xad4, r2, &(0x7f0000000080)="f11375f99ddfc01a9602e69661f68c59787f9e7b340d05a371cc2ac47365823693308f73ee67d92bb3e98739ffa184343d43507e2251b17b7a7ab1a84e3d80cd6346bed9eae06cf6879085de260de4269e2cb9c2a9c95ac39c42a53c6525c3cb82c9f620cb1d8707e0916f1552ede5f1562c1ac1855df7e41e0eaf5d932ac8531a2a456367a0db252380777fa68b3e1df81ecf269ab4a3e3c91ecbe8349399338cba2894f1b7a3c425c813cc800ccb62", 0xb0, 0x3, 0x0, 0x1, r2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x3, r0, &(0x7f0000000180)="4a44f146923a40e8704f8773492f6577a2abb6afcb5bf3d664404d453d8fe6499cb3ea1c8f59db2e282ebef024ac7296e9a29a4298896a96693280b78e980bc0eca28a56a538355e11483964c3809339514fb336efbe559e98e174541aa0bb6b95f5ad287bb9568ea3bbdf84c5eabda8dbf5cb8a4d1196c93ef535bb1babd24aac38dcdfc5cc23b0a9eded6c56935ba7ed622db78cb6481fd166647898c924c4df9739493b965385e719ad7e0f0f4d0a05b431b6f21e263ed8d9ea4404e9db8a29679674e32af1239856f6f2b4992edf103ea49bebc9fd985c79992a005d6358", 0xe0, 0x3ff, 0x0, 0x1, r1}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x3, r0, &(0x7f00000002c0)="0c2de073a125f353d7fa078116c4ba01ed55040a16bf0e4b38d37ad93be3c7ae37a2cbdd18f597d1e4378f7316fcdf0e820e8c4fc32fa8e28baf50d4ab43a2fc5b4d30372548b26833ba46eaef206b647e908c8bfe5ce728b938c29de9e227e28f8d34ecfe5b4dbfde86d02b9407512766129aaf72ebe495ebb1fc06359b0c54ec198b697b15d4a032a8a48ab3081f46bbcbf3496070fc5c869c9d7cf8c34b91d4a2bc62e7093654753ef049c3198243a1975005dfada5cfc735acc1fdbca1188a1917a9216c76e978beef3c6ab594a35b", 0xd1, 0xa8, 0x0, 0x1, r2}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0x2, r0, &(0x7f0000000400)="f9ad233789335cd3c9b726f58c5907b5282fda9f5c32eef1ca0804cf530addf23844c3635afa342682ea38f608b7deaaef825508804a6e7e5fea715b53f259e26f05cc30c19b04b2a93bb4ad555a5b4a8f79420fc9b4e4b5e64ba6b17763a02b506e5e636c92f84b36593514f4f41fdf3d24f667249e9c613fc873fe29082f23230f52de14a8352dc1c4618a3d80f7effa288ca660e0ed02d22e319e9b18968f763a7d1bd77b8e27886a8ad543e6233d72b6b0ee4baad7f97bbd482826f32230f8", 0xc1, 0x9, 0x0, 0x1, r1}]) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000000)) 05:58:18 executing program 2: r0 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r1 = socket(0x1e, 0x805, 0x0) r2 = socket(0x1e, 0x2, 0x0) bind(r2, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001b6d7c980400000000f70dc136cb184a"}, 0x80) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40001, 0x0) ioctl$TCGETA(r3, 0x5405, &(0x7f0000000080)) r4 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000180)=@req={0x1000}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x94) 05:58:18 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000100000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 05:58:18 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffff9c, 0x400454ca, &(0x7f0000000040)={'ip_vti0\x00', 0x8200}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x33d) 05:58:18 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r2, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) fstat(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000000300)=[r3, r3, r3, r3]) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltgid={'dfltgid'}}, {@noextend='noextend'}, {@access_client='access=client'}, {@cache_loose='cache=loose'}, {@uname={'uname', 0x3d, 'vboxn\x00t1(}%$'}}, {@version_u='version=9p2000.u'}, {@cache_mmap='cache=mmap'}]}}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 05:58:18 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000001800003d4e2304e29e13223a002500000000000000950000121f000000354ea6fd2a01c2ccfb8d10b2b3b9a24bb91e2b5255ee3cc4057d614586f2cb00a679f6051de694ab08000000448edf717df1ae028e31cedd83f8d310bee893b9b1ae7a9779ffa25f78a587e94a9e21d70f87b99759c2c908c96c"], &(0x7f0000000000)="504c20004cf7d12af11ce92537b5e3191e66de5d4ec18e4c2df01484a86d77842f624946eae310794c8c96ff1466232e25951139bda5d2990e523f8ec3080ffc1224d8dc4c84a9c8e8ab31576806715523fa749e8615c61049b8b1be6aa7740702cc5add", 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) 05:58:18 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)) 05:58:18 executing program 5: r0 = socket(0x10, 0x2, 0x0) mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, &(0x7f0000000140)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'btrfs.', 'btrfs\x00'}, &(0x7f00000002c0)=""/252, 0xfc) syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x20000, &(0x7f00000003c0)=ANY=[@ANYBLOB="7373bf3e117d77d59666fcb322b5c38d1a5e80a24280e657b3b6a5389dff24202bc12d09c4f3c77446144a8393dace3ad59ee389407c4b17fac578fde9df79f35bf762e04491b68de644bd8220f37fe7081faf54890d4dabd3ddf8c75b2e10fe8656b418fc87f17504cc7b009079f222d3a5b1fd8c17111a8a2b2158e895bf960d5bae0afbb4110cd9069ff986aeb44fcf882b4959d996d53b8a40c1bc8860fed341b640585ef5df6f86c7b83b28a58406428e7deb294106bd59f9df52f8ddf683bf5fa8445a84543d1a4d8ff4a1"]) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, &(0x7f0000000100), 0x80000002) 05:58:18 executing program 3: r0 = socket(0x1e, 0x805, 0x0) r1 = socket(0x1e, 0x805, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x8000, 0x0) ioctl$TIOCCONS(r2, 0x541d) listen(r1, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda) sendmsg(r0, &(0x7f0000000140)={&(0x7f0000000180)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000380)=ANY=[]}, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x1000000008912, &(0x7f0000000280)="024a903d6d345f8f762070") accept4$packet(r1, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000001340)=0x14, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x200, 0x0) ioctl$SG_GET_COMMAND_Q(r4, 0x2270, &(0x7f0000000080)) [ 209.010362] attempt to access beyond end of device [ 209.015404] loop4: rw=12288, want=8200, limit=20 05:58:18 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r2, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) fstat(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000000300)=[r3, r3, r3, r3]) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltgid={'dfltgid'}}, {@noextend='noextend'}, {@access_client='access=client'}, {@cache_loose='cache=loose'}, {@uname={'uname', 0x3d, 'vboxn\x00t1(}%$'}}, {@version_u='version=9p2000.u'}, {@cache_mmap='cache=mmap'}]}}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 05:58:18 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2000, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=0x0) fchownat(r1, &(0x7f0000000040)='./file0\x00', r2, r3, 0x1d00) setsockopt$packet_int(r0, 0x107, 0x800000000000000a, &(0x7f00000000c0)=0x8001, 0x4) 05:58:18 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x3, 0x8) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xfffffffffffffffa}) read(r2, &(0x7f0000000280)=""/191, 0xbf) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x100, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xde4ea4e752ed57fb) ioctl$TIOCGLCKTRMIOS(r2, 0x5412, &(0x7f0000000000)) 05:58:18 executing program 6: r0 = gettid() madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00006d6000/0x3000)=nil) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) munmap(&(0x7f0000898000/0x3000)=nil, 0x3000) madvise(&(0x7f0000541000/0x2000)=nil, 0x2000, 0x8) [ 209.064026] attempt to access beyond end of device [ 209.069102] loop4: rw=12288, want=12296, limit=20 [ 209.103633] attempt to access beyond end of device [ 209.108684] loop4: rw=12288, want=8200, limit=20 05:58:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000040), 0x4) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000500)="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", 0x22b, 0x10000}], 0x0, &(0x7f0000000240)) getcwd(&(0x7f0000000280)=""/194, 0xc2) [ 209.116154] attempt to access beyond end of device [ 209.121212] loop4: rw=12288, want=12296, limit=20 05:58:18 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000000000000, @perf_bp, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 05:58:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000240), &(0x7f00000002c0)=0x4) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") close(0xffffffffffffffff) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000000)=0x7c, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r2 = dup2(r0, r0) ioctl$sock_bt_hci(r2, 0xc00448f7, &(0x7f0000000140)="3110463c30ce8df7004443a6057039249ff3fdee8da366fa7bacd04414998222490fb180959da302fa3d2bd6aab7219db7014c937d741c868fb37b32541739b646a90dd93044e4f7675ef7b16f2b6c9bdc0418e65731f6db92cc5a8f3fc1446eca5909d2881fb567bb98ac1b6c8879bef67e673802295228572654f0e1e75325fb67d957613d74555494c764be3c8d0bc0adf6a946aa8cb058ae9a72b79a9fa2d8befba68c1e04904c3f61a77b7c6f88dc88c48a86a54362ade93e0233593d93a972d0089ffe96081357217da8061d253bacaebf788cec148bc848b33eb343e718119ccfae1ab9c3e4") socket(0x0, 0xfffffffffffffffc, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000001000), 0xc5) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000001800)='nv\x00', 0x3) shutdown(r1, 0x1) socket$inet_dccp(0x2, 0x6, 0x0) io_submit(0x0, 0x0, &(0x7f0000000600)) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000080), &(0x7f0000000100)=0xc) 05:58:18 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='maps\x00') r1 = getpgrp(0x0) get_robust_list(r1, &(0x7f00000001c0)=&(0x7f0000000180)={&(0x7f00000000c0)={&(0x7f0000000080)}, 0x0, &(0x7f0000000140)}, &(0x7f0000000200)=0x18) unshare(0x2000400) fstat(r0, &(0x7f0000000000)) 05:58:18 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket(0x15, 0x80005, 0x0) getsockopt(r1, 0x200000000114, 0x2713, &(0x7f00000000c0)=""/1, &(0x7f0000000000)=0x1) r2 = add_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000002c0)="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", 0x1000, 0x0) keyctl$assume_authority(0x10, r2) 05:58:18 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000040)="6632667310", &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)) 05:58:18 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r2, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) fstat(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000000300)=[r3, r3, r3, r3]) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltgid={'dfltgid'}}, {@noextend='noextend'}, {@access_client='access=client'}, {@cache_loose='cache=loose'}, {@uname={'uname', 0x3d, 'vboxn\x00t1(}%$'}}, {@version_u='version=9p2000.u'}, {@cache_mmap='cache=mmap'}]}}) 05:58:18 executing program 7: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000), 0x2) r1 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)={0xb}, 0xb) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000200)) [ 209.277627] BTRFS: device label d+Q§±'ç ñ¿¨S [ 209.277627] dÞ±.1ô”&ËÆ£%2æß? devid 2530879793048935964 transid 756082810144684242 /dev/loop1 [ 209.315921] BTRFS error (device loop1): unsupported checksum algorithm 3786 [ 209.323202] BTRFS error (device loop1): superblock checksum mismatch 05:58:18 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet6_int(r0, 0x29, 0x5f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x1, 0x0) write$sndseq(r1, &(0x7f0000000000)=[{0x81, 0x4, 0x0, 0x0, @time, {}, {}, @raw8={"959546592b83c98a10d789af"}}], 0x30) [ 209.385805] BTRFS error (device loop1): open_ctree failed 05:58:18 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) connect$pppoe(r1, &(0x7f00000001c0)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'eql\x00'}}, 0x1e) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000140)="0f013b360f2264808abab818f367360f001d00000080366435d88d66b9800000c00f326635000400000f300f221767f0827604976766c7442400156500006766c744240229c200006766c744240600000000670f011424dadd", 0x59}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:58:19 executing program 6: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000540)={{0x3, 0x3, 0x1, 0x2, 0xffff}, 0x1ff, 0x8001, 'id0\x00', 'timer1\x00', 0x0, 0xff, 0x0, 0x2, 0x7f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x0, 0x0, 0x1}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) read$FUSE(r1, &(0x7f0000001000), 0x1000) open$dir(&(0x7f00000000c0)='./file0\x00', 0x4000, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_OPEN(r1, &(0x7f0000000040)={0x20, 0x0, 0x3}, 0x20) close(r1) 05:58:19 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)) 05:58:19 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r2, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) fstat(r0, &(0x7f0000000280)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltgid={'dfltgid'}}, {@noextend='noextend'}, {@access_client='access=client'}, {@cache_loose='cache=loose'}, {@uname={'uname', 0x3d, 'vboxn\x00t1(}%$'}}, {@version_u='version=9p2000.u'}, {@cache_mmap='cache=mmap'}]}}) 05:58:19 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETA(r0, 0x80045439, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc5, 0x1}) 05:58:19 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = userfaultfd(0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000f6bfe8)) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RLERROR(r3, &(0x7f0000000100)={0x6b, 0x7, 0x1, {0x62, "1a3cf611c17f5a86f6344c69b0cce12b6eb5a4624c5609e743c1c1f53a0a343ad6d6055cf474b4a75c3632f945e0b9bd961dd3efdf31475bfc9e8c73bac1e04608b352524b599d0c4f408c00cddbd9f5e18c0e55e51472ada7ea35f5404b48fa9ac5"}}, 0x6b) clone(0x0, &(0x7f0000000400), &(0x7f0000000180), &(0x7f0000000000), &(0x7f0000000280)) fadvise64(r2, 0x0, 0x7, 0x5) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000072f000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x3}) 05:58:19 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @multicast1}, &(0x7f0000000240)=0xc) poll(&(0x7f0000000080)=[{r0, 0x1000}], 0x1, 0xfffffffffffffffc) r1 = socket$inet6(0xa, 0x6, 0x7) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000140)=0x3c31) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x28, 0x6, &(0x7f0000581000)={{{@in=@rand_addr, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000000000)=0xe8) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000180)={@multicast2}, &(0x7f00000001c0)=0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffff9c, 0x890b, &(0x7f00000000c0)={@empty, @mcast1, @local, 0x1, 0x8, 0x7f, 0x100, 0x81, 0x120, r3}) 05:58:19 executing program 3: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1563044000000000b3e3176210f0ae43294fa76eb5b12aaf0a87b1f64301e1b21f4bdcfb69f6df3c90100939457fff40832f291d963ead45ad8cdd1d5d2da9755ce810bc3312bb435c9e17c623bfde33b1288076e69ee130f5e90d000099823d98ba"], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper], 0xfffffdca, 0x0, &(0x7f0000008f37)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000100)}) [ 209.559042] attempt to access beyond end of device [ 209.564101] loop4: rw=12288, want=8200, limit=20 [ 209.623370] attempt to access beyond end of device [ 209.628429] loop4: rw=12288, want=12296, limit=20 05:58:19 executing program 6: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x2, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f00000000c0)=0x1f000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(r0, &(0x7f0000000140)='./file0\x00', 0x40, 0x1c5) openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x400001, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000100)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000000408ffff000000000000000000000000663827b01faa0df84d77392b214acf4687bbdc7675ab4a48212fb3a046f23c409d05829a867027453772af80d9186e2bd6299c67d1c84157b24805eeea1cbd077884a5e08c34a1a4490679af58fe9201b92665f45dd51ae09e11f4153f789c7730a33a0e35ae95c5a2aa9cb5a64229dfe39ae2e6d41cf2914bc506462f4620bc9b282c74ed8201331f5c2f65cc0dbf7398d81a9340a74b0d59c7172c3fdff898780fc6f604242870a687bbd8991d"], 0x14}}, 0x0) 05:58:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid'}}, {@noextend='noextend'}, {@access_client='access=client'}, {@cache_loose='cache=loose'}, {@uname={'uname', 0x3d, 'vboxn\x00t1(}%$'}}, {@version_u='version=9p2000.u'}, {@cache_mmap='cache=mmap'}]}}) 05:58:19 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket(0x10, 0x20000000000003, 0x0) write(r1, &(0x7f00000000c0)="220000005e000721004f10f7d0ebd900000000003c0253573d9a047c26485a3d5728", 0x22) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000040)={0x14, 0x22, 0x1, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) recvmsg$kcm(r1, &(0x7f0000000680)={&(0x7f00000001c0)=@ax25, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000000840)=""/198, 0xc6}, 0x0) [ 209.681787] binder: 15807:15813 unknown command 1074029333 [ 209.691924] attempt to access beyond end of device [ 209.696954] loop4: rw=12288, want=8200, limit=20 [ 209.714226] binder: 15807:15821 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 05:58:19 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000b31000)="f9", 0x1, 0x0, &(0x7f00009e1000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="8894331e14f533fa5965664c7f3e073e38890733f7e77528b4367c95561f80623346f25d7959a7e685881920c23d9d39ad36320b501c7af56072f67480710bc3ffb9e862d82e", 0x46, 0x800, &(0x7f0000000000)={0xa, 0x4e21, 0x860, @remote, 0x9}, 0x1c) listen(r0, 0x87) r1 = accept(r0, &(0x7f00005a4000)=@rc, &(0x7f0000000040)=0xd) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000001c0), 0x8) 05:58:19 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x1, 0x3, &(0x7f0000000480), &(0x7f0000000180)='GPL\x00', 0x67a, 0xfffffe43, &(0x7f0000000000)=""/121, 0x0, 0x4, [], 0x0, 0x2000000000000b}, 0x48) r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x61ff, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e22, 0x2, @remote, 0x1000}, {0xa, 0x4e20, 0x0, @loopback, 0x10001}, 0xf987, [0x5, 0x200, 0xf264, 0x9, 0x7, 0x3, 0x3, 0x28af]}, 0x5c) [ 209.731906] binder: 15807:15813 ioctl c0306201 20012000 returned -22 [ 209.738359] attempt to access beyond end of device [ 209.743428] loop4: rw=12288, want=12296, limit=20 [ 209.760347] attempt to access beyond end of device [ 209.765409] loop4: rw=12288, want=8200, limit=20 [ 209.778524] binder: 15807:15821 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 209.811086] attempt to access beyond end of device [ 209.816151] loop4: rw=12288, want=12296, limit=20 05:58:19 executing program 2: prctl$setmm(0x23, 0x1, &(0x7f0000ffa000/0x3000)=nil) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000140)={0x7ff}, 0x1) fcntl$setflags(r0, 0x2, 0x0) clone(0x0, &(0x7f0000000000), &(0x7f0000008000), &(0x7f0000000ffc), &(0x7f0000000000)) clone(0x0, &(0x7f0000000140), &(0x7f0000000080), &(0x7f0000000100), &(0x7f00000012c0)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)={@dev={0xac, 0x14, 0x14, 0x21}, @local, 0x0, 0x2, [@local, @remote]}, 0x18) clone(0x0, &(0x7f00000001c0), &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) munlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) socket$inet6(0xa, 0x0, 0x0) prctl$intptr(0x24, 0xf91) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x81}, 0x4) 05:58:19 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025c3f0a00145f8f764070") prctl$void(0x1b) 05:58:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid'}}, {@noextend='noextend'}, {@access_client='access=client'}, {@cache_loose='cache=loose'}, {@uname={'uname', 0x3d, 'vboxn\x00t1(}%$'}}, {@version_u='version=9p2000.u'}, {@cache_mmap='cache=mmap'}]}}) 05:58:19 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x1a74361b4ccce905, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4070aea0, &(0x7f0000000000)) [ 209.863622] attempt to access beyond end of device [ 209.868662] loop4: rw=12288, want=8200, limit=20 [ 209.902076] attempt to access beyond end of device [ 209.907116] loop4: rw=12288, want=12296, limit=20 05:58:19 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000040)='f2fsp', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)) 05:58:19 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x2000, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000000c0)={{0x3ff, 0xffffffffffffff63}, 'port1\x00', 0x42, 0x4, 0xa000000000000, 0x5, 0x6, 0x19, 0x9, 0x0, 0x1, 0x8}) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000006c0)=@broute={'broute\x00', 0x20, 0x3, 0x5f0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000040), &(0x7f0000000740)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000110000000000000000006e7230000000000000000000000000007465616d5f736c6176655f310000000076657468305f746f5f626f6e640000006272696467655f736c6176655f3100000180c2000000000000000000aaaaaaaaaabb0000000000000000000100003001000068010000737461746973746963000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000006e66616363740000000000000000000000000000000000000000000000000000280000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000004e4651554555450000000000000000000000000000000000000000000000000008000000000000000000000000000000646e61740000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000019000000000000000000677265746170300000000000000000007465716c30000000000000000000000076657468315f746f5f627269646765007465716c300000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000070000000f000000020010000434f4e4e5345434d41524b0000000000000000000000000000000000000000000800000000000000000000000000000049444c4554494d4552000000000000000000000000000000000000000000000028000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000004e465155455545000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff01000000030000000000000000006272696467655f736c6176655f30000076657468305f746f5f627269646765007663616e30000000000000000000000073797a5f74756e000000000000000000aaaaaaaaaabb0000000000000180c20000000000000000000000a8020000a8020000d802000062706600000000000000000000000000000000000000000000000000000000001002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f870000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000434f4e4e5345434d41524b00000000000000000000000000000000000000000008000000000000000000000000000000"]}, 0x66a) 05:58:19 executing program 6: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c833, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x4000, 0x0) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000040)=""/240) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000400), 0x4) 05:58:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid'}}, {@noextend='noextend'}, {@access_client='access=client'}, {@cache_loose='cache=loose'}, {@uname={'uname', 0x3d, 'vboxn\x00t1(}%$'}}, {@version_u='version=9p2000.u'}, {@cache_mmap='cache=mmap'}]}}) 05:58:19 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$RDS_GET_MR(r0, 0x114, 0x7, &(0x7f00000000c0)={{&(0x7f0000000000)=""/57, 0x39}, &(0x7f0000000080)}, 0x20) [ 210.110523] kernel msg: ebtables bug: please report to author: Wrong len argument [ 210.141570] kernel msg: ebtables bug: please report to author: Wrong len argument 05:58:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000f000000000350000000800000000da"], 0x14}}], 0x1, 0x0) r1 = socket$inet6(0xa, 0x40000000002, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x41cb00, 0x0) ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000200)=0xfffffffffffeffff) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r1, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f00000000c0)={0x1, 0x0, @pic={0x0, 0xc87, 0x80, 0x1a, 0x4ed, 0x10001, 0x8, 0x6, 0x2, 0xe6, 0x4, 0x5, 0x7b, 0x1e00, 0x8, 0x80}}) 05:58:20 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x1, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, &(0x7f0000000280)) socketpair$inet(0x2, 0x5, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000300)={'nat\x00', 0x0, 0x3, 0x9b, [], 0x9, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000180)=""/155}, &(0x7f0000000100)=0x78) poll(&(0x7f0000000180), 0x0, 0x487) timerfd_gettime(r1, &(0x7f0000000140)) 05:58:20 executing program 6: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b7020000ff000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7030000000200006a0a00fe000000008500000017000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0xe, 0xd7, &(0x7f0000000100)="3c2dbcd405e8e96a639a2fee86dd", &(0x7f0000000380)=""/215, 0x60}, 0x28) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)=0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x40) 05:58:20 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid'}}, {@noextend='noextend'}, {@access_client='access=client'}, {@cache_loose='cache=loose'}, {@uname={'uname', 0x3d, 'vboxn\x00t1(}%$'}}, {@version_u='version=9p2000.u'}, {@cache_mmap='cache=mmap'}]}}) 05:58:20 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)) [ 210.449093] binder: 15807:15821 unknown command 1074029333 [ 210.454970] binder: 15807:15830 unknown command 536907575 [ 210.460658] binder: 15807:15821 ioctl c0306201 20012000 returned -22 [ 210.466047] binder: 15807:15830 ioctl c0306201 20008fd0 returned -22 [ 210.467673] binder: 15807:15909 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 210.528012] attempt to access beyond end of device [ 210.533037] loop4: rw=12288, want=8200, limit=20 [ 210.550110] attempt to access beyond end of device [ 210.555139] loop4: rw=12288, want=12296, limit=20 [ 210.579946] attempt to access beyond end of device [ 210.584962] loop4: rw=12288, want=8200, limit=20 [ 210.589998] attempt to access beyond end of device [ 210.594991] loop4: rw=12288, want=12296, limit=20 [ 210.635261] attempt to access beyond end of device [ 210.640276] loop4: rw=12288, want=8200, limit=20 [ 210.654491] attempt to access beyond end of device [ 210.659593] loop4: rw=12288, want=12296, limit=20 [ 210.666175] attempt to access beyond end of device [ 210.671239] loop4: rw=12288, want=8200, limit=20 [ 210.676570] attempt to access beyond end of device 05:58:20 executing program 1: r0 = memfd_create(&(0x7f0000002901)='dev ', 0x0) write(r0, &(0x7f0000000240)="7b560afae7b9bb6c654f42cca68b0556a9aac4fb53615e9dd96cf2f1133a34915386c68a8800660630ee74e67ae55318ad8f8420ff3eeeb7b51366d019bc6ca71ff04072a759d8c0", 0x48) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r0, 0xc0385720, &(0x7f0000000080)={0x1, {0x77359400}, 0x400, 0xffffffffffffa205}) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000040), 0x8) 05:58:20 executing program 7: r0 = socket$unix(0x1, 0x8000000020000005, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(r1, 0x0) r2 = fcntl$getown(r0, 0x9) wait4(r2, &(0x7f0000000040), 0x20000000, &(0x7f0000000200)) connect$unix(r0, &(0x7f000066fff4)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)) connect$unix(r0, &(0x7f0000000080)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r1, 0x8) 05:58:20 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c) sendmsg$nl_crypto(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)=@del={0x110, 0x11, 0x410, 0x70bd28, 0x25dfdbff, {{'sha384\x00'}, [], [], 0x400, 0x400}, [{0x8, 0x1, 0x100000000}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x3f}, {0x8, 0x1, 0x68f}]}, 0x110}, 0x1, 0x0, 0x0, 0x14}, 0x15) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000000c0)={0x0, 0x36, "a5ffb5e5212c9ed598b0b55ed840f791c2bebcd43eeb0154be20a10be3d513db4996f291ddff196de9de7f51b086d28335956fc7a1f0"}, &(0x7f00000002c0)=0x3e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000006c0)={r3, 0x1000, "235480e484a743376a40912353519fe35b245e08d05a016282a875ae9686117ad5043450345d92dd1be0c1421e4e32035ae6e40f8f97562bd6f75ef38da3a62f70e33aec0404ff8685d4ba6edfc37b1776e80c8f1bbadb37f0edb662bb602dee62f6389b11676d240b99f68bb03f38ddd43230805023686e9e203a7b54d343e4a62edc733c4ea11003ce655dcecbd2f394cfb289d27e580275a864656a545ced1dc6d05f3c142bdb4b0fa7332e3118a7919d8badcb562d0b7abbfb121cf17657fd5109097b2e1603bb5c898e820fe9d610bef10ae07ef726ee3b2374ecb50abe8d6df60c1935e68285783d91ead7562cbd9cc417ca93c728550cb86da02691b2940b8ba394037e5a4fe92d70d0c66a8101c47dfd15d699bde87969af2b8aff1643c2b354dba2339647ab0324326657a5012907cb580d0caecb79d17340c0f98e9e239022131ef9150aa5e0ba130fe61c41035fea90f18aca3e44fecafad4a71628ece57107f0f0914b10cab4ad1a1c9d10cf75d3ef176768913cd971f8a279579f8ec3954fdbe6fcc6d12dd937431070d8c7b674b9c669c04c4de80e568fc9526d86e6b3f25ed730c3c6476b7a1592484673f6e9aa75d6c80427aafdd68fb51406d491586c2a8048daa5950ef2fd36fe5617fd628028ca21ec95991d24d55ac640e757a706a2ba7322f06c67a3dc92b5b06c8b71e87cee59df52edc7700ec24c9f802973171f19e7e20b6414daee9d86edcca78d7c19eb06e278d056814314aefc360a2ea74b7c9873ce9a954d0022afcba29bf34b6c64f1521ce9ef25872577470d0cdcdf3356a3a05c56d18dada9d70eefd417f496538f85d246d0025f9f0971c2e7e391d428f50bcf67511b9ab7023a87f4b5cb0853723ac1bf603abf95f2a2451faa3181f58248527ef7c02aa6d43d849d522ca607bdf425c4ba7dde73805312b3bb79b84dee9506bcc7d1d2a73f3a7915016ece96c71e7a2902cba803f53e7f0f07511799e162fbb35b3c0e6c89473754e27bd5991f681520eae135e1dd2d338b3ab02238cdf051f368e9f7c9ee95f3712a255fa4301b8755d7bc00c9b07c80cbc78613583a6886851bf889b554ea2b2ef5c9452a93a3de1d810651459bd7f7d523bc931da7636b0652666a1a256dee41ebad9e726ad49743864a57bfaf1dc2afb42932eeea6a90aed3c67bb3e3140c25d770a65cabaf59caf7f71f5f3ee39a92691b73f0a378b24317966de0a1ceefbffdb92a92116f747f92db1bb0fac5eddbcf57fe9f9b1e3ee5f2c79265961ba91078b73e30c0fb1ac6bfb8b9b844f7cea7b07125bb1262d5dfd8c963fab484b2fc44ac04838b3294d0b69b79e8d02b1feb1df25e5fe1d8e82ed71de84614c4b452fe1fb87f2a1e3c6dabfeb6650c180acca4bd62d25ff095ef582ef2a5baa4e3a7440119e3851bd8604af7b24936747ca76488fc9068f662f2d0ec4e481024726a763c5cdc5d6112835cabae9dbc297c839b1f4a8d053938ec0f7e3d4f9cb2d559564b86b4093cfc882b28c0315a0dc495488d6811945b40fee662dd0d701ba8349831178bcd3c58571fe289c853643e7f3df6898e3eb7146ea4e694a54d0b8b280f820679d21b4809c55bab1bdcd7d81e664936c305e00909cc93fecb7c9d60e1273bbcf0f2b7072d0a79ed0aaca42886f0ab0ee1d11d52eb546c6291c734cce59c47c4b441e5a9a5e237696d6c766b958d18d5fa8e5b9ae5ec51537b235720d5b62545d199a398496996b2dae859e45e8480143bc87d9d342dd6a48aa391b55df84ac520c784b5506d36a173f9cc589e21fc4e08788cd7a0321c9ff183b08a7d15321ec4afe32065be79ef44878f3379bb8dd63e3f59156ec06a1838e4f37d5efe70b969f61b5a22ce45601a7dcf3d0f0a788453a45b30647222f1afc64e7fefbaa832992d1bb117bae72c8d89f0e770baab8a51f454c27350a897deb37e92334982211d311dd49575f52c307d44e0aee4a29faddc3e219b6f3075d189ca19c4cc05bba0979c2390542453ade93f4d150a592aa75b8266dbf4862dd11eb8cafff69608b9912ae84ae374cca17461c735000f37682df328c03b4f180a3b5b36694fb8aae76902da2dc108014e411033ef2cb5c5e0efd8888a11fbfb49f6926a5c16c2b0d537e2445cece78ee981713865ce1e06d7829c648d19d03156f7abc99c4b257fd93b0d5d8e3cab05701da39ba7707391009d9711f782a6bf04083be23299740d015d7cc6c16c76d02450efbf221c6142185a8c0ab250c1ea1abe60778110235b096f7dbb7a5c246b282342f5e377b7389b8f8f0e8203092f3db1fb5a5dad1688e8b306d71e1fff4553072f022e53931027566a09e414b245c8e2539d37fa6b57a9ead9c74cc33061d0de4e60615234174ffbd89b0af33131c3c99173e54622e5f8e3b3da85bd7e4e81355d3807f67f254771a6998c30781a19ac008ad6b706880a8476fdee1ce76bf5e214799db2867cb0c7720ca7c1c0d37eeba2f25a2be9a6b798f7069304ff05a8ee1e185a0824a482f389ce98c94f78561d4e56d4ad93d348bd2c4147c5833e9dcc634157b4211f0d34d5f349df8f2728c83d7852ccb5452ba335e17b8d3581a85ded9a67b2adafd57ffab0f497100074b5064db86de181099d0fdc77e9f234e4e716fe987e5e2bd495471ded96fc16efd8adc00a15967ce77eaff4ccfbf34eb6cde57516eb8455c841c975988937372a47858d009e0cfc0742b18dd82975ccc2972063a7b07ebefc041a3e396eb5df281e5e3d1a0984cd446badef56f120bfbab4b1022d91d174d94ca6272a2d555c0100c8908189179d5664453c0e825da8985e8dae6e7957b46549a5116c1e91b8f5c0fbd945a26d26144deb0260cb156dbcbd38b7fdb356900139fed2fa1931d02361b81d0ef110de36acdbd4b10d95f0edb8e58357e3e4fc003ce5ed7d97de8d79f903cc910f5f0989100f03b451e1dd6839fb2da507919634032cc0f276887f773ac849b0296382e6b8c3579ddc25fa82e6ee6c1bd674b904a6029df6481b482c90b0b24abefe3867e1f2d659989c6c33937354307ea797197f90a77772bbf756f2b0170e8af886b344088ae10e5a5b881a07a8aa61e12557934c64dd9914908a220fa273cb0c872e79bf959a5ddadd026a1341b5d2421f5dd3792ff360205d71b60f0eb04419b928e024c5462973a9633102f6e4159a3ef3c16d2a51c0c7258bebfcc4a8d9d0009f3e10f2d59c7f629743205d2b7ababc22ece9f5f691fdd9374e311efe1f994e74b41384907968b3068199bf138e16574fdc4668052a27af9cee42bc3b5d6cef807739d4096403d36f8e72a07e178c10d1fb1cb6c5742560c90a2c55598ead492f2b09bfc4f27b306e95522251d4cee57670865c21ec557c18d03cc219afaabc7630e849627986b9158fd107676bde0b6d3dd53cb6e8bfc535710bc521e6c3d23b4f610b34adf46355438d17c9bb39ce05adf4fd21f20ece118f67c0158be2ebc26670c44dd0cef877a121a820d2f7e11d7596ad2b9774c9b5b02b1e574b4e2a9e0dc7452ae7aed72b562b26fa349ae2fbf155bc4f7d619df0e9bf0395f112a181a44e4654c68c8abdab4ea3742698cc05b97d49618a7ba780f5803b67af48fe27cfdb3fe61650b88de8515eafcf94729b1adc3eb1e5d56ab3cf111b492b2b6dbb951954ea62d2bf0d299cb1359212d1392688a6f29a1df8946b67b843ec3ea05ebcfe7c82dae2e11e02c12909af1fae822efd04d9f6c29f9226b3611461b3059251443869b6dc4234fd5494a5feababf85c1d65e1410700b2185b6317c774671c7c408a8e97c628ff309eb1cdb37cf8d6670f5381bd2c6b9e1d8d3e412d3e2086c80591d947ec91b5fffb82978945e691c503670d6918fa8927546c671e0b5ec2104bf045c804a75c29055b9dfee268a92eb43fb8e6de05cadb6d39b0f3ba4d26047b37caa9d9eab7f891696476166935ce092cdf695717adcd4ec26f81aec746c44f18a73b677e129437350da9cfa5d2a1fecfa00774c26e9df701a3c988bc53bfe02268248e399bb6c6f630e36a1f2e29bf6a14b2885daa09ee458a0693b11049185d4272fdb43cb4c89232fda8608c47b1f40e7fb41a304f20bf49a3fd936396b28e7d42a9c9202be5c7f02bb802e2d8b94a629066793176b98ff111ee2b22313026cae414768e25b8da7ba3d74563383306feb3f88f332b86f8407afcab23e027d446fdee9a00f140de131012b5900d25267e2ec30562f2c115324146bc17790f66e193222d895a2fbcd8452a799b984d01d9058d391968ee274161d11db70a39e8ecac4a344958f237f5eac1c0fb1b019c29d978eb7a1eb8a6f54761d9cfa59256fcad62ceb9cf756f956762cc3cdc727aaf1b051c2e3db38e815cd46eb39ae629b64ede9f1899c3f1363dab84ada87c2fa0cac27f225ab95be74284ebc47c6f1431a13d4509f9ad636c23d3996b8d937ae8be197da9bcf02f427afcd0306887970a5f37410281aecf8fdd1698ad3fd4637353ac5c9832472ff21c987497fb2ca4ac345074a3cd27ef2204e32751abd723c1e8dda9e1f6ddfcc6b944360261b4b5e1e1951691f45590a75f297fd921e401ca099c80c1b4535440c615a506d5458edd5b71f702b6866713ddec3e1834dff0a7e894d445e5be46834dad46f6dc22db999f2e8c6ab819bbdabe59a885c75ebba61917e851d6963464340a488900addbe4166b2deb76a14f303a2ef39ed30d9fc014a7ebf60d3bdc8da0c525dd88cdb843b4c361463499518d64c47e9c67d99e109454a97a86d374e4f18ad28829df47d97ab57a77b4c41ed1fdabbab9cda94e7d88b9ea1257bb1de41bea195dbaa53bb54f3d2c12e0f2fed91220ce712f37279e7e21a5dffa835198189969588e623c88028c48135e2877125c3bc79d576641573492fa7e9113b2f5b6b6f4716a081a95be9c195eaa8810f96f1ad17db356c33495fbc566b1b49e33a4f28d158caf624373d2bcaba77b437ff9c8f77dc01fa81f44d4a26ebc45777902090e70495baad5bc5e22fafec039ea5b92107f29e3218e922e61b8f1b05a36d7697c88ac9ba4b894b418d992b5a94477e99b56ae272b0aa71bcd1fad8bd49077f6456dae3aee33e242314625ca1322b81a61bd2a8aa6bed0eddcca345bdab25f827b88d650c54a5ac99d016dbdc95ea6b185ed8ac5092152652f99305ab96633d77b604c24a5fce05772b988c6518446e727f5d0355557bb6c6c69c66f745aad80d3685859ed767d1e393fa3ebb98e439c4711d5be02064b82afa3ccba0fba9748ff440c6b97e3947a9cf42bf57fd6c84f218104e4f1d9af3c46d64edacb8bf6404b39044b61226cd7fe471480447b493da0cde9ef23b5efd06beff3d66d5f186d5ff3aa65ccdd6fb8777096ab687c5d295bb9486c1d92b2664018d8fb86f22e92957234dfc40224a8bf560d8157ba6057439e6dae65ad541475cc2de7f570591cf0709c3c04867b9f1e83a5149fb27db50f7a4c9ee2d6c7b78816046c4e60cfff103edf062345ec5d5894e4f036990c070742e791f6df62421a7397a222fd69ee3a869a65a91f8c8050a53b7f8bf39427764f6dece4baa4cb4d80f56454f14a6bc5afc38878091a1db2a00217fcd81e2b1d3b41f66982ca2699bf1317d0ab19162470f11c977dbbc6fa6367ea8c0d665201cded5be91f9c7e8df4af49d99ac0e1addc27409a4016db4f27c94cb3ddacc4b27a712beae04311b6f8ca65195c15b3962f2f2678254138e3ca17"}, &(0x7f0000000300)=0x1008) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x10) fchdir(r0) sendto$inet(r2, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000680), 0x4) fsync(r1) 05:58:20 executing program 5: poll(&(0x7f0000000040), 0x2000000000000009, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x4000, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)=0x40000000000982e) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=0x0, &(0x7f0000000080)=0x4) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000000140)={@mcast1}, &(0x7f0000000180)=0x14) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={r1, 0xffff, 0x1000}, &(0x7f0000000100)=0x8) 05:58:20 executing program 6: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0xa29e0dcdcdf67d6b, &(0x7f0000000300), &(0x7f0000000040), &(0x7f0000000280), &(0x7f0000000180)) sysfs$1(0x1, &(0x7f0000000080)='\x00') 05:58:20 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid'}}, {@noextend='noextend'}, {@access_client='access=client'}, {@cache_loose='cache=loose'}, {@uname={'uname', 0x3d, 'vboxn\x00t1(}%$'}}, {@version_u='version=9p2000.u'}, {@cache_mmap='cache=mmap'}]}}) 05:58:20 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)) [ 210.681749] loop4: rw=12288, want=12296, limit=20 05:58:20 executing program 5: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000d81ff8)=0x101) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000400)={0xbf}) r2 = accept4$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2711, @host}, 0x10, 0x80800) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f00000000c0)=0x2, 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0x80045300, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc0105303, &(0x7f00000002c0)) r3 = gettid() sync() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 05:58:20 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid'}}, {@noextend='noextend'}, {@access_client='access=client'}, {@cache_loose='cache=loose'}, {@uname={'uname', 0x3d, 'vboxn\x00t1(}%$'}}, {@version_u='version=9p2000.u'}, {@cache_mmap='cache=mmap'}]}}) 05:58:20 executing program 2: exit(0x0) r0 = eventfd(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000000, 0xc010, r0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x80000000002, 0x3) mincore(&(0x7f0000a13000/0x4000)=nil, 0x4000, &(0x7f0000000140)=""/26) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)) 05:58:20 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'sit0\x00', {0x2, 0x4e20, @local}}) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = fcntl$dupfd(r0, 0x200000000000000, r1) fadvise64(r2, 0x0, 0x7f, 0x5) 05:58:20 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mount$9p_xen(&(0x7f0000000040)='/\x00', &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='9p\x00', 0x7048, &(0x7f0000000540)=ANY=[]) r0 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x8, 0x0) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f0000000480)={"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"}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x10000, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f00000001c0)) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000340)) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x0, 0x0, &(0x7f00000005c0), 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="35cd1d23c805151f3fd13fb6f43b0cd789cb3d9076c1dc"]) [ 210.814515] attempt to access beyond end of device [ 210.819686] loop4: rw=12288, want=8200, limit=20 [ 210.845795] attempt to access beyond end of device [ 210.850907] loop4: rw=12288, want=12296, limit=20 [ 210.882629] attempt to access beyond end of device [ 210.887650] loop4: rw=12288, want=8200, limit=20 [ 210.907022] attempt to access beyond end of device [ 210.913083] loop4: rw=12288, want=12296, limit=20 [ 210.934958] EXT4-fs (sda1): Unrecognized mount option "5Í#È?Ñ?¶ô; ׉Ë=vÁÜ" or missing value [ 210.966923] attempt to access beyond end of device [ 210.971964] loop4: rw=12288, want=8200, limit=20 [ 210.980946] EXT4-fs (sda1): Unrecognized mount option "5Í#È?Ñ?¶ô; ׉Ë=vÁÜ" or missing value [ 210.994211] attempt to access beyond end of device [ 210.999355] loop4: rw=12288, want=12296, limit=20 [ 211.009776] attempt to access beyond end of device [ 211.014911] loop4: rw=12288, want=8200, limit=20 [ 211.019955] attempt to access beyond end of device [ 211.024963] loop4: rw=12288, want=12296, limit=20 05:58:20 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid'}}, {@noextend='noextend'}, {@access_client='access=client'}, {@cache_loose='cache=loose'}, {@uname={'uname', 0x3d, 'vboxn\x00t1(}%$'}}, {@version_u='version=9p2000.u'}, {@cache_mmap='cache=mmap'}]}}) 05:58:20 executing program 3: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000d81ff8)=0x101) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0x408c5333, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc0105303, &(0x7f00000002c0)) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x12000) ioctl$TIOCEXCL(r2, 0x540c) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 05:58:20 executing program 1: r0 = socket(0x15, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000400)) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000140)={'team_slave_1\x00', 0x5}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={r2, 0x1, 0x6, @remote}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000200)={0x0, 0x2}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000002c0)={r3, 0x1d, "867e2df5d107f13e57aa1be6a7af70be87312df8f4c5ae72af781ec60b"}, &(0x7f0000000300)=0x25) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r4, 0xc008551b, &(0x7f0000000180)=ANY=[@ANYBLOB="677b00000c8f7d4f000000030000bd5597a11c522318dfa11bcaf7a920f7b95cbe6af02e418bcbefcd886c9413700b43290c03f837e609ee"]) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[0xfec0], [], @broadcast}}, 0x1c) 05:58:20 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='map_files\x00') setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000)=0x20, 0x4) fchdir(r0) quotactl(0x2080000201, &(0x7f0000000340)='./file1\x00', 0x0, &(0x7f0000000200)="2db5") 05:58:20 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mount$9p_xen(&(0x7f0000000040)='/\x00', &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='9p\x00', 0x7048, &(0x7f0000000540)=ANY=[]) r0 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x8, 0x0) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f0000000480)={"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"}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x10000, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f00000001c0)) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000340)) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x0, 0x0, &(0x7f00000005c0), 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="35cd1d23c805151f3fd13fb6f43b0cd789cb3d9076c1dc"]) 05:58:20 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000040)="6632667314", &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)) 05:58:20 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid'}}, {@noextend='noextend'}, {@access_client='access=client'}, {@cache_loose='cache=loose'}, {@uname={'uname', 0x3d, 'vboxn\x00t1(}%$'}}, {@version_u='version=9p2000.u'}, {@cache_mmap='cache=mmap'}]}}) 05:58:20 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000340)="392032fe2aeb9efc5e25ffe3487f9adf3743b1624e3eecc318ee0048ee8c778584cd8a0732228eaf4a361334f743acdaac4f0e8e66b20e0036aae0dbdb52054b211eef7f1e492452ffd4dc96edecd82f1b5f265daead59eb5aec620405528bc31466e30138c385e1b1fcd5da00dbed8b7ce239339f0f801bb9a5add0c20560c046fa729010470ef57cdcbe4042801262039a9b2c71405b3fa639441c210025a189fbcd7bde4e421799515b214c0eca355d01b53e4fdda4fab2ff4b210f69e401eaaf3502d68d19fc33c6ccea9c6b5c7403752c408e6ae0b1b237ad4bb9a8921ecc279826f07b4bf54b44695d3e9ee93181552ed1980eb07c3ccb93c30a71b03c644060e75fc6c6345baaf602e2135fb3f2ff26792d700c5a97865273d1ca80cdfe9472162e5bfd5f5bf008948895d785de4be4b646121a26285afc09391b6c1d80330ae62783cf99763464d9f38623e2b906695b8cc834bf33e7907501812bab96227db2b9074e5eec664dee95d27ec699fafd1c09187ea51bccf32b651b79ecfcdbed240489ffdebb19253e35ce4f5fae9deac08b3d884b4651614e110c563731c0cf0d6e9795694583f966ff19430f779205942fdc7b07232d90760706177bd6e74a0bb574d63c44362ac37925f95d61e78da848100377bc87134972fb5e15ae1563c8adb2a9e1ce1e39036362e416b21ce49d99c18ce175f51accdd2bd9ba331e5d19395223aa45c4538c80c624edc2e63dd5932f236463de75991cff638bda43a3749bd7aabf6303b4c6644a4da2ec762ceecf22ed1b64c4d0d162d9781bbf9ba47aca4b1e427fdd2fbf24afde02e1b2ec8f837cfbe0ad91425b45152c5c02ec0493472ac592e533cad8f59c6063ee4784cbf0a5ca664cecaf3c7a0d5802942402303f98c7c9db2e00eb6e12f6253b0a6953d6128936889bf501903a19717d9e1d090ab090872023e84f3be93b7296571e7dbac783f055a787feb88adc57755b933d57b4bd2d03f8089052f591935d101be91b368f8fe2f107ecc8d9e64057d4789df056057f537ac855ca855e62b04a41d40908f1501a133a5a0388036d128098c2ebdbd82633d01667daa76037bbe85cacf6dd4dd5a990e662f664c80e9df7e81363ac2c562a30c9120578746601068331de7b885df6104e6d6ef66919c9859c1c691b183960ce210f6f4b0afa71ee6d3d887bc75b0d12a03930d5eb4243419a4b554ab0568aa394246fa4c91e5b2865310353845d1837a79ba375695ff7615db327ee052657548038d15292374e78db494259bfef23d8383907da2f775946f190d7a6ab006aed74e987b41dd377e6f9a9d13f6fc46fb098ead06794d194130ad78508267057a3951cd13651765273789d56d55ad9f9f7236eaccbe18e6f4b351f721b144ba9072f3cbb173895dd429503db78a24cd1b4c9d96121bd90227f57b06c9e7136d3137a3a7447977b001714c79f67e2fb54c3471e6df123371e05f41221cd1a910bd3535f88f0c129f62aa031236624e8de3d7a3c0e648e227b64cf30e4885c577b3014b1d0530d1b36ae2236ddf6fc8d2e7a9afe3a49063d19cf07a68fab250c20619e200054c2ad2880172e7b79ae1434003cb023d230a362ff9c0008ad12e760cdfe0be6f01755d5244f2dd5150a69eb2826e3114a6e52d3f3f3a594619c3ecc53975de9e5dd102945d5740dd2865892ad49baffb4101fbf7b7940d497d154f73a888d8631ca831818dffb7c506f725d06df102a2a39e59b55a3b7351d9e3608fae29280a2f11d99d89f0c31fc519de79e09c077d588b633fa4b9fb36b00c26fb90404c39c9353e841fc1278ef8ec7de5a1232c5509f0dd694556c7c5d94e6f45c549914ff85814739ef0f49b15cfc8212c01c386e3019fe6ec8908829e67762a79344c26dc63e6dbd39d839d5d8776ab68a183ad4c1209cce710e11b61c2f5e45e274a69b80c126767cfe83dd80cf9d06c49585c86260a511937adba7cfd845fe134228973932aae5317a7b910b09f8ae3b6d024f0ae1db7240b948ee4e6a370c37962f1c44df4040307b205cbdaa506c8dc832d4272052c4902bbebd2811fc26d1b85fc8d26c4824ac7d9458f4ea8c9ed62c03ef90c2e476cb07e98276c7c7de3fb162bc62885e769ee611f50cc20e4034e96db0194a648a6976b2ddfcbc8b5b87907494a8009c2ca41ddf23306f7308a3d46b576e2767f218821a9e60e66b7476e46917c7f1814e31ab41d6368edd18cb0065f68ef4cc7c58612a5efc0504b24f7b3371030d5b9371a3092a76b72c2c80f4657ffde9bdc56da576ab0cab8be4f1fe5fd24fc237b0951075f4b170f3a6645066cad39ec71a889dcb9e6e8ca3f1664c8547f2588b4542b7e1ff8fae16bf3a21a6b6bab59779161503d8e886390d600bc0106b418ffda81eb0457c7de5d10b72df35595daf48e6c0264669dd0cef8d8d1cf58250a169f20ca46dd25d1238d6f58b906c346be424b52aa64054b78aaabc1c1a4565e634a3a11cf4eb62efeec151fbd00f357c511b3347ad33d916a69d1dce4ac1439039ff764839368e69d416864485b4687b166d78b4b07827a9fb95290536db873f47ed95d28a11bded4b84a10ea3fd6346240567c9e00c3e88c0aa4ca3571327cd6b888a5d7cfbe3a40d73c651bc283708a633250f09ede57130304391f9d3e62abad7e5950572ea059e17b74ffedf26568d1c116d0adaa6cd4740794feb4b1ad7b62ad14e289bf19e630d9fbbb560f0c653d5cae1c777f255a904fc8f6cf52872d0514febdb50523dc3259ae08230070f010cb9d4cd74dbc3c746b20e5ff77fd32c476a9da71607e4d08412567f55276134e4cdb37445175b257aff8dc5c2171a9d5fa04635af3903f2f8ac0c27fc21d727eeec906a5e226e2684f16d40b05076adcd3c8f04578446a36fcff2f66a13082165be34714b32b43a8d764f17f1fc8d289301d1a89b05c67f27991995f9bffd0b4ed7174951d89b2cfce65d702c5bd9e50b175cd6a21b7ebca917fcbda277b136e23b685a38873f2b9ee75bf9bcc564adc412483f7860ed14059c9bff203ad9423cf284f5ebde5e7c8280ce17f0617488395ee8a498b8be9948a56fdee01797301854304b2d9fa4eedf4111bfc3bc8438f6def5577fa31ed69e6a7b8d56b3ede076c8faf786dc372ec2846c2f4468b8a51182ae863e68822717ac7ce1febe9a5cc912080c33b9f84a1d0a5a48d8e06ca4ecc5cd43225cd6964721b5487a599131b262792ebce94663feb8bc77688c1f7f469e310ce844f47a986326c79e5f985c6ef483f9e26473d3318bc474460b7dfa2d0a2b06ce5d6b8b301906bb4c5de0b2ddbea811fc5290703c44b45ffbdff3a1ad6acb03ab40c65d7df8b66da6a8adf51852c490afb9c11cd97861bd0132b1b1ad2b749ee8a15c55b2e36c0f6238dbd12578c3c167225c833e0bd276876082c7d80f7d95b3d929e31d9024cb7a37867aef023ef4e2217869e5ebfc8205ae8320ba75d02b2ed2ad17b430fe39f6cb62b75d06e7e23df0d44f1a2f634e73806ec5c60cce6de28b7a4ee512834c559af5d5b77f8c892d0bafc2a06798c7fcd674c42e183aa3fdd21d06ead8bfba399f33426ece8d44367805da92d78dab70ed2ae3809d3eca81f9ad6bfede3bec7f788d2b391b6ba6e8ab0c3b2da7c31e47728bdfc70c9b9900c734f8e6870b1a9ca84061c8e17e711e2a83e68abddec8d366fa405324f4584bff45881d486bb080d207e18d3dd52a261a674b4eeb3866bd1c567b32a8571c15f55c30eccc6eccd00953166fe29cc0d19ddce9cb01fa5e0bef606fd3f6205ec62da1841c57a1cb36846cd09eef58cf6e4f0526c97b015027531d91914cd8e11061dd2280e1a99efab7e5665b22d009b36efd4cfe102abafe5a7826c9a64560432b05daebb52f84894dc3abb74a02ba4c4108fccfb42974adca232f339f232541eba5f767104679df93068c195e646843a1c0fc48fb978276bdd72a2163250ce8554ea3440e64e35e5ecda1ab7b95c4a6b8286ff06b0e7f54371d9eade8a1a90e6ad323e7a988c1dce1ce55f2d018cf53f911510240d0e4fa094c2d269524a1cdf5c0cb07400658226497ada3cc52b14191634441d9c0d43c9f524d80be4abd6e1a9400ae75b2d6c65679c46fb5a1398088c98dbcb140b5d84e0481219ae96b1e3c280c02d2bd46bceca13d2e7c081db0569ddec9d1b69cab2925193a6af3030f35ac831e80e8a8f9d54935e356dd889ad27eb79ae29faad1ac689291d0c1b8aa0fc3b02f6b1f8df2da2b9e9f8c67ac829faf43e5be2cb6e50b149bba34e0b5937524258df380a3ac3345123272940546b9548ae364924c2763b3c102ea8a923af1b8752d46348d4ed9753530094663fdbca468d3a85dd864cc2394ad7ae9775020070e8174b8631a4a0cd51d3971ceb5bd2c738b8071859751a5fd6e2c7416a170fffb2ac2fa0a832e4bbafbb3d95b19d2d052a295eb76464d47184be296d3abeffc62227cc6404ccaca8c69ec6432687a55c1a77293f948523641d00b4fa100b581af15c8cbdd5d19afcd629f0b0795a223b2cae09b90adb72df46122d4531df6deba273581366fb30bb3561095191d7780fb6e56e7a6c54f507bdd3a73f27ef7026a8309af70b425c2d8752e90925686f88fb12aca2b7c534aff95bfeb2ed92424cb9a8789623b51dcb38b12034e04999beda08e44a8f7c9c4d65f0b54a46724dbd56c8d038d030cca0fe4d2f33d00383db785570132e7c7003fdc7669898e0297901e032ce7252878dadfaf3535b8591cd7c2abe8662e3d7a4074415eb2ba5ab59483d1f951189edebe5cd295b7b7626c47f7c14571c75b586c1e21c0c1b06876146106794ad514eef394e0a73c8cd35fedce31fc1b786a6977740a96739d3b9e3d6b303470db17a72811e8daa29a120684f0e5acc6e6aa46d6628740d8fd556d2bf3d039bdf44564d1c1b4d416e5813a1f94e709bed5c2018b72a0cd0433b2772f71212dadfc3e14c0307e74f37b4785bf1cc4be87beb9a6e4725e99afcf7f93fb626f7186181e90787b9edd9c847703ed9d5123358c616b161d7e161383b11cb96e88373d7d40fea82d3c93ef76e5db76b80c38d4396c9f5bdfa58b9d4dc4e86c22a5e4f40d13669fcb4422ec293d457d4e4ab911f339c4320fbf65c8abdc7ea9cb434f94997350acb20946a56c0fe599f9161d21b5cc60e1a9e765cfa870d79a8e2b4f934b3d9189756484bd7e54d049bdbedede17f8a89c6d7d57f85d94e2e16186951666843f86b1e5d94b31caaf2abeddb5ccc28014165585fe7c129a0e3046ebef2ff5316542893ce25aabcda810c0de47800b3b5db0b358887f05e2e45d9c5a275688a04e6a78d6d3367f89741fa1051b75ff3380e4cb802075a8fcf79a88e8a11ca16d8609837e662e51f3315edcfdff1e3e4513f29b4ff2fa9262322a221e8793e89714c127b398348b04ad8b10552efc8dcebbdce3a02e11e6794f5f7f677cecf9fc4414897038e22445549a97ecd061475713fb5fb772fc104e09e004d8acf563cfec5045130e6a6146ca1f380feb465d5e4aafb706aeadc947e45226fca4212d7fdb44b49c256508e6275df28f5e365b4b7c6dffdfee13c016e5ee4ce9a604068fd3884ca2b310517a6ba58c4aedc354e0c5b4c7109893a6e65e33fcb72ece6aa03f71e8eb3db6de7fe205f28b5cb78b4e9e83644afe93c222e209173a291d94f92ef2905a95145364cfb28f98769fc1f117c3750e4a70721ec7e04fd575f68ca7", 0x1000, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r1, 0x1ff) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xcf, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x20) 05:58:21 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = socket(0x15, 0x80005, 0x0) modify_ldt$write(0x1, &(0x7f0000000080)={0x3c7, 0xffffffffffffffff, 0x0, 0x2, 0x2, 0x311, 0x0, 0x49, 0x7, 0x1409}, 0x10) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)}, &(0x7f0000000240)) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000400)='team\x00') accept4$packet(0xffffffffffffffff, &(0x7f0000001900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001940)=0x14, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008ec0)=[{{&(0x7f0000007280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000007480)=[{&(0x7f0000007300)=""/244, 0xf4}, {&(0x7f0000007400)=""/116, 0x74}], 0x2, &(0x7f00000074c0)=""/54, 0x36, 0xffffffff80000000}}], 0x1, 0x0, &(0x7f0000009100)={0x0, 0x989680}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400400, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000009240)={{{@in=@broadcast, @in=@remote}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000009340)=0xe8) clock_gettime(0x0, &(0x7f000000ac80)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e1e, 0x0, @loopback={0xc0fe}}, 0xfffffffffffffe2d) [ 211.425128] EXT4-fs (sda1): Unrecognized mount option "5Í#È?Ñ?¶ô; ׉Ë=vÁÜ" or missing value 05:58:21 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)) 05:58:21 executing program 1: r0 = memfd_create(&(0x7f0000049000)='\x00', 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) getpriority(0x1, r1) r2 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r3 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0x8) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f000004d000)={0x80, 0x1, "636c69656e743100fffc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008", 0xffffffff80000004, "7fd82d5e02ca3901", "88e7ed00007fff051eaa961ef6c6992b6900000000f9ffff7711be18a3d918e0"}) write$sndseq(r0, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0xffffffbd) [ 211.577164] attempt to access beyond end of device [ 211.582237] loop4: rw=12288, want=8200, limit=20 [ 211.596353] attempt to access beyond end of device [ 211.601454] loop4: rw=12288, want=12296, limit=20 05:58:21 executing program 5: r0 = socket$inet6(0xa, 0x21000000000002, 0x0) ioctl(r0, 0x9, &(0x7f0000000280)="025cc80700145f8f764070") r1 = memfd_create(&(0x7f00000002c0)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r1, &(0x7f0000000040)='/&', 0x2, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000080)={{0x3b, @dev={0xac, 0x14, 0x14, 0x13}, 0x4e23, 0x0, 'wlc\x00', 0x2, 0x10001, 0x23}, {@rand_addr=0x984, 0x4e23, 0x7, 0x8, 0x5, 0x6}}, 0x44) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) symlink(&(0x7f0000001000)='.\x00', &(0x7f0000000440)='./file0\x00') r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000000)={0x1ff, 0xc2f}) 05:58:21 executing program 7: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000012000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @ext={0x0, &(0x7f0000000340)}}], 0x30) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file1\x00') mq_notify(r2, &(0x7f0000000380)={0x0, 0x2d, 0x5, @thr={&(0x7f0000000280)="804568e29c90a81df4b689fafb775f8ac4e877b61a92d455fc71bcedb4109856bc1174fbece6344a6bcc259371b77f2260faa6d7a7f714af0b8264cc2324e6db227d4b227b8cef1af002a795307f545d71cf14", &(0x7f0000000300)="00b0660403921001e402046be1276ad76d9b05468c353ea12c08c2fd63e026a22f8bc47c4bb70a28f28d3d1c0c5c69c77d18b2b9be78202426f86fcfa019273a3b7ab3ec9035179eec44a96b3b9c59a34c057e"}}) lstat(&(0x7f0000003180)='./file1\x00', &(0x7f00000031c0)) write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file0/file0', [{0x20, 'lovmnet1'}, {0x20, 'vfat\x00'}, {0x20, "6d696d655f7479706573797374656d73656c663a6d696d655f7479706570707030706f7369785f61636c5f6163636573736c6f6c6f706f7369785f61636c5f61636365737373797374656d282c25fe70707030"}, {0x20, 'vfat\x00'}, {}, {0x20, '-wlan1%\'nodevvmnet0GPL:'}, {0x20, '[md5sumselinuxGPL+(GPL'}, {}], 0xa, "32250eb061b842dd63344d0ac8af22b5a68d268ee353b8228cee6aec5b7298d9e11a4952cbb65d57c3724e7715f56f8a85f2596de7"}, 0xe0) dup2(r1, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000004c0)=0xf3) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000500)={r4, 0x6}, &(0x7f0000000540)=0x8) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0x80045700, &(0x7f0000000080)) [ 211.628117] attempt to access beyond end of device [ 211.633226] loop4: rw=12288, want=8200, limit=20 [ 211.650285] attempt to access beyond end of device [ 211.655420] loop4: rw=12288, want=12296, limit=20 05:58:21 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid'}}, {@noextend='noextend'}, {@access_client='access=client'}, {@cache_loose='cache=loose'}, {@uname={'uname', 0x3d, 'vboxn\x00t1(}%$'}}, {@version_u='version=9p2000.u'}, {@cache_mmap='cache=mmap'}]}}) 05:58:21 executing program 6: r0 = getpgrp(0xffffffffffffffff) waitid(0x2, r0, &(0x7f0000000080), 0x21000009, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f0000003ffc), &(0x7f0000002000)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000200)={0x0, 0x7fffffff, 0x28, 'queue1\x00', 0x1f}) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) waitid(0x0, 0x0, &(0x7f0000002ff9), 0xc1000006, 0x0) 05:58:21 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000ae0ff8)=@abs={0x1}, 0x8) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000040)=@abs={0x1}, 0x8) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) 05:58:21 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid'}}, {@noextend='noextend'}, {@access_client='access=client'}, {@cache_loose='cache=loose'}, {@uname={'uname', 0x3d, 'vboxn\x00t1(}%$'}}, {@version_u='version=9p2000.u'}, {@cache_mmap='cache=mmap'}]}}) 05:58:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f00000000c0)=0x11c) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) r5 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r5, 0x0, 0x0, 0x73e0) ioctl$KDENABIO(r2, 0x4b36) sendfile(r4, r5, &(0x7f00007ed000)=0x3f00, 0x1000) 05:58:21 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)) 05:58:21 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000100)={0x80, 0xab, 0x4, 0x7, 0x6, 0x0, 0x9, 0x4, 0x0}, &(0x7f0000000140)=0x20) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0x4, 0x4, 0x6, 0x8d, r1}, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000080), 0xfffffffffffffd19) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'bcsh0\x00', {0x2, 0x4e22, @multicast2}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x101000, 0x0) ioctl$VT_DISALLOCATE(r3, 0x5608) 05:58:21 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00007fe000/0x3000)=nil, 0x3000, 0x0, 0x8132, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_tables_names\x00') getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}, &(0x7f0000000040)=0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) 05:58:21 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="3000000010000101000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001c00", @ANYRES32, @ANYBLOB="08002e00000000000731a1e530cb7b0d6ade1c2c427f0006b647d46ea38fb029c34084caef3e313a4279e6e5737dfcb5b4b704839d298fae30c1fd623ce46129bd2710c1b4207326dfa13cda"], 0x30}}, 0x0) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x2, 0x20000) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000180)={{&(0x7f0000000380)=""/92, 0x5c}, &(0x7f0000000100)}, 0x20) r2 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x100000000, 0x70000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000200}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x70, r3, 0x9, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0xfff}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008050}, 0x4000) 05:58:21 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@dfltgid={'dfltgid'}}, {@noextend='noextend'}, {@access_client='access=client'}, {@cache_loose='cache=loose'}, {@uname={'uname', 0x3d, 'vboxn\x00t1(}%$'}}, {@version_u='version=9p2000.u'}, {@cache_mmap='cache=mmap'}]}}) 05:58:21 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x2a, &(0x7f0000000380)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYRESOCT=0x0, @ANYBLOB="9a8ddf8e59a02e5f194a31a95472a3ffbad9f536a42e41568e95252aa24b5d7d1fbc3d333fa0dc49522f162c05c66e36d159b040705119df757b5631cc38631637320dbd0e4af5dad726162aa226d9ab60f759769213623ccb5ce9a5e27f3ee45a6314b93586c65e24800eb433ec1c4e935b96f1cf65ae7a1683391ded0376b7658018f2c4eaccd1519c5db340138a886aceb9c22b13d9a3a5a9d1842d58961e31ece175773bcc4a69614bbc34bf2581bb68e8575ea23598656c8d77bdce7cc7d4b5fc5e01"]) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x0, r1}) r2 = shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000000300)=""/93) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) getdents64(r1, &(0x7f0000000080)=""/59, 0x3b) 05:58:21 executing program 6: r0 = socket$netlink(0x10, 0x3, 0xf) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000d2effc)=0x81, 0x4) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000df7000), 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000080)=0x9, 0x4) [ 212.293554] 9pnet: Insufficient options for proto=fd [ 212.305263] f2fs_msg: 130 callbacks suppressed [ 212.305276] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 212.310879] 9pnet: Insufficient options for proto=fd [ 212.317063] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 05:58:21 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002000)='/dev/vcs\x00', 0x8400, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000002040), &(0x7f0000002080)=0x8) r1 = socket$inet6(0xa, 0x8005, 0x2000000) socketpair(0x10, 0x800, 0x9, &(0x7f0000000bc0)={0xffffffffffffffff}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) semtimedop(0x0, &(0x7f00000003c0)=[{0x0, 0xffffffffffffa641}], 0x1, &(0x7f0000000400)={0x77359400}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {r4, r5+10000000}}, &(0x7f0000000080)) tkill(r3, 0x1000000000016) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x118) sendmsg$kcm(r6, &(0x7f0000000b40)={&(0x7f0000000100)=@in6={0xa, 0x4e24, 0xc5, @ipv4={[], [], @loopback}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000180)="615d7f2c0ad45ea167fe7d515ae484f45df85cc46ced322cc4a7f1dbb084272481129b241822f0cf507c0c5e62fe031e6a6d53d29faab33cb11875a212c56c74eb36583814932a197f30fd3123f24f27ff394dbb56bf7185e1a9eb00b3f2b5d07f5c984444165d21cb01d38fa386319aebca17456ec6f489260475038a825d31843b8852b219e503b95e33a322cb9cf888654627fd62443a9f9f084749931eb13fb6d775e025b2", 0xa7}, {&(0x7f00000002c0)="f058dd4612d0c18db8f955e1c36b31e77e84ec16e09869550c1cea08f65dae32a64f8ccbd83277d66362dc9c8583e7a40666dbbfa99fdadf6597259e15df19ca6a33909aaa4914e5e75b301f3ad64cfc95c48f2e7910f2188c48979b058a86b2726023482d9315c58c7bbb6e013de16c8e983d6471b42f0d731dcdb68885afe88aa154429b10358ad3146811730c106bce09010eabd89edf4c1a30fadf44f4538c689c6b5f794920afe8d3aa407d0a5d91e7f6fc890bab3db2d07cea7c3896c7198db5181edc806b5f674f9d30d25e923537dd13ec274fcc3c65dd07d1c8d0b8f2c960a47377533e834bd1", 0xeb}, {&(0x7f0000000440)="2c3e01a36ea5afcd8098a575d11675cd531dbbb060258fbafa0de9905088062581fba80afe33a664a0717d19de522bd8370a67d1300bc35436425d358b560b088b132280bb98d10a00407a5ff316bb29cf0e7a1f231304018f39c1e4aa80d364853154240b31c1aaba4cfebf7b7fba7b5a9d48d1a738d937001dfec4b538d1044cd37da959471f25f7ef705f416e477643012cd3b69fba41e72b8dac76cd03b0c66f92d3e9cc1263ebd0", 0xaa}, {&(0x7f0000000500)="85635aa4cbd6877a071ebc0f79f821c724984276769aa2d6d17d33a806daa7a0dcf3a708e2e509dae341da807d68a49a773c6a1da9fc3eb8f43d3a3f435d9307837f728e0022da9e949adb160b92bd200f0487bb0d79e92d95dc2610e7628a97bc5f6445c3ac6fffd49197fe", 0x6c}, {&(0x7f0000000580)="d2f33127d6e65235c7a6b11418458b7a6982d5959e63474cfc7b99a2b9d7fe8c3c945e4c181f615e0fdcd5ba8d2085bb7ee6883e6ff10b44725624de636d0388a5c186f179ff636eae83676da622b2cfef995a8aa686b07021ad025143926b4704f8145c4325ad421bcdbebe1871a1562a1bafbd2e2eb37e7acc362520529ccd", 0x80}, {&(0x7f0000000600)="3bddf4ca5de70893ae76485a1bc79024d214e2e3ca91dac66484765c78d1b7759da59d30f0c76b4b093598cc029185695fbf9eccfc280d02fa19aac7becc67225c4bf4e5ea4e74a11747b38eb08bdcc2672dc5efcd9187e00d37d84a74ce31a86f94f37e9e6cf1e3a0a245b4b4ebded8500ae3ccb0610551ca003c9f5a0812726a669fe250203e57f5d01ba2aa3233a2701ba40f7d1a4e545cc932f4c6f7d9d1d273c670c2d9823458ac8fe127cbc9a171661de1f01a51d83d792d0474c43fc9b7a3e89c300de7e0fcd3ace406a8fd77d7fc", 0xd2}, {&(0x7f0000000700)="1c1e1f0ea8f628a12f9c60402161b02881597b20e1a8b6e403e861e34b40347a3014134bd881124fb4fe8cb671bbc5b942d6ff3564072f2092172d46e9f706c3d9d8062ba6b277d893dcac3aa5a57867141fb6e5f7262e31a9769032f45720f8cd39991384e36d98ea01563aa131c4eaa07ad2664a1a3fa2b62f2ba891a3c238e717212b40d1889bb93d38528f6ade8c5e606571ad1f9bc41a8f3ab60bc938bf5525e6f8025cb2beadd5b3037092805a665238d7cffea9427902a9ee66126f82c859fa2198cf51980b4fccaadf", 0xcd}, {&(0x7f0000000240)="4d0cbbd243929609755259fe5c514401c6939c7817cf34c39a73e5ebd9a6f8212b5ad947e6b4638a1567fe5bfc291ce9ac489f0cbc7293d1a1", 0x39}, {&(0x7f0000000800)="9c2e9eaee21102e4c5d022c03cb31b991e35d6c0c4f7757ed414c39a80b471407cbf30646096d93ff0e90665a2980a32e414f4e1acd1feb42d2314c77532a837d8b43762f66a32875b6d984dd52aa7837607c54c2c29d736cdb8373bb89a79ae6fa58f387ccd3ae90657d19c550eef151c05f7cf5f77691a46088c6a6cdc7009016786856e1f1fefaad0a2892ca3634a620a67714da81e3826c9f5237c1396d104d75ca8fa2987c071f02e9a29b450323f12c20f5f7d83735432f07ac5670fe024053a5af75ad03dfa12684c5e0124e71133d8a4c906de93", 0xd8}], 0x9, &(0x7f00000009c0)=[{0x48, 0x119, 0x6, "848018ba14e9778652bd3ce38ac5d18d602b12e7f002e41e7971c563c9ff39cc87f7018c8d367cd4977b0c4a42bd5f2b5139"}, {0x108, 0x102, 0x0, "a89d3186d1f8b32dc1527ca8803ae1ed254e4550b02b172e62346a175c49fc9cb8dd7ddcdee69429f6c0ab7cdba6aeb0b0f62f138952960464c0ee04c607c498687574ad835356ae61ed20bc82da91bae6c4b2ade14e35dfd9e4eb090c7bcb8ec0bd89a24d6850aa10bc8afff39d50eb5e8d4948f8261b50831961bf800f8408b0e0d862c8d41e1ef02454258a2704f92f7ca1c76321d4f5d49b3313b5a76de04386f9fff855da9e4c301c7c973a89b6a9fc92df71f2683be4f1e7183f5c3aa19eb6312766440449ff1530fb0d7e3a0d372a0418c5197c83756cd3964d39552ecf64e42c23c537fa1190337ce6c768d7d7"}], 0x150, 0x4000801}, 0x0) write$P9_RWSTAT(r6, &(0x7f0000000b80)={0x7, 0x7f, 0x1}, 0x7) 05:58:21 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0xc0, 0x0) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000040)={0x2, 0x2, [{0x3ff, 0x0, 0x8}, {0x6}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msync(&(0x7f0000d5c000/0x2000)=nil, 0xfffffffffffffef1, 0x0) 05:58:21 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f0000000200)="0897821426b02459308760e37e14076c9e2ef42f36856f50285f295f23143d2dca8e13f9084c23fcde7043f00f4a0e9a6b480d3a3903a280dbd7d96b8a7b9b90e878e5017a15a0cb97ed93cef0daad75b3388f953e6412d65662e548c5953296d488d106cf5782f1f67d394b8f8f29fe1de8d1a2e13b5f688357cc33e2f74ce5e8977978f123556970825ce132af637f3802a140f566c205d555609da32e7bc41da6d7c1027106ce14865de20413f8bcffbf900b9a416e2431b80c2a19d2fa6544ad5698b052d2f1c9bc3a1e") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) close(r0) 05:58:21 executing program 6: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000058000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000090000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @mcast2}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f000016c000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080)=0xfee6, 0x4) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000c6c000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200, 0x0) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000040)) 05:58:21 executing program 0: pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid'}}, {@noextend='noextend'}, {@access_client='access=client'}, {@cache_loose='cache=loose'}, {@uname={'uname', 0x3d, 'vboxn\x00t1(}%$'}}, {@version_u='version=9p2000.u'}, {@cache_mmap='cache=mmap'}]}}) 05:58:21 executing program 3: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000680)={0xffffffffffffffff}) r1 = socket(0x40000000002, 0x3, 0x2) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='bridge0\x00', 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00', 0x0}) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000040)={r3, 0x1, 0x6, @local}, 0x10) sendto$unix(r1, &(0x7f0000000080), 0xffeb, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x57) [ 212.345514] FAT-fs (loop1): Unrecognized mount option "" or missing value [ 212.375764] attempt to access beyond end of device [ 212.380933] loop4: rw=12288, want=8200, limit=20 05:58:21 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r2 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) bind$packet(r2, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) io_setup(0x7, &(0x7f00000000c0)=0x0) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000180)=0x400, 0x4) io_submit(r4, 0x1, &(0x7f0000000600)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, &(0x7f0000001740)}]) getsockname$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10) [ 212.440886] F2FS-fs (loop4): invalid crc value 05:58:22 executing program 0: pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid'}}, {@noextend='noextend'}, {@access_client='access=client'}, {@cache_loose='cache=loose'}, {@uname={'uname', 0x3d, 'vboxn\x00t1(}%$'}}, {@version_u='version=9p2000.u'}, {@cache_mmap='cache=mmap'}]}}) [ 212.476939] QAT: Invalid ioctl [ 212.481274] attempt to access beyond end of device [ 212.486417] loop4: rw=12288, want=12296, limit=20 05:58:22 executing program 7: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000040)=@ethtool_coalesce={0xf, 0x66a0000000000000, 0x5, 0xffffffffffff96f7, 0x2, 0x3ff, 0xfff, 0x100, 0x1e2b, 0x1000, 0x6, 0x2ca, 0x0, 0xfffffffffffffffb, 0x1, 0x1f, 0x93d1, 0xfff, 0x1, 0x36, 0x2, 0x8000, 0x10001}}) syz_open_dev$sndctrl(&(0x7f0000000380)='/dev/snd/controlC#\x00', 0xb, 0x10000) r2 = syz_open_dev$mouse(&(0x7f00000002c0)='/dev/input/mouse#\x00', 0x4, 0x4402) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000000300)=""/6) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xfffffffffffffffd, 0x31, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "c9fd0987f5a04857bc4156fc7d6d1af0"}) [ 212.546236] F2FS-fs (loop4): invalid crc value [ 212.550954] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 212.560507] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 212.567693] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 212.575517] attempt to access beyond end of device [ 212.580527] loop4: rw=12288, want=8200, limit=20 [ 212.585547] F2FS-fs (loop4): invalid crc value [ 212.590778] attempt to access beyond end of device [ 212.595859] loop4: rw=12288, want=12296, limit=20 [ 212.600881] F2FS-fs (loop4): invalid crc value [ 212.605512] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 212.651480] attempt to access beyond end of device [ 212.656511] loop4: rw=12288, want=8200, limit=20 [ 212.673462] attempt to access beyond end of device [ 212.678491] loop4: rw=12288, want=12296, limit=20 05:58:22 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x2000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x800, 0x30}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000002c0)={r1, @in6={{0xa, 0x4e23, 0xfffffffffffffff8, @local, 0x8}}, [0x10000000000, 0x15df, 0x1000000000, 0x81, 0x80000000, 0x1, 0x5, 0x2, 0x100000000, 0x679000000000, 0x7, 0xffff, 0xff, 0x0, 0x5]}, &(0x7f0000000180)=0x100) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") keyctl$set_reqkey_keyring(0xe, 0x2) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)="2f70726f732f7379732f6e65742f697076342f76732f616d5f64726f707261746500222bfbf2e09e2cbd29a368bf52d0bec2fcce744cf487d439438948e3d55bd29c5a8f0f030061f7a624aa3dc577d04d0c5cbe421597023fce20f3f704d5d5c2530cec3f430b5b19159089eaebf1cdd2e5e2b311e1fba551ac221dd49fe8bd307aebb6db8fce", 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r3, 0x28, &(0x7f0000000040)}, 0x10) 05:58:22 executing program 3: r0 = getpgrp(0xffffffffffffffff) ptrace$getenv(0x4201, r0, 0xfffffffffffffffc, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) capset(&(0x7f0000be6ff8)={0x19980330}, &(0x7f000032e000)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) 05:58:22 executing program 6: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x3ff) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r2 = dup2(r0, r1) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) 05:58:22 executing program 1: r0 = socket$inet6(0xa, 0x1000000008002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) read$eventfd(r1, &(0x7f0000000040), 0x8) accept$unix(r1, &(0x7f0000000100), &(0x7f0000000180)=0x6e) remap_file_pages(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) inotify_add_watch(r1, &(0x7f00000000c0)='./bus\x00', 0x80000000) remap_file_pages(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000080)={0x8, 0x4}) 05:58:22 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180005000000010300e5c2b06324b79f2edc010000000000000000"], 0x18}}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x10b00, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000001c0)={0x0, 0xec, "6be7eedafd15c82a13cf637cd8d14ba66d32c947d68f67fb1f175c91935f0db966b1d801d1f0607fd6d44fa93378045856d151ba422027cc510fb81d0eabbdd7ac9d75d174cbc8164f067b146d5a700fb36b6e634ae6002db13e3d678e934df02211634f2e9be8c93a81185fc81421296ea9f9bf3c88284c54cd7904138a6fbe89306187d454e60ba0e00fb2d1694fae45caaeefc5a06fd03205e7c05432ac70d9eef88decf8526b5c83c715232e746b063fb42e4f5186811c7ef86e8ce908b8379984c115c598d0c5647b8df8fc10e0983562d37f671cb68b414c9ae1e81dc67ab98a366b9786564f2792f9"}, &(0x7f0000000080)=0xf4) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x2ed3, 0x8000, 0x3, 0xa12, r2}, &(0x7f00000002c0)=0x10) 05:58:22 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000040)="6632667306", &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)) 05:58:22 executing program 0: pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid'}}, {@noextend='noextend'}, {@access_client='access=client'}, {@cache_loose='cache=loose'}, {@uname={'uname', 0x3d, 'vboxn\x00t1(}%$'}}, {@version_u='version=9p2000.u'}, {@cache_mmap='cache=mmap'}]}}) [ 212.704260] attempt to access beyond end of device [ 212.709340] loop4: rw=12288, want=8200, limit=20 [ 212.718700] attempt to access beyond end of device [ 212.723723] loop4: rw=12288, want=12296, limit=20 05:58:24 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0x39e8c2cfef4dc904) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000040)="898ea3943db8fbc7e5d39c5d6fdd6f353b24a8e503a9d9c7bbe5ac2c478748b78beea07be5c1ce8db176153ea0ddcb87d67f8c39c4c52021bf88d3b6b6890c84cda004ed4f907a8781eb6e6b8f8ed4ab5f891211f39b") 05:58:24 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000040)='./file1\x00') pipe2$9p(&(0x7f0000004d40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="2a0000002900000000ee7c5119c000000000000000000000000000000000000000000000000007002e2f"], 0x2a) write$P9_RSTATu(r1, &(0x7f0000002b40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xffffffffffffffab, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x20100000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) creat(&(0x7f0000000080)='./file0/bus\x00', 0x0) 05:58:24 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x50800, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") fcntl$setpipe(r0, 0x407, 0xfffffffffffffeff) r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') sendfile(r1, r2, &(0x7f0000000040), 0x10000000000441) poll(&(0x7f0000000000)=[{r1}, {r1}, {r1}], 0x3, 0x0) 05:58:24 executing program 1: exit(0x10001) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000), 0x349) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x8000, 0x0) bind$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x786d, 0x6, 0x7, 0x6, 0x1, 0x5}, 0x1}, 0xa) 05:58:24 executing program 3: r0 = socket$inet6(0xa, 0x4, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc80700145f8f764070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x2001, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x389200, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) write$P9_RLOPEN(r3, &(0x7f0000000140)={0x18, 0xd, 0x1, {{0x0, 0x4, 0x5}, 0xffff}}, 0x18) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000004, 0x31, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_CLOCK(r2, 0x4038ae7a, &(0x7f0000000080)) 05:58:24 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000040)='f2fsz', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)) 05:58:24 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x72a8) ioctl(r0, 0x4, &(0x7f0000000040)="0a5cc80700315f85714070") syz_read_part_table(0x1000000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0200eeffffff01000000ff07000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055aa4546492050415254000001005c0000001f1454de000000000100000000000000ff070000000000002200000000000000de07000000000000354806cdf2678c44bbb1c108b899363902000000000000008000000080000000980e897f", 0x9c, 0x1c0}]) 05:58:24 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid'}}, {@noextend='noextend'}, {@access_client='access=client'}, {@cache_loose='cache=loose'}, {@uname={'uname', 0x3d, 'vboxn\x00t1(}%$'}}, {@version_u='version=9p2000.u'}, {@cache_mmap='cache=mmap'}]}}) 05:58:24 executing program 5: r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x1c) dup(r0) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x3) r2 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$sock_int(r2, 0x1, 0xe, &(0x7f0000000300), 0x4) 05:58:24 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid'}}, {@noextend='noextend'}, {@access_client='access=client'}, {@cache_loose='cache=loose'}, {@uname={'uname', 0x3d, 'vboxn\x00t1(}%$'}}, {@version_u='version=9p2000.u'}, {@cache_mmap='cache=mmap'}]}}) 05:58:25 executing program 7: r0 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x7f, 0x4000) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000140), 0x4) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000000000000030006000000000002000000e000000100000000000000000200010000000000000000fd000000000300050000ea000200000007000000ffffdf0000d7e80000034d3e5d34b1f4b54213517d997c02000000f6f2be961bd827896b79f623d35729d6c1ec666154a6eec53ba2691342202b66b93a8699542997e287ee57bbbe75dddbfda4e8fc49ae28a5740a8b878476f3bd02e592effc6565b3cb44572ca2dc630388d03dc149f6a831bc6a462705820eefa64cca5369787cfa"], 0x50}}, 0x0) rt_sigtimedwait(&(0x7f0000000080)={0x2}, 0x0, &(0x7f00000000c0), 0x8) 05:58:25 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)) 05:58:25 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x400, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f00000000c0)=0x5) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local, @rand_addr}, 0xc) getsockopt$inet_mtu(r4, 0x0, 0x29, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f00000002c0)={{0x2, 0x0, @multicast2}, {0x1}, 0xfffffffffffffffe, {0x2, 0x0, @multicast1}, 'tunl0\x00'}) close(r4) dup3(r1, r2, 0x0) 05:58:25 executing program 2: socket$unix(0x1, 0x0, 0x0) capset(&(0x7f000043fff8)={0x19980330}, &(0x7f0000092000)) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000400)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}}}, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/34, 0x22}, {&(0x7f0000000200)=""/209, 0xd1}], 0x2, &(0x7f0000000340)=""/176, 0xb0, 0x200}, 0x142) getsockopt$inet6_dccp_buf(r0, 0x21, 0x80, &(0x7f0000000440)=""/27, &(0x7f0000000480)=0x1b) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000012d6405000000000065040400010000000704000001000000b7050000000000006a0a00fe00000000850000001a000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 05:58:25 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid'}}, {@noextend='noextend'}, {@access_client='access=client'}, {@cache_loose='cache=loose'}, {@uname={'uname', 0x3d, 'vboxn\x00t1(}%$'}}, {@version_u='version=9p2000.u'}, {@cache_mmap='cache=mmap'}]}}) 05:58:25 executing program 3: r0 = socket$l2tp(0x18, 0x1, 0x1) mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x0, 0x3) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000040)=""/14) r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x1ff, 0x2000) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e20, @remote}}, 0x2, 0x2, 0xbd, 0xa67, 0x2}, &(0x7f00000000c0)=0x98) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f00000001c0)={r3, 0x6, 0x4}, 0x8) 05:58:25 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'ip6gretap0\x00'}) mmap(&(0x7f0000000000/0xc1f000)=nil, 0xc1f000, 0x2, 0x71, 0xffffffffffffffff, 0x0) keyctl$read(0xb, 0xfffffffffffffffd, &(0x7f00000000c0)=""/4, 0x4) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/255, 0xff}], 0x1, 0x0) [ 215.659749] attempt to access beyond end of device [ 215.664783] loop4: rw=12288, want=8200, limit=20 [ 215.671558] attempt to access beyond end of device [ 215.676561] loop4: rw=12288, want=12296, limit=20 05:58:25 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x2000, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000180)) clone(0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000000), &(0x7f0000000200)) r1 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000240)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000280)=0x20) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000002c0)={r4, 0x20}, 0x8) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x8912, &(0x7f0000000200)="025cc83d6d345f8f762070") fcntl$setownex(r2, 0xf, &(0x7f0000704000)={0x2, r1}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000300)=0x0) wait4(r6, 0x0, 0x1040080000000, &(0x7f0000000080)) [ 215.732901] attempt to access beyond end of device [ 215.737935] loop3: rw=12288, want=8200, limit=20 [ 215.765219] attempt to access beyond end of device [ 215.769980] attempt to access beyond end of device [ 215.770332] loop4: rw=12288, want=8200, limit=20 05:58:25 executing program 6: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200037000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) open(&(0x7f00000000c0)='./file0\x00', 0xa000, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)="7cfe20e5917a300062872ad0bd27e530037b1ed7667c8a62f33e4320aeffae869468d920944daa07ccd7919fe0b019b3e2458ee32043f7e1571abc455e9e2b58f6e1b8bfe1cd420fc5994a000000000068242f33772b70c2f1f3824d4a12", 0x1ff) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000080)=0x200020, 0x4) 05:58:25 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid'}}, {@noextend='noextend'}, {@access_client='access=client'}, {@cache_loose='cache=loose'}, {@uname={'uname', 0x3d, 'vboxn\x00t1(}%$'}}, {@version_u='version=9p2000.u'}, {@cache_mmap='cache=mmap'}]}}) [ 215.775186] loop3: rw=12288, want=12296, limit=20 [ 215.779284] attempt to access beyond end of device [ 215.790694] loop3: rw=12288, want=8200, limit=20 [ 215.804694] attempt to access beyond end of device [ 215.808099] attempt to access beyond end of device [ 215.809727] loop4: rw=12288, want=12296, limit=20 [ 215.814684] loop3: rw=12288, want=12296, limit=20 [ 215.853843] attempt to access beyond end of device [ 215.858916] loop4: rw=12288, want=8200, limit=20 [ 215.928510] attempt to access beyond end of device [ 215.933677] loop4: rw=12288, want=12296, limit=20 [ 215.941524] attempt to access beyond end of device [ 215.946618] loop4: rw=12288, want=8200, limit=20 [ 215.959306] attempt to access beyond end of device [ 215.964328] loop4: rw=12288, want=12296, limit=20 05:58:25 executing program 6: mkdir(&(0x7f0000000140)='./control\x00', 0x0) r0 = inotify_init() r1 = inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x81000100) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./control\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB=',wfdno8', @ANYPTR=&(0x7f0000000100)=ANY=[@ANYRESDEC=r0], @ANYBLOB=' +']) creat(&(0x7f0000000040)='./control/file0\x00', 0x0) 05:58:25 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r0, &(0x7f0000000000)=@un=@file={0x0, './file0\x00'}, 0x80) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 05:58:25 executing program 7: r0 = socket$can_bcm(0x1d, 0x2, 0x2) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="73796247c875d04011a7a7909a5b571a3971ca329e807d6e0078154b936f355bc1387dc79a04b7c6ae65caefc5db194f856935f989acfca3f0664d34f322a3ca61b60184347903341a49fd91da0d672baf549d9ad7cdb1cd3e6c82b91d5a95189182545df77a425cb18defb0c74e0d48000b731872072cf08ce8dbf5d9dc410ad384da14e454f4f5a19611d79ff297af2b00000000000000000000"], 0x9b) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x1, &(0x7f0000000180)="0a5cc80700315f85714070") r2 = socket$inet6(0xa, 0x1, 0x0) socketpair$inet(0x2, 0xe, 0x3, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000001c0)={0x0, 0x1a, "9a694ffcda3c9a45110bcc6030d54c66bab15e412dcde7d261e7"}, &(0x7f0000000200)=0x22) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000240)={r4, @in6={{0xa, 0x4e24, 0x8001, @local}}}, 0x84) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r6, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$inet_int(r6, 0x0, 0x9, &(0x7f0000000000), &(0x7f0000000040)=0x4) close(r6) dup3(r2, r5, 0x0) 05:58:25 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x6, 0x308, [0x0, 0x20000280, 0x20000390, 0x20000600], 0x0, &(0x7f0000000100), &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x380) dup2(0xffffffffffffffff, 0xffffffffffffffff) 05:58:25 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid'}}, {@noextend='noextend'}, {@access_client='access=client'}, {@cache_loose='cache=loose'}, {@uname={'uname', 0x3d, 'vboxn\x00t1(}%$'}}, {@version_u='version=9p2000.u'}, {@cache_mmap='cache=mmap'}]}}) 05:58:25 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = getpgid(0xffffffffffffffff) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) fcntl$getown(r2, 0x9) perf_event_open(&(0x7f0000000000)={0xeb6ed2483022ba03, 0x70, 0x80, 0x7170, 0x2, 0xfe5, 0x0, 0x0, 0x20, 0xf, 0x4, 0x100, 0x6, 0x0, 0xf5, 0x3, 0x80000001, 0x400, 0x1, 0x3ff, 0x8, 0xd36b, 0xde, 0x8, 0xc6a, 0x80, 0x8, 0x0, 0x5, 0xffffffff, 0x3, 0x7f, 0x5e, 0x5, 0xa66, 0x7, 0xc1, 0x59d4, 0x0, 0x1, 0x4, @perf_config_ext={0x5, 0x4}, 0x1208, 0x8000, 0x2, 0x7, 0x800, 0x1, 0x7}, r1, 0x2, r2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$SETVAL(0x0, 0x0, 0x10, &(0x7f0000000240)) 05:58:25 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)) 05:58:25 executing program 3: r0 = socket(0x2, 0x6, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000009ff4)) pkey_alloc(0x0, 0x3) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000007ffc), 0x4) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@rand_addr, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@ipv4}}, &(0x7f00000002c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000800)={{{@in=@multicast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@rand_addr}}, &(0x7f0000000900)=0xe8) accept$packet(r0, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000980)=0x14) getpeername$packet(r0, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000a40)=0x14) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000ac0)={0x0, @multicast1, @dev}, &(0x7f0000000b00)=0xc) recvmsg$kcm(r0, &(0x7f0000002f80)={&(0x7f0000000b40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000000bc0)=""/247, 0xf7}, {&(0x7f0000000cc0)=""/220, 0xdc}, {&(0x7f0000000dc0)=""/65, 0x41}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/76, 0x4c}, {&(0x7f0000001ec0)}], 0x6, &(0x7f0000001f80)=""/4096, 0x1000, 0x8}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002fc0)={{{@in6=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f00000030c0)=0xe8) getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000003100)={@multicast1, @dev, 0x0}, &(0x7f0000003140)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003300)={'bridge_slave_0\x00', 0x0}) recvmmsg(r0, &(0x7f0000008000)=[{{&(0x7f0000003340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f00000035c0)=[{&(0x7f00000033c0)=""/98, 0x62}, {&(0x7f0000003440)=""/114, 0x72}, {&(0x7f00000034c0)=""/219, 0xdb}], 0x3, &(0x7f0000003600)=""/27, 0x1b, 0x6}, 0x2}, {{&(0x7f0000003640)=@nfc, 0x80, &(0x7f0000004c80)=[{&(0x7f00000036c0)=""/232, 0xe8}, {&(0x7f00000037c0)=""/182, 0xb6}, {&(0x7f0000003880)=""/227, 0xe3}, {&(0x7f0000003980)=""/209, 0xd1}, {&(0x7f0000003a80)=""/217, 0xd9}, {&(0x7f0000003b80)=""/108, 0x6c}, {&(0x7f0000003c00)=""/60, 0x3c}, {&(0x7f0000003c40)=""/49, 0x31}, {&(0x7f0000003c80)=""/4096, 0x1000}], 0x9, &(0x7f0000004d40)=""/102, 0x66, 0x2}, 0x1f}, {{&(0x7f0000004dc0)=@alg, 0x80, &(0x7f0000005440)=[{&(0x7f0000004e40)=""/88, 0x58}, {&(0x7f0000004ec0)=""/206, 0xce}, {&(0x7f0000004fc0)=""/174, 0xae}, {&(0x7f0000005080)=""/92, 0x5c}, {&(0x7f0000005100)=""/247, 0xf7}, {&(0x7f0000005200)=""/219, 0xdb}, {&(0x7f0000005300)=""/84, 0x54}, {&(0x7f0000005380)=""/45, 0x2d}, {&(0x7f00000053c0)=""/87, 0x57}], 0x9, &(0x7f0000005500)=""/62, 0x3e, 0x2}, 0xc7}, {{&(0x7f0000005540)=@hci={0x1f, 0x0}, 0x80, &(0x7f00000069c0)=[{&(0x7f00000055c0)=""/180, 0xb4}, {&(0x7f0000005680)=""/127, 0x7f}, {&(0x7f0000005700)=""/4096, 0x1000}, {&(0x7f0000006700)=""/23, 0x17}, {&(0x7f0000006740)=""/185, 0xb9}, {&(0x7f0000006800)=""/145, 0x91}, {&(0x7f00000068c0)=""/204, 0xcc}], 0x7, &(0x7f0000006a40)=""/4096, 0x1000, 0x8001}, 0xfffffffffffeffff}, {{&(0x7f0000007a40)=@nl=@unspec, 0x80, &(0x7f0000007b80)=[{&(0x7f0000007ac0)=""/125, 0x7d}, {&(0x7f0000007b40)=""/37, 0x25}], 0x2, &(0x7f0000007bc0)=""/43, 0x2b, 0xfffffffffffffc01}, 0x1000}, {{&(0x7f0000007c00)=@nl, 0x80, &(0x7f0000007dc0)=[{&(0x7f0000007c80)=""/89, 0x59}, {&(0x7f0000007d00)=""/128, 0x80}, {&(0x7f0000007d80)=""/56, 0x38}], 0x3, &(0x7f0000007e00)=""/173, 0xad, 0x40}}], 0x6, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000007ec0)={{{@in, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in=@multicast2}}, &(0x7f0000008180)=0xe8) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000009e00)={@loopback, @multicast1, 0x0}, &(0x7f0000009e40)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000009e80)={0x0, @local, @multicast2}, &(0x7f0000009ec0)=0xc) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000009f40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000009f00)={&(0x7f000000a000)={0x578, r2, 0x200, 0x70bd2d, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0xb0, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x129}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r4}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r7}, {0x3c, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r8}, {0x138, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r10}}, {0x8}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r11}, {0x294, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x80000000}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xb99}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r12}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x34, 0x4, [{0xa0d, 0x8, 0x5, 0x9}, {0x9, 0x80, 0x7c, 0x8}, {0x3f, 0x100000000, 0x7fff, 0x7fffffff}, {0x7fff, 0x1, 0x9, 0x5}, {0x8, 0x80, 0x1f, 0x10000}, {0x369, 0x8, 0x7f, 0x59b}]}}}]}}, {{0x8, 0x1, r15}, {0x40, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r16}}}]}}]}, 0x578}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 05:58:25 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x400, 0x42) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'team0\x00', 0x2}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000400)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee47afe7b33fc778bde252c50d2e", 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000042ff3)='/dev/snd/seq\x00', 0x0, 0x20002) r3 = dup2(r2, r0) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000200)={0x4, {{0xa, 0x4e23, 0x7f, @ipv4={[], [], @multicast1}, 0x401}}}, 0x88) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x0, 0xfffffffffffffffe, 0x0, "7175657565310000000000000000313b0000000000000000000000f5ffffffffffffff00060000000000ccbf7ddd00", 0x2}) write$sndseq(r1, &(0x7f0000000000)=[{0x5, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000440)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f00000002c0)={0xff, 0x8, 0xffffffff, 0x0, 0xffffffffffffff16, 0x5}) syslog(0x2, 0x0, 0x0) [ 216.336642] 9pnet: Insufficient options for proto=fd [ 216.349624] attempt to access beyond end of device [ 216.354656] loop4: rw=12288, want=8200, limit=20 [ 216.369578] attempt to access beyond end of device [ 216.374614] loop4: rw=12288, want=12296, limit=20 05:58:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000580)={0x0, 0xa7a, "af5d2c426093c388d6bc076c9ee98e5a11c2fb3322e5b4dd05f0d9aae72ea5f77b3abfae5b9a94d20816ed293ad8ad61093008d5b98e71aede686f2bace222f28a3df977ab3c8ef16c3326239d0268cce296e4fabbacb74b6147ef8bc19dfba4387e2b5304d46c3af86190095831d8a6ad4e5807833c728ca6fbdf0d3161bde950e3a740c7422ba45a1c8fb2f2855f2779d6e59aa9d0e09840395e8361aa6c87e3efb45e1650000a164a363902b7f9561af2041375332d024cc8704aa6751081a2dc57ba6c36cf54647407c245970c1fd399f6bffc9e0878bb68570a37ddb88c2c5cd415180318ab03b100b6fbc6971c4307362ef0ad86649c89afabcb2a8bfef072dafff6b9213b4c7839e529972407c76017f89e0df4314fec4628bd9d4e37e7f0ce16f5f9c93eeb43c601d997f23a23d316324c84b6de811f561ba0dd8ae041876e797830f08be8ba40ab07ff6c7a40711d4331560c21eaddd1cda9e0d532f0f4f33440deaba168dd68a433476b9bbe75761c2bb8b3b04cafcced030654dd0d149e2a0d8688500167e6bce00518b44ed260f049cbd4e8e72b935a0a2a74a314e9bf8bdeb138e80eeccb588bb69b622d083a6f4d208140dad6a6cd8664aa738318946737898197f647b13d5382e8c3c67991c80393278dfb542abdccc8c1197f41937bfb83593d14c6d898f728f1050e9b7b0a301aa2f4638f581b2d044740bf1164440ac6a0f8e7d01471556e5ecd8b06f8a7410f79d556c9b3bd6ab7a3bb96249a0000feaac01704b116538c54c830a75dbfc2ab79ef2a7630499a077b5782cbef6060e076960f819eb3c8e0d018b9b57054d0de21ab19b8fab9448d7d1cd86cb47dd6f5dfe3def14a70b7383be7f5eb27161af4bbb09142874fd2d83fe6d57e24d1b7bf8bbcc739d907c6b1675e0e15ea57b87f3466b97092939e02f7a2f1484a0c2dd7bc411c0d4e315c73f75639f9e47b3796fd9a30fd788df6865bd4e1585b3f44ba5a7aa16adfffff5e0a57c2dc2017a4aa152893d654e39e116b38a76db9590b2f3882aa8a071d422bef3af065dc3c4bdb1b9977724a3a4264b0d5f4c3fa925b3025b83e99c85ad3275a6132c425da7838c9ecc0571bbbe666f001a9e3c064de1163dd495d8cf95577d677558ce3979e087666296f0ee8f40b18802505bc76c2db567da12a2d2c0f3123be5eb9fadf0ee745131fbe2d69dd54dfc18a94b4660df11a6e24529e24516895457def64528acb262ed0241a070d057022d7c3011c10e333a7f4584360e7c51363baecb171556d9e0ddc1d5579e45092a9e67c8f6288a90a1d20f91c99920b7d37140f8b7c6239f9a71feedbf81132a6e74a2d2e2459e237667798a1abd461221a49577587f7f86ba72a6e58e305543c176c60062d9d2cfa178f799235e8b6c5ba0b075e0224df171fad3ee51248b6cf0424aff0bbee84c4298643cbd6f0dec6dddd2f3347b2dc71ff8ee5674fbf7d9bde7ac62b5c63facfc03472956f3ecf2ab67a3bacc4f8069f5f32741a58c1179156b8e807de1af7468a2c01070611e510271ca10fed9065cfba0cf9465a305672e3d0c3fe05a6aedf2de3343082d83c226bc7833bf67587c77038d81008dcf4242b6917ef6550358b3e33823b6d9462cea0ca3582c4c88ad25e1d25a1dd67621c962faa4c1251cc04ad8f7ad11e5ab5684b5e57d15f41aa5524d51bb26027102755a4c88c6171411dd799695e92304c199bd3714448191593c9a8ffe874841448f8986e282c4783b432e103751e956db34a2c56b8bfadd192b387210d3038e059b70356138bdae121342cfc6f4186400c09fe082b2851ec1ef527fed0c15d4bb2a736396e77010d57136a6ee466adc9d55dba9addcf067922639689553380aa08d1243494b7f3308849ea3a925c84b15181bb942553ba3591bdfd773b496ac2ba05ea16336a1eb51d0e53d5541a828bb8a4a7f69d773d6f9ba085fff016e9c83ecb4e88e81a07d96510cdc4d16680b36b79b84dae8e6dc79bb5ad426a2f79ade2f3a587ab459f1f0773884a51b10f8b217b4f298a5bf997df236cbce3af723976f3df12bdde515b187a77734004c9bc56a445091b172c9870eefcb3716c98a06ff05fd48e552b4cbc8822ec5fcf39977803e449df7e9ae5909050367c596f271699c7bbb94068b7efb3aca4bba03bb5176dc68ed276c5d388402207f481732c2756372c2d840b8953968dc9aaa5237f66fcfeabc0656f6cb58181c252eabbeae141bdc1c87afc0190b2dd29be3de9466414d98236b9970b4f3587cf4cda1353b57631ac5014d87e5f1800c94d2c2731a098341d5ee6478fb5acf3bb2413971e69326bd35201710c2fcf121a6e2ee6137eb906fa4ce020a7399885e81d927d11092462c02bc886b451c8b7b4487c158ad4ff94b5743cab6fd9146dcfa58108816ef13f4e2e3009d8c4c3589c3fbbeb94a43e771b08336619cb5052877c1df8eee8c0bc346e6b4cb8d7a370372105ce66413926e29956dffeaad9adc3c9c732562da7ad315c314a9e921f0b2154d60fd87275f0981bfbeabedcc5cf5f04e3b0630bbc3553f044b7e2ab21a9819a24ce8dc8fac87c7547999e53fc95763d2eba6c78fe6a27d707e9249f9684f6e1e7576e350e987580754c8fb418d4ea59f61e43fd676aed0d119ab83f7c31f710d21a1f5db47f5cd4a201f7738717d18baa78dad9d6d2a29560f49fa21f1bd822d2dd6d7b24cc49a3597b9370c658674defd8eee4a3ed9bb23f11a8f023d21745a144cf93c5b98814e5fe18714f3ff3feb33fd090bf16c82092f2c97e2de9c1e9270dc02616e7ddc56ca0a57849c249b328832a60f3c65f36100dcb2a991523eefdd06468a00d6ac3dc32e86e85e5db679bb2b15ae7c1d1283975e6713323fe75d85353d27dd0378c55c82ac2fedbeed0c71085cb5287ae776d56033853380f63cea0070850c5506b1cdc28d0a7d41bed32c53d7e28cf56d1a194552776e8f54577c6326f5c484aa572ed79b4efcd0150510f6e08fcca52b6e92d3c4260bc8f8a95ac35b0c4f63c63d2e523f86184267884ff427694e0ade1df2c548d0150c276af2aded6d881930804cda92123e26dc2ddbcbeaf39e695c49f5b0b464def16a537353d02be252455494b61de78f21ef258f5fa45c471099cec645e3172198d1f26e4df69c4dd74af6822a77572e80ed5814677f391e93ade3679d0748a643177993b02e367ee124056b74664af8232b66b0eda88ca603933499084b125392e577d2587b0ee9d350dd3a94efbdf03c8807d5ac24411ccff68962d8ded1a9b1aaabc5cb4c4426d90e2dd8722548adbb52c5cbc88c7c48534bcb8d5b3cb40dff621bb990777a40a68acb09f3f2fd43ab1bd77cef4d91c8ea47bf0107f99bf1022d85f2982e3f995e54da1a8090111c0c1733bf8b7f2e618e6811bb59044a2e31e4b4611c83c3e1056f47a7e7f5023778ef1301ba2dd41ff599bf2286c40a619c355194cf2cc48af670a112e0f241a37490dc37a33a56cab3335ef028add106f03f10d7852aec42046ab9de3d8e54843a4379800bdb53b6772d4a308c4c6914a0ae0b2eec19cc0db8d9459cae997cdf2b221508720a5d103a05251ffa86a36c7c7d3fa3ba19f4153741f316201d4f01838e1974db546c7b7bec8009c277ce4a0ecf08e3e80d92cee916b093ba6d7b0634e422ee6bda88aa2a3a1efa9b1bc69aec9b2fdc12529d52e4910efa04338b01c4691d46df3ee387532a22297117252d3af8a10caa071a9541af9441ad27e74aee1"}, &(0x7f00000000c0)=0xa82) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x8, 0x1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000140)=0x14) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:58:25 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xc4f, 0x4000) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000040)) ioctl(r0, 0x8912, &(0x7f0000000180)="025cc80a2b345f8f762070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$intptr(0x22, 0x0) io_setup(0xffff, &(0x7f0000000100)=0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) r5 = request_key(&(0x7f00000002c0)='logon\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000340)='/dev/usbmon#\x00', 0x0) keyctl$get_security(0x11, r5, &(0x7f0000000380)=""/90, 0x5a) io_getevents(r2, 0x1f0, 0x4, &(0x7f00000001c0)=[{}, {}, {}, {}], &(0x7f0000000280)={r3, r4+10000000}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000400)={0x7, [0x0, 0xfff, 0x1, 0x80000001, 0x3f, 0xa91, 0xfff]}, &(0x7f0000000440)=0x12) 05:58:25 executing program 2: r0 = memfd_create(&(0x7f0000000000)="736563757269747d917617cb0e3dbe4574656f00", 0x0) write(r0, &(0x7f0000000040)="16", 0x1) sendfile(r0, r0, &(0x7f0000000380), 0x6cfce4cf) clock_nanosleep(0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000600)) openat$cgroup_ro(r0, &(0x7f0000000080)='io.stat\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x802, 0x8031, r0, 0x0) mlockall(0x3) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x20) [ 216.385079] 9pnet: Insufficient options for proto=fd 05:58:25 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000040)="6964ff0f000061637900", &(0x7f0000000080), &(0x7f00000000c0)='\x00', 0xffffffffffffffff) [ 216.421983] attempt to access beyond end of device [ 216.427016] loop4: rw=12288, want=8200, limit=20 05:58:25 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid'}}, {@noextend='noextend'}, {@access_client='access=client'}, {@cache_loose='cache=loose'}, {@uname={'uname', 0x3d, 'vboxn\x00t1(}%$'}}, {@version_u='version=9p2000.u'}, {@cache_mmap='cache=mmap'}]}}) 05:58:25 executing program 6: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x9, 0x3) ppoll(&(0x7f0000013000)=[{r0}], 0x1, &(0x7f0000001000)={0x77359400}, &(0x7f000000d000), 0x8) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000080045005, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'dummy0\x00'}) [ 216.465675] attempt to access beyond end of device [ 216.470724] loop4: rw=12288, want=12296, limit=20 05:58:26 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f00000002c0)=@ethtool_dump={0x40}}) close(r2) close(r1) keyctl$join(0x1, 0x0) [ 216.551920] attempt to access beyond end of device [ 216.556987] loop4: rw=12288, want=8200, limit=20 05:58:26 executing program 3: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)="282a7365637572697479ee00", 0xffffffffffffff9c}, 0x10) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)=0x7ff) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r2 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) fcntl$setstatus(r3, 0x4, 0x400) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r2, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) write(r3, &(0x7f0000000100)='g', 0x1) writev(r5, &(0x7f0000000000)=[{&(0x7f00000002c0)="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", 0xf19}], 0x1) ioctl$TCXONC(r5, 0x540a, 0x1) 05:58:26 executing program 5: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r1) setresuid(r1, 0x0, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x10000, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) 05:58:26 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid'}}, {@noextend='noextend'}, {@access_client='access=client'}, {@cache_loose='cache=loose'}, {@uname={'uname', 0x3d, 'vboxn\x00t1(}%$'}}, {@version_u='version=9p2000.u'}, {@cache_mmap='cache=mmap'}]}}) [ 216.620809] attempt to access beyond end of device [ 216.625868] loop4: rw=12288, want=12296, limit=20 05:58:26 executing program 7: capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8)) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x14000, 0x0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f00000001c0)) [ 216.725922] attempt to access beyond end of device [ 216.731023] loop4: rw=12288, want=8200, limit=20 05:58:26 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000780)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000180)="025cc80700145f8f764070") ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_open_dev$midi(&(0x7f0000000480)='/dev/midi#\x00', 0x10000, 0x0) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_netfilter(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f00000007c0)={0x10b8, 0xf, 0xc, 0x500, 0x70bd2c, 0x25dfdbfb, {0xb, 0x0, 0xa}, [@nested={0x9c, 0x72, [@generic="aee2545b48f0be2e53c3b2b5b589b805d1d2498eef29855310f88be4aa67bf14c9d719d6109950e6988f0a5d685095b2983978b9511c62018cf353b74013f7a886bf9849a6559df6ba91ff903c91", @generic="ae543b1c969c27e0a8b8cdeb77b557886b2ce216b763f6", @generic="780b37f93d1ff057427f30f42a52e0646bfbb0d1a5c2c9f593e67b", @typed={0xc, 0x41, @u64=0x200}, @typed={0xc, 0x24, @str='selinux\x00'}]}, @generic="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", @typed={0x8, 0x65, @uid=r4}]}, 0x10b8}, 0x1, 0x0, 0x0, 0x4}, 0x40011) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) connect$l2tp(r2, &(0x7f0000000140)=@pppol2tpv3, 0x2e) close(r2) close(r0) 05:58:26 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000580)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)={0xc1}) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000d00)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000000)) sched_setattr(0x0, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000340)={0x0, 0x0, 0x0, {0x77359400}}) getpid() ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x6, 0x2) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000200)={0x5, 0x94, 0x31, 0xe7}, 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000efb000)='/dev/sequencer2\x00', 0x0, 0x0) 05:58:26 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid'}}, {@noextend='noextend'}, {@access_client='access=client'}, {@cache_loose='cache=loose'}, {@uname={'uname', 0x3d, 'vboxn\x00t1(}%$'}}, {@version_u='version=9p2000.u'}, {@cache_mmap='cache=mmap'}]}}) [ 216.823962] attempt to access beyond end of device [ 216.829018] loop4: rw=12288, want=12296, limit=20 05:58:26 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)) 05:58:26 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"626f6e643000000000f98b00"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000040)="0f425f69f20f38f10b650feda5000066b9800000c00f326635004000000f30b80d008ec86666de3c0f01cf260f01cb2665660f3a618c0060540fc76b39", 0x3d}], 0x1, 0x0, &(0x7f00000002c0), 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0xffffffffffff0000, 0x1) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000000200)=0x3ef, 0x4) fcntl$setflags(r3, 0x2, 0x1) ioctl$KVM_NMI(r2, 0xae9a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x400900, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r4, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e20, 0x7fff, @mcast1, 0x4}, {0xa, 0x4e23, 0x10680000000000, @remote, 0x8}, 0x8, [0x100, 0x80, 0x4, 0x1, 0x5, 0x7fffffff, 0x1ff, 0x2000000000000000]}, 0x5c) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:58:26 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getegid() getpid() r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x10200, 0x0) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000080)=0x80000001, 0x4) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x8, 0x0, &(0x7f0000000600)=[@increfs={0x40046304, 0x1}], 0x0, 0x0, &(0x7f0000000780)}) 05:58:26 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x4, 0x3, &(0x7f0000000240)=[{&(0x7f0000000100)="838b9c67ac1cb621f45be195f54b5c275dc94e8548cad290672b4df20e2110207deaa72c690997e3b5332d573b0d6d5ab4b9574801eea065962f76a5", 0x3c, 0x5}, {&(0x7f0000000140)="ed6ff3edbf2cd7a072ea6188ad7effb1b0bd5a23ce49423252730ec51c44b1956195121d418358f53033cc7d9ca30b3768b9e65dd871b528eb5cb6f6f108dc5889157dcfcb4dbb771b93101f8f53981adca22e0666b90d8a283750a203a3f486e8b872307639957eeff6621f49fa613e9965d2fe1bd82fc5602e1cb2422e6c9ff7e27fce718ed4def63c2bc5ed4393acbd286c85a5cbd72b8be394150c301d584fe6d4c28a8d3bb8881e50b0b794bb9ccb6e65efb1c4b1bb43c145", 0xbb, 0x5}, {&(0x7f0000000200)="42e17b1c89a783212fe855785efc8e0eaf3bb684a1f50e0b9bc2ad7e0405b26b37c5f2b2", 0x24, 0x6}], 0x100000, &(0x7f00000002c0)={[{@nodots='nodots'}, {@nodots='nodots'}, {@dots='dots'}, {@dots='dots'}]}) [ 216.937960] 9pnet: Insufficient options for proto=fd [ 217.012895] kvm: pic: level sensitive irq not supported [ 217.034340] binder: 16434:16440 got transaction with invalid offsets ptr [ 217.065616] attempt to access beyond end of device [ 217.070758] loop4: rw=12288, want=8200, limit=20 [ 217.101926] attempt to access beyond end of device [ 217.107018] loop4: rw=12288, want=12296, limit=20 [ 217.112477] binder: 16434:16449 IncRefs 0 refcount change on invalid ref 1 ret -22 [ 217.125367] binder: 16434:16440 transaction failed 29201/-14, size 24-8 line 2995 [ 217.149802] attempt to access beyond end of device [ 217.154826] loop4: rw=12288, want=8200, limit=20 [ 217.160394] binder: BINDER_SET_CONTEXT_MGR already set [ 217.166290] binder: 16434:16449 ioctl 40046207 0 returned -16 [ 217.172467] attempt to access beyond end of device [ 217.177453] loop4: rw=12288, want=12296, limit=20 [ 217.188205] binder_alloc: 16434: binder_alloc_buf, no vma [ 217.193824] binder: 16434:16440 transaction failed 29189/-3, size 24-8 line 2967 [ 217.203082] binder: undelivered TRANSACTION_ERROR: 29201 [ 217.208897] binder: 16434:16454 IncRefs 0 refcount change on invalid ref 1 ret -22 [ 217.218014] binder: undelivered TRANSACTION_ERROR: 29189 [ 217.267959] attempt to access beyond end of device [ 217.272964] loop4: rw=12288, want=8200, limit=20 [ 217.295019] attempt to access beyond end of device [ 217.300020] loop4: rw=12288, want=12296, limit=20 [ 217.319462] attempt to access beyond end of device [ 217.324483] loop4: rw=12288, want=8200, limit=20 [ 217.329594] attempt to access beyond end of device [ 217.334704] loop4: rw=12288, want=12296, limit=20 05:58:27 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/null\x00', 0x101880, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in=@broadcast, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000000)=0xe8) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000600)={0x5, 0x78, &(0x7f0000000180)="27b69167f9c6508383c7d73520b8b231dcd15b469d02016a859bb4b866440ede5f4451b741986b7863d387dbf68920916d7ea8c31c122c05975fd40debf57e6d2d27094143a41997b67e89be728c81517074937bf54a6a13d52c1db896d19ad0dffdec57cccd46fd96202b82e7801e5d30b3073780236095"}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f0000000640)=0x2) setreuid(r3, r4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000280)={0xffffffff00000001, {{0x2, 0x4e23, @multicast1}}, 0x0, 0x5, [{{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x19}}}, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1a}}}, {{0x2, 0x4e24, @local}}]}, 0x310) sendto$inet(r1, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10) 05:58:27 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid'}}, {@noextend='noextend'}, {@access_client='access=client'}, {@cache_loose='cache=loose'}, {@uname={'uname', 0x3d, 'vboxn\x00t1(}%$'}}, {@version_u='version=9p2000.u'}, {@cache_mmap='cache=mmap'}]}}) 05:58:27 executing program 2: r0 = socket$kcm(0x29, 0x7, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000180)={r1}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x800, 0x0) futex(&(0x7f0000000080), 0xb, 0x0, &(0x7f0000005ff0)={0x0, 0x1c9c380}, &(0x7f0000000000), 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000000c0)={0x100000000, 0x4, 0x8200, 0x2, 0x100000000, 0xfffffffffffffffa, 0x5, 0x3}, &(0x7f0000000100)=0x20) 05:58:27 executing program 3: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x215000, &(0x7f0000000340)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@debug={'debug'}}, {@cache_loose='cache=loose'}, {@access_client='access=client'}, {@nodevmap='nodevmap'}]}}) mount(&(0x7f0000000100)='./file0//ile0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000280)="696f2e776569676874003bf2d5c6f968ce41bb38d05f101a37fb2d85443dd9a4e7a141a7b6cb29269e147e8bc488096e3b23e1e8628f4f0df8c0042193d353fb43e4d7e85df4d88954af8cc87747da61d47c6cafeb889d5988b4d2fd297b1916d5fe2ead9169d37f14df93d148dc53b902e14794f668b5ae501d005f6578712f9835d7173864c71432964344b44c926e8464215f8ac7a9c1b8703fb1", 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000180), 0x403) 05:58:27 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)={'nat\x00'}, &(0x7f00000001c0)=0x78) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = dup(r0) write$P9_RXATTRCREATE(r1, &(0x7f0000000000)={0x7}, 0x7) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000080)) 05:58:27 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet6_int(r2, 0x6, 0x1f, &(0x7f0000000040), &(0x7f0000013000)=0x4) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x8102, 0x0) close(r1) 05:58:27 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)) 05:58:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002b40)={'team0\x00', 0x0}) socket$inet6(0xa, 0x1000000000002, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000003ac0)={&(0x7f0000000040), 0xc, &(0x7f0000003a80)={&(0x7f00000000c0)=ANY=[@ANYBLOB="e15d47352c163ef0059db7d9e6c017923b2229f50bcd3f9b5e8f63b6139f24e151835ef36eb832c3395b43a316465603b62dbab33f55933baa156d7ab1f863b7ace6d48f7825e952198a16b33777837653026cb97e1f8ec98101cd98806f7b21ca351d09cfcadb55dbdd9abf5670a388751ccdbfc6477d90f3151a65e7816119b4caede5da2cd944842aa423898daa4246f1e2e820b17f7e2162ee2d998b11c6999af9e923079a8826f7e52f43adfc74227126383f8bcdca7ab34fcae4b00000000000000000000000000000", @ANYRES16=r1, @ANYBLOB="250200000000000000000100000008000100", @ANYRES32=r2, @ANYBLOB="ac00020038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000008000300030000000800040000000000"], 0xc8}}, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x100, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f0000000280)={0x8001, 0x1, 'client0\x00', 0x1, "52d3503110cee51e", "a694cf9e0e65e799c57c4e7e67cdea22011a4f79ba97f875ec6ecb56144b8302", 0x5391}) 05:58:27 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x20001, 0x0) tee(r0, 0xffffffffffffffff, 0x9, 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="73656375728c74792e2f6465762f76736f636b00"], &(0x7f0000000080)='/dev/vsock\x00', 0xb, 0x1) 05:58:27 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000340)='/dev/admmidi#\x00', 0x3a, 0x22000) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x3, 0x800000800000001) r2 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x3ff, 0x400000) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) r3 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x401, 0x20200) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0xfffffffffffffff8, 0x44300) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x2, 0x8000, 0x6, 0xfffffffffffeffff, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000300)={r5, 0xffff, 0x7f, 0x9}, &(0x7f0000000240)=0x10) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000200)={0x3, 0x578, 0x3, 0x4, 0xed, 0x6, 0x2, 0x1000, 0x3, 0xffffffffffffffff}) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x100, 0x0) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) 05:58:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$inet(0x10, 0x3, 0xc) fstat(r0, &(0x7f0000000080)) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000030207031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) [ 217.589644] 9pnet: Insufficient options for proto=fd [ 217.608922] f2fs_msg: 80 callbacks suppressed [ 217.608936] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 217.620650] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 05:58:27 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@random={'security.', '\a\x00'}, &(0x7f0000000140)='\x00', 0x1, 0x1) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3}, 0x4}, 0xe) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@local}}, &(0x7f00000002c0)=0xe8) r2 = add_key(&(0x7f0000000300)='asymmetric\x00', &(0x7f0000000340)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000380)="2426cf165ae7aa1783ec4e27237fabfe1ec1a1b3edd20b851257f9b7acae2dde4651b2d5cb366d909e372edabd7a17445992538f7de6c2769ec5af9e0e6cc9be03c3481fa764", 0x46, 0xfffffffffffffffd) keyctl$get_persistent(0x16, r1, r2) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000180)=0xf133) prctl$getreaper(0x29, &(0x7f0000000080)) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {}, 0x4, 0x80000001}, 0xe) 05:58:27 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid'}}, {@noextend='noextend'}, {@access_client='access=client'}, {@cache_loose='cache=loose'}, {@uname={'uname', 0x3d, 'vboxn\x00t1(}%$'}}, {@version_u='version=9p2000.u'}, {@cache_mmap='cache=mmap'}]}}) [ 217.637927] attempt to access beyond end of device [ 217.643001] loop4: rw=12288, want=8200, limit=20 [ 217.648703] F2FS-fs (loop4): invalid crc value [ 217.659123] attempt to access beyond end of device [ 217.664117] loop4: rw=12288, want=12296, limit=20 [ 217.669264] F2FS-fs (loop4): invalid crc value [ 217.674244] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 217.680817] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 05:58:27 executing program 7: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x6, 0x30, 0x2, 0x3ff}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000005c0)=ANY=[@ANYRES32=r1, @ANYBLOB="bc00000098d744b460be238466167f1f3532b774655a7574d0c52ae225512fdd3f56305b7e19c6997f7a1ed7bde9754ae928349be40f3e11b8f437c3e1193d6a52294776f6f2eb43ab4abe209d2c83720f551e7bc3f20109afa452c70ad835906821f5b9164b96ef82a0bb8345cc09cc58d1a16bf236393a1482626b51e5a453b1012d5772f449e953156fa6e153508d4ca4a3f3e71b35bcbc94dc9316fdef6e596828fe119c345f400645e172bc1ac09ddd6a081a03ef801b41ed5f58045aa3"], &(0x7f0000000140)=0xc4) r2 = socket(0x11, 0x3, 0x0) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) recvfrom$packet(r2, &(0x7f00000004c0)=""/233, 0xe9, 0x0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x703000) ioctl$sock_bt(r2, 0x8906, &(0x7f0000000000)) r3 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)="e87356c57aeab52e59a22b3f2186a92acbe65091b69f23bb5038e79d531dc105d866df38b2edc5913d89087cce8a13722ad506efc1148a495717f412d05b173cff7490057fa4390000594e05913a06c5ad93e634b3c70e1983c8de08b91142fd288a610d94625d75064f3c1cf6e61490c51b5ed75a8d29c76d1c58d648fe9fdda1b8c9a6994923d5a35ae8fda31ce58e32d9443a44467ca5378f780cbbf73562bc4b97755434b4d56e04e8ae2657de2357ab7cc46a17d68ff4158055ccde7ee7225c1dcbc4320f7da702a50d648366a32d07b42a7052b9fdddc5b60f1d5542fbc974b140e0f9def97744fd29c297791ce5604b26803708c3e027fd8afd0470c54fb3a4bfc7fa53aba2082f3a8aff8d8b7849a8afdad00500bbca1c6121d5f07b185e2815fc67603498b04d043c23810e060c1735076d2d871ff975f924de98140abff62ad2c6b9e0505ee46a4b5d2fb5ae96cbc80512fe874d4ef125e24968d5c89e8e03826b0588d5c8cc188fed417f323467a37e5615b618821bd539c7f75e3353a27a6a2b67819831ecc21893b360ae5adf427eb9f55b1ebecbe60f1ce864bdeb172a62d2031ba4065feba23a540b78692975ef883ab2370d5b751b5c62f9e007", 0xffffffffffffff9c}, 0xe4) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r4, 0x4008ae48, &(0x7f0000000080)) sendto$inet6(r3, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x3, @loopback}, 0xfc8f) 05:58:27 executing program 6: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x101400, 0x0) sendmsg$nl_generic(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40048020}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x108, 0x3a, 0x4, 0x70bd26, 0x25dfdbff, {0x1b}, [@generic="a79eb3a45e1b991da75d3f09d1e91b4ebe20fa27b85e189b56a8b4be0ca1bbe270620398c364b077279d61ed9096d098939ffd8ee1e00b0e910d6c89468d9c1c33e4e69124e8a71b05fac9dba75d8cecca8e96a1606f75e932bcf7483a6cd64f3d932d383a47c41a230153e83674c66a31e8fb10b852fa04857b13e3dee54958aaecf40e0ab7a4217bc1889f403b1e4b9a61fe32d25cb82ab47f36e411e951f4f68c028b345be50c80a62898b22863505f291efd3af8cfc902a40f4848a63f423f1cb0581e2d4463d69240d591a63dfbfbab3152484d68aeeb40ce734b589ca6b030b7e0d80f4772eb4fa87e8a68e68def"]}, 0x108}, 0x1, 0x0, 0x0, 0x800}, 0x24000000) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_ifreq(r1, 0x893e, &(0x7f0000000000)={'bpq0\x00', @ifru_names='veth0_to_team\x00'}) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020d0000fdffffffffffffff000000000400040000000000000000000000000000000000000000000000000000000000080012000000030000000000000000000600000000000000000000000000000000000000000000000000000000000000ff02000000000000000000000000000105000500000000000a0000000000000000000000000000000000ffffac141400000000000000000005000600000000000a00000000000000fe8000000000000000000000000000ff0000000000000000e2f19f5f15d06ed75b9f6bf45839aab6cfa7cd1471d71d0cca6d9878209fef7590b1fddc316daa6756fb24cb77b6ed7816ba4dde6674fe45d0de11170423e1be9da1f9764cd236e1676d632120c58aebcded0bf65ba7084ea3ba39b0488f6c00fef8bcbcca352d4da70f97a1c9b01d15defa8f890c0813b6349050282cac88d3d69e0c800295616304"], 0xc0}}, 0x0) [ 217.687916] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 217.696340] attempt to access beyond end of device [ 217.701397] loop4: rw=12288, want=8200, limit=20 [ 217.706664] F2FS-fs (loop4): invalid crc value [ 217.712150] attempt to access beyond end of device [ 217.717139] loop4: rw=12288, want=12296, limit=20 [ 217.722364] F2FS-fs (loop4): invalid crc value [ 217.727026] F2FS-fs (loop4): Failed to get valid F2FS checkpoint 05:58:27 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x4000000000000, 0x0, 0x6, 0x0, 0x80000000, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0xbe9, 0x0, 0x1, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0xa, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) [ 217.751408] attempt to access beyond end of device [ 217.756452] loop4: rw=12288, want=8200, limit=20 [ 217.766811] attempt to access beyond end of device [ 217.771857] loop4: rw=12288, want=12296, limit=20 05:58:27 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = memfd_create(&(0x7f0000000000)='trusted$\x00', 0x3) openat(r2, &(0x7f00000000c0)='./file0\x00', 0x101000, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000080c0)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20007f00], 0x0, &(0x7f0000007ec0), &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x2cf) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20000) [ 217.820156] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. [ 217.846902] attempt to access beyond end of device [ 217.851997] loop4: rw=12288, want=8200, limit=20 05:58:27 executing program 6: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000180)={0x0, 0xc4}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r1, 0xebc}, &(0x7f0000000140)=0x8) r2 = syz_open_dev$sndctrl(&(0x7f0000007fed)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r2, 0x40045542, &(0x7f0000004000)={0x10001}) r3 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x200, 0x0) fcntl$notify(r3, 0x402, 0x3) 05:58:27 executing program 1: r0 = socket$inet6(0xa, 0x80806, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc80700145f8f764070") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x13, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000280), 0x4) 05:58:27 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x6000, 0x106001, 0x0, 0x6c98, 0x4, 0x9, 0x3, 0x1, 0x7, 0x7, 0x3, 0xfffffffffffeffff}, {0x10d000, 0x10000, 0xf, 0x101, 0x40, 0x4, 0xfff, 0xffffffffffffffff, 0x1000, 0x80000001, 0x2bf, 0x2}, {0x14000, 0x10002, 0x0, 0x80, 0x0, 0x5ebb, 0x6, 0x2, 0x3ff, 0x3ff, 0x3, 0x80000001}, {0x10d001, 0x0, 0xb, 0x5da, 0xa, 0x83a7, 0x5, 0x100000001, 0x1000, 0xaf9, 0x7fff, 0x6}, {0x4, 0x3000, 0xf, 0xb4, 0xff, 0x3, 0x1a07, 0x45, 0x2, 0x3, 0x1ff, 0x9}, {0x0, 0x100000, 0x0, 0x4, 0x2, 0x4, 0x101, 0x7, 0xffffffffffff204b, 0x7fffffff, 0x1, 0x1}, {0x1, 0x1000, 0xf, 0x9, 0x3, 0x3ff, 0x1, 0x7f, 0xff, 0x80, 0xf6ae, 0x100000000}, {0x2, 0x100000, 0xe, 0xffffffffffff8001, 0xffffffff, 0x7d3bef45, 0x7, 0x2, 0x800, 0x0, 0x8, 0x7fffffff}, {0x10f002, 0xf005}, {0x0, 0x6000}, 0x80010000, 0x0, 0x5c6afdfcc35f9f72, 0x420010, 0xf, 0x6c00, 0x7000, [0x9, 0x9, 0x9, 0x4]}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'bridge_slave_0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='H\x00\x00\x00\x00\x00\v\x00']}) close(r2) close(r1) 05:58:27 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000040)="6632667304", &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)) 05:58:27 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid'}}, {@noextend='noextend'}, {@access_client='access=client'}, {@cache_loose='cache=loose'}, {@uname={'uname', 0x3d, 'vboxn\x00t1(}%$'}}, {@version_u='version=9p2000.u'}, {@cache_mmap='cache=mmap'}]}}) [ 217.880549] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. [ 217.889160] attempt to access beyond end of device [ 217.889175] loop4: rw=12288, want=12296, limit=20 05:58:27 executing program 3: pipe(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) r2 = dup3(r0, r1, 0x0) bind$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x2710, @hyper}, 0x10) [ 217.958514] kernel msg: ebtables bug: please report to author: Wrong len argument [ 217.993304] kernel msg: ebtables bug: please report to author: Wrong len argument 05:58:27 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) keyctl$read(0xb, r1, &(0x7f00000002c0)=""/100, 0x64) ioctl$TCFLSH(r0, 0x40045431, 0xa07000) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000240)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.memory_migrate\x00', 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2b, &(0x7f00000000c0)={0x1000, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e23, @local}}}, 0x108) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000200)) 05:58:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="4165a1ab415b7ac7", 0x15b) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x10280) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000080)={0x40fdb7f5, 0x6c1}) r3 = accept$alg(r1, 0x0, 0x0) sendmmsg(r3, &(0x7f0000007b40)=[{{&(0x7f0000000180)=@l2, 0x141}}, {{&(0x7f0000007500)=@hci, 0x80, &(0x7f0000007680), 0x141, &(0x7f00000076c0), 0x10}}], 0x4000000000003d5, 0x0) 05:58:27 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000e42000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8, 0x80080) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000040)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e41ff7)={0x0, &(0x7f0000e41ff0)}, 0x10) 05:58:27 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x0, 0xa000) r1 = dup(r0) openat$cgroup_ro(r1, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) 05:58:27 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[], 0x0) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid'}}, {@noextend='noextend'}, {@access_client='access=client'}, {@cache_loose='cache=loose'}, {@uname={'uname', 0x3d, 'vboxn\x00t1(}%$'}}, {@version_u='version=9p2000.u'}, {@cache_mmap='cache=mmap'}]}}) 05:58:27 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x80, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0xa00, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000200)=r1) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000600)=0x1, 0x4) 05:58:28 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid'}}, {@noextend='noextend'}, {@access_client='access=client'}, {@cache_loose='cache=loose'}, {@uname={'uname', 0x3d, 'vboxn\x00t1(}%$'}}, {@version_u='version=9p2000.u'}, {@cache_mmap='cache=mmap'}]}}) 05:58:28 executing program 7: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x2e) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000080)=0x10001) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000300000000000019078ac1414bbac1414001208907800000000450000400000000000000000ac7014aaac1414007fb42dae9ca59bf6ee41d0199079934a7cbb255e92cf469bd9649c76c3dd662629749362696e7c3e6fe1b04f763d62c261a3dc780b460a5bcbd0d2c47744312df4122c71130609169bc84e6e0794349ab1dd8eefab3222266f6d37e96d"], &(0x7f0000000000)={0xfffffffffffffffd, 0x1}) 05:58:28 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000040)="6632667304", &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)) 05:58:28 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7, 0x20000) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000080)={0x88, @multicast1, 0x404e21, 0x2, 'none\x00', 0x10, 0xfffffffffffffffa, 0x1}, 0x2c) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000001c0), 0x2cb) 05:58:28 executing program 6: r0 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x6, 0x209e20, 0x8000000001, 0x1}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r1, &(0x7f0000000000), &(0x7f00000000c0)=""/29}, 0x18) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x8c000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180)={0xffffffffffffffff}, 0x111, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000200)={0x5, 0x10, 0xfa00, {&(0x7f00000002c0), r3}}, 0x18) r4 = socket$inet(0x10, 0x800000000007, 0x0) fcntl$setstatus(r4, 0x4, 0x2000) sendmsg(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f00000004c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000240), 0x2, {0xa, 0x4e24, 0x1, @local}, r3}}, 0x38) 05:58:28 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x4000) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) r5 = syz_open_procfs(r2, &(0x7f00000000c0)='attr/keycreate\x00') ioctl$KDGKBSENT(r5, 0x4b48, &(0x7f0000000040)={0x7fffffff, 0x6, 0x1f}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r6, 0x1) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$KDGKBSENT(r5, 0x4b48, &(0x7f0000000000)={0x0, 0x3, 0x3}) getdents64(r5, &(0x7f0000000140)=""/102, 0x66) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @dev}], 0x1c) close(r6) close(r1) 05:58:28 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc80700145f8f764070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={"6c6f3a05e6ff0100"}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x786, @dev={0xfe, 0x80, [], 0x1b}, 0x9}, 0x1c) 05:58:28 executing program 2: syz_emit_ethernet(0x0, &(0x7f0000000100)=ANY=[], 0x0) 05:58:28 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000269fb8)={0x1, 0x3, &(0x7f00000affc8), &(0x7f000039cff6)="7379e66b616c6c657200", 0x8, 0x1000, &(0x7f000039c000)=""/4096}, 0xfffffffffffffd08) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x80, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', r1}, 0x10) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x6) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x0, 0x2, 0xffffffff, 0x4, 0x6}, &(0x7f00000002c0)=0x38) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={r2}, &(0x7f0000000240)=0x8) bind$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0x7, {0x6, 0x1, 0x2, 0xf76a, 0x6, 0x7}, 0x2, 0x4}, 0xe) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000300)={@remote, @local}, &(0x7f0000000340)=0xc) 05:58:28 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x15) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid'}}, {@noextend='noextend'}, {@access_client='access=client'}, {@cache_loose='cache=loose'}, {@uname={'uname', 0x3d, 'vboxn\x00t1(}%$'}}, {@version_u='version=9p2000.u'}, {@cache_mmap='cache=mmap'}]}}) 05:58:28 executing program 5: r0 = socket$inet6(0xa, 0x1000000000006, 0x0) ioctl(r0, 0x2000000007, &(0x7f0000000100)="0a5cc80700315f85714070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)="504c20004cf7d12af11ce92537b5e3191e66de5d4ec18e4c2df01484a86d77842f624946eae310794c8c96ff1466232e25951139bda5d2990e523f8ec3080ffc1224d8dc4c84a9c8e8ab31576806715523fa749e8615c61049b8b1be6aa7740702cc5add", 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) 05:58:28 executing program 6: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x9, 0x8, &(0x7f00000005c0)=[{&(0x7f0000000080)="44237302d78a160c3d5be8f88e08a7d146ef57bc7527a68daae9a324429e9fec5f7481e93305656d3362b87d7416d79222604fd7366d43ebe5baf9709cfa34afcdca1a8b3eedb1ceec19850d66f59145680557a99a09a8a28c5ce55bc1e15e0106a21775fba1017fe30f2d65cada7a187024d0012fb3bab66b6c17c854c3a0e3713b67249f7d5cf046efa2dcac662ab58511092c4f6a55298efef1b340df10e99c1697b048aa7df649a12611b3419edecaee062f0620dc2e63978e6b9f9792938f8a85c26e1ac535d3d77f97e93e83cf4a9140c0810f43a02c9b8325ee08ed246218b593cc1e606e91d743c088eb38e7a747d137c7bcba9154e5", 0xfa, 0x5}, {&(0x7f0000000180)="57f6e374aa67ae400bb062fc606ce8d0236220aefaa75318b04da4309fcd4ae6eef74776e9ba8a7c20ebbe34ca7f999b9791c7c9379bb351ad01d603d510bd87c2da4028e67de02e3a8e3983d9828823937e7978f5c1573617d8278b1fd7d77c7e876c7066bcac43ab0dafaa77ee23bc632fa9431e42be361f77e429e070af6c697d767f", 0x84, 0x2}, {&(0x7f0000000240)="3895ed14d1afa209296206ed671fbed5e85d007fe0", 0x15, 0xfffffffffffffffe}, {&(0x7f00000002c0)="c588c6c0a781209b47ff5cb3f6a0941f304d1bdd81e53d0c91c88712bfa14e65e49487204a962a13a5ca62f0c551a737c453e91fed15290b23974a96009f081990d508994ec619a4c01d2aef78b7f6be6e37b9fb2cf7729b27904c75de7d2ac4645ad685188f8dca7c67d0de1d391fbb3932d76d26da14fdce7e002b9135ec1658dcb8f75663c518436e8d780cc1b5dd8ada1fa1378a2118c5e33afcfccb591371623be68c061864dbb1df0229c2caa6e268f884c6411b4a7dcd47078051020bce95", 0xc2, 0x8}, {&(0x7f00000003c0)="a81e6bd643e2970c49572c4f32f14916db8331e419dc4884aff199d7f45840b802d2ccb954aced4f934401a885d59022c39e7abd95674fb8bb533943e24f5291c549628dc7ea312c6452e4ab1b68627f9d4da17328f142959e145c48434bc0b72402ec5714ef54091c4f019fe89e59cbf71606c91564cf03280b438bfc9a7b54c1a9a854c2500a5e431ed3f94d8fa62a8d5d33c19fc06174b5b8d9e00de038107af17e52a4e49d07f3c8f164f1b8261f5e0cf156a08c54e5f00d0a5605101898cc190f40ec13", 0xc6, 0x443}, {&(0x7f00000004c0)="b23ca687420cd9e0154c1bb16261bf7559006d2b0c34c48714a4c5470a30008822e832a7c277d32979e7ee185a8026ae031aa12f67b57bf856247ee337307083dfad9715b34c2d9d22896a42eb84fd71e3b27214f8ae5077fcd65df36fdbca69fd40c5ac0ce13b2acd7eced2", 0x6c, 0x5}, {&(0x7f0000000540)="571df4358a29a7efd32c60cf02262a0e43d0cffd2da7dd6f106093569257863b007c4ab7473400ccbe8b417224bc70248e7f63d72097b250cb653a34d6b22a7a9a202f2b1c51", 0x46, 0x6363}, {&(0x7f0000000740)="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", 0x1000, 0x4}], 0x2000000, &(0x7f0000000680)={[{@grpquota='grpquota'}, {@qnoenforce='qnoenforce'}, {@filestreams='filestreams'}, {@pqnoenforce='pqnoenforce'}, {@discard='discard'}, {@attr2='attr2'}, {@sysvgroups='sysvgroups'}, {@nogrpid='nogrpid'}]}) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") seccomp(0x2, 0x0, &(0x7f0000000700)={0x0, &(0x7f00000006c0)}) 05:58:28 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000a5f000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000010000034d564b0000000501"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:58:28 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)) 05:58:28 executing program 1: syz_emit_ethernet(0xe, &(0x7f0000000100)={@random="f5a94236a0dc", @local, [], {@generic={0x8864}}}, &(0x7f00000001c0)) 05:58:28 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0xffffffffffffffcb, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000040)={0x32, 0x6, 0x0, {0x0, 0x0, 0x9, 0x0, '-procppp1'}}, 0x32) 05:58:28 executing program 3: socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$packet_int(r0, 0x107, 0x1b, &(0x7f0000000100), &(0x7f0000000240)=0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000000c0)) r3 = socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffffc) ioctl(r3, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f00000001c0)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'bond0\x00'}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 05:58:28 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid'}}, {@noextend='noextend'}, {@access_client='access=client'}, {@cache_loose='cache=loose'}, {@uname={'uname', 0x3d, 'vboxn\x00t1(}%$'}}, {@version_u='version=9p2000.u'}, {@cache_mmap='cache=mmap'}]}}) 05:58:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000280)={0x14, 0x1d, 0x7ffff, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 05:58:28 executing program 1: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @mcast1}}]}, 0x110) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000000)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) socket$inet_dccp(0x2, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x1, @loopback, 0x800}, 0x1c) [ 218.829217] attempt to access beyond end of device [ 218.834288] loop4: rw=12288, want=8200, limit=20 [ 218.854994] XFS (loop6): Invalid superblock magic number [ 218.879241] attempt to access beyond end of device [ 218.884250] loop4: rw=12288, want=12296, limit=20 05:58:28 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f000055b000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r0, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200000, 0x0) accept$packet(r2, 0x0, &(0x7f0000000040)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvfrom$unix(r0, &(0x7f0000001640)=""/192, 0xc0, 0x0, &(0x7f0000001700)=@file={0x0, './file0\x00'}, 0x6e) [ 218.934474] attempt to access beyond end of device [ 218.939504] loop4: rw=12288, want=8200, limit=20 05:58:28 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000140)=0x5) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)="ed008c") ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000001000)=""/246) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000000080)={0x9897, 0x2, 0x3, 0x4ea}) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x20000, 0x0) ioctl$EVIOCGREP(r2, 0x40047451, &(0x7f0000000240)=""/174) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000000)={{0x2, 0x4e21, @multicast2}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x5c, {0x2, 0x4e24, @local}, 'tunl0\x00'}) 05:58:28 executing program 6: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x9, 0x8, &(0x7f00000005c0)=[{&(0x7f0000000080)="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", 0xfa, 0x5}, {&(0x7f0000000180)="57f6e374aa67ae400bb062fc606ce8d0236220aefaa75318b04da4309fcd4ae6eef74776e9ba8a7c20ebbe34ca7f999b9791c7c9379bb351ad01d603d510bd87c2da4028e67de02e3a8e3983d9828823937e7978f5c1573617d8278b1fd7d77c7e876c7066bcac43ab0dafaa77ee23bc632fa9431e42be361f77e429e070af6c697d767f", 0x84, 0x2}, {&(0x7f0000000240)="3895ed14d1afa209296206ed671fbed5e85d007fe0", 0x15, 0xfffffffffffffffe}, {&(0x7f00000002c0)="c588c6c0a781209b47ff5cb3f6a0941f304d1bdd81e53d0c91c88712bfa14e65e49487204a962a13a5ca62f0c551a737c453e91fed15290b23974a96009f081990d508994ec619a4c01d2aef78b7f6be6e37b9fb2cf7729b27904c75de7d2ac4645ad685188f8dca7c67d0de1d391fbb3932d76d26da14fdce7e002b9135ec1658dcb8f75663c518436e8d780cc1b5dd8ada1fa1378a2118c5e33afcfccb591371623be68c061864dbb1df0229c2caa6e268f884c6411b4a7dcd47078051020bce95", 0xc2, 0x8}, {&(0x7f00000003c0)="a81e6bd643e2970c49572c4f32f14916db8331e419dc4884aff199d7f45840b802d2ccb954aced4f934401a885d59022c39e7abd95674fb8bb533943e24f5291c549628dc7ea312c6452e4ab1b68627f9d4da17328f142959e145c48434bc0b72402ec5714ef54091c4f019fe89e59cbf71606c91564cf03280b438bfc9a7b54c1a9a854c2500a5e431ed3f94d8fa62a8d5d33c19fc06174b5b8d9e00de038107af17e52a4e49d07f3c8f164f1b8261f5e0cf156a08c54e5f00d0a5605101898cc190f40ec13", 0xc6, 0x443}, {&(0x7f00000004c0)="b23ca687420cd9e0154c1bb16261bf7559006d2b0c34c48714a4c5470a30008822e832a7c277d32979e7ee185a8026ae031aa12f67b57bf856247ee337307083dfad9715b34c2d9d22896a42eb84fd71e3b27214f8ae5077fcd65df36fdbca69fd40c5ac0ce13b2acd7eced2", 0x6c, 0x5}, {&(0x7f0000000540)="571df4358a29a7efd32c60cf02262a0e43d0cffd2da7dd6f106093569257863b007c4ab7473400ccbe8b417224bc70248e7f63d72097b250cb653a34d6b22a7a9a202f2b1c51", 0x46, 0x6363}, {&(0x7f0000000740)="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", 0x1000, 0x4}], 0x2000000, &(0x7f0000000680)={[{@grpquota='grpquota'}, {@qnoenforce='qnoenforce'}, {@filestreams='filestreams'}, {@pqnoenforce='pqnoenforce'}, {@discard='discard'}, {@attr2='attr2'}, {@sysvgroups='sysvgroups'}, {@nogrpid='nogrpid'}]}) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") seccomp(0x2, 0x0, &(0x7f0000000700)={0x0, &(0x7f00000006c0)}) 05:58:28 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x25) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid'}}, {@noextend='noextend'}, {@access_client='access=client'}, {@cache_loose='cache=loose'}, {@uname={'uname', 0x3d, 'vboxn\x00t1(}%$'}}, {@version_u='version=9p2000.u'}, {@cache_mmap='cache=mmap'}]}}) 05:58:28 executing program 5: r0 = userfaultfd(0x800) fcntl$getflags(r0, 0x40b) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100), 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x600000, 0x0) write$cgroup_type(r2, &(0x7f00000000c0)='threaded\x00', 0x9) 05:58:28 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = fcntl$getown(r0, 0x9) syz_open_procfs(r1, &(0x7f0000000100)='net/udplite\x00') ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000022000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f00000002c0)="48b801000000000000000f23c00f21f835020004000f23f8b9c70200000f32f0460fc78868cc0000b8010000000f01c166b8f8000f00d866bad00466b8c26266efc441adfedcc4c19855a804000000460f1a7d046436640f07", 0x59}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000043) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000000)=0x5) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000140)={0x5071, 0x3, 0x4, 0x1, 0x1, [{0x5, 0xbd7, 0x101, 0x0, 0x0, 0x80}]}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/keycreate\x00') write$P9_RLOCK(r5, &(0x7f00000000c0)={0x8, 0x35, 0x2, 0x3}, 0x8) [ 218.987109] attempt to access beyond end of device [ 218.992183] loop4: rw=12288, want=12296, limit=20 [ 219.030442] attempt to access beyond end of device [ 219.035441] loop4: rw=12288, want=8200, limit=20 05:58:28 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000040)={0x3, 0x0, [{0x80000001, 0x1, 0x4, 0xfc6b, 0x0, 0x2}, {0x0, 0x0, 0x1, 0x3, 0x8, 0x9, 0x8}, {0xf, 0x10001, 0x4, 0x7f, 0x0, 0x9ea, 0xf3}]}) ioctl$KVM_NMI(r3, 0xae9a) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000500)={0x0, 0xb15, "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"}, &(0x7f0000001540)=0xb1d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000180)="baf80c66b882c8dc8166efbafc0cb000ee0f186de666b8f02000000f23d00f21f86635200000080f23f80f01d181c481680f01f0bad104b83f00ef660faebc0100dadcd282e8d4"}], 0x1, 0x0, &(0x7f00000000c0), 0x1000000000000005) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 219.099989] attempt to access beyond end of device [ 219.105035] loop4: rw=12288, want=12296, limit=20 05:58:28 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) mmap$binder(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x100000002132, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:58:28 executing program 2: r0 = open(&(0x7f0000000000)='./file0\x00', 0x2402, 0x20) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x807, 0x5) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0xff}, 0x1c) [ 219.169210] attempt to access beyond end of device [ 219.174226] loop4: rw=12288, want=8200, limit=20 [ 219.179754] XFS (loop6): Invalid superblock magic number [ 219.217857] attempt to access beyond end of device [ 219.222904] loop4: rw=12288, want=12296, limit=20 [ 219.237605] *** Guest State *** [ 219.240951] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 219.249932] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 219.258810] CR3 = 0x0000000000000000 05:58:28 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)) 05:58:28 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x28) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid'}}, {@noextend='noextend'}, {@access_client='access=client'}, {@cache_loose='cache=loose'}, {@uname={'uname', 0x3d, 'vboxn\x00t1(}%$'}}, {@version_u='version=9p2000.u'}, {@cache_mmap='cache=mmap'}]}}) 05:58:28 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r1 = dup(r0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x3ff) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) getgid() fcntl$getownex(r2, 0x10, &(0x7f0000000100)={0x0, 0x0}) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0x0) 05:58:28 executing program 6: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x9, 0x8, &(0x7f00000005c0)=[{&(0x7f0000000080)="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", 0xfa, 0x5}, {&(0x7f0000000180)="57f6e374aa67ae400bb062fc606ce8d0236220aefaa75318b04da4309fcd4ae6eef74776e9ba8a7c20ebbe34ca7f999b9791c7c9379bb351ad01d603d510bd87c2da4028e67de02e3a8e3983d9828823937e7978f5c1573617d8278b1fd7d77c7e876c7066bcac43ab0dafaa77ee23bc632fa9431e42be361f77e429e070af6c697d767f", 0x84, 0x2}, {&(0x7f0000000240)="3895ed14d1afa209296206ed671fbed5e85d007fe0", 0x15, 0xfffffffffffffffe}, {&(0x7f00000002c0)="c588c6c0a781209b47ff5cb3f6a0941f304d1bdd81e53d0c91c88712bfa14e65e49487204a962a13a5ca62f0c551a737c453e91fed15290b23974a96009f081990d508994ec619a4c01d2aef78b7f6be6e37b9fb2cf7729b27904c75de7d2ac4645ad685188f8dca7c67d0de1d391fbb3932d76d26da14fdce7e002b9135ec1658dcb8f75663c518436e8d780cc1b5dd8ada1fa1378a2118c5e33afcfccb591371623be68c061864dbb1df0229c2caa6e268f884c6411b4a7dcd47078051020bce95", 0xc2, 0x8}, {&(0x7f00000003c0)="a81e6bd643e2970c49572c4f32f14916db8331e419dc4884aff199d7f45840b802d2ccb954aced4f934401a885d59022c39e7abd95674fb8bb533943e24f5291c549628dc7ea312c6452e4ab1b68627f9d4da17328f142959e145c48434bc0b72402ec5714ef54091c4f019fe89e59cbf71606c91564cf03280b438bfc9a7b54c1a9a854c2500a5e431ed3f94d8fa62a8d5d33c19fc06174b5b8d9e00de038107af17e52a4e49d07f3c8f164f1b8261f5e0cf156a08c54e5f00d0a5605101898cc190f40ec13", 0xc6, 0x443}, {&(0x7f00000004c0)="b23ca687420cd9e0154c1bb16261bf7559006d2b0c34c48714a4c5470a30008822e832a7c277d32979e7ee185a8026ae031aa12f67b57bf856247ee337307083dfad9715b34c2d9d22896a42eb84fd71e3b27214f8ae5077fcd65df36fdbca69fd40c5ac0ce13b2acd7eced2", 0x6c, 0x5}, {&(0x7f0000000540)="571df4358a29a7efd32c60cf02262a0e43d0cffd2da7dd6f106093569257863b007c4ab7473400ccbe8b417224bc70248e7f63d72097b250cb653a34d6b22a7a9a202f2b1c51", 0x46, 0x6363}, {&(0x7f0000000740)="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", 0x1000, 0x4}], 0x2000000, &(0x7f0000000680)={[{@grpquota='grpquota'}, {@qnoenforce='qnoenforce'}, {@filestreams='filestreams'}, {@pqnoenforce='pqnoenforce'}, {@discard='discard'}, {@attr2='attr2'}, {@sysvgroups='sysvgroups'}, {@nogrpid='nogrpid'}]}) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") seccomp(0x2, 0x0, &(0x7f0000000700)={0x0, &(0x7f00000006c0)}) [ 219.262577] RSP = 0x0000000000000f80 RIP = 0x0000000000000010 [ 219.268571] RFLAGS=0x00000283 DR7 = 0x0000000000000400 [ 219.274597] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 219.281322] CS: sel=0x0000, attr=0x0009b, limit=0x0000ffff, base=0x0000000000000000 [ 219.289350] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 219.297393] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 219.305407] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 219.313617] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 219.321703] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 219.329705] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 219.337695] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 219.345678] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 219.353664] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 219.361650] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 219.368090] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 219.375564] Interruptibility = 00000001 ActivityState = 00000000 [ 219.381796] *** Host State *** [ 219.384993] RIP = 0xffffffff811f4764 RSP = 0xffff880190a2f350 [ 219.390979] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 219.397394] FSBase=00007fb88389b700 GSBase=ffff8801db000000 TRBase=fffffe0000003000 [ 219.405229] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 219.411123] CR0=0000000080050033 CR3=000000019ae4c000 CR4=00000000001426f0 [ 219.418144] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff86c01380 [ 219.424818] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 219.430877] *** Control State *** [ 219.434346] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 219.441031] EntryControls=0000d1ff ExitControls=0023efff [ 219.446498] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 219.453435] VMEntry: intr_info=80000202 errcode=00000000 ilen=00000000 [ 219.460104] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 05:58:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000100876b580e905d98f30000ffac59e90d1d7862aff81952fa29fa724618700b98160d51b544423244f5259d1978817ff34f4c557be20efc3cb219edb0873b27f901b17859d3773cdc139062f7d0a8e98da15cb78ed7"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f]}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00000000c0)={0x2710, 0x0, &(0x7f0000ffa000/0x4000)=nil}) 05:58:28 executing program 5: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x3a, 0x1, &(0x7f0000000280), &(0x7f0000000000)=0xfffffffffffffd2d) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x88) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000480)=""/155) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f00000002c0)) getpeername$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x1c) getpeername$netlink(r2, &(0x7f0000000140), &(0x7f0000000240)=0xc) tee(r0, r0, 0x1, 0x8) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f0000000100)=0x2) [ 219.466686] reason=80000021 qualification=0000000000000003 [ 219.473004] IDTVectoring: info=00000000 errcode=00000000 [ 219.478454] TSC Offset = 0xffffff88fd9dc631 [ 219.482792] EPT pointer = 0x00000001cb9ba01e [ 219.498384] *** Guest State *** [ 219.501731] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 219.510680] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 219.519699] CR3 = 0x0000000000000000 [ 219.523485] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 219.529464] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 219.535446] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 219.542114] CS: sel=0x0000, attr=0x0009b, limit=0x0000ffff, base=0x0000000000000000 [ 219.550093] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 219.558074] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 219.566051] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 219.574025] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 219.582009] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 219.589992] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 219.598000] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 219.605990] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 219.613987] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 219.621971] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 219.628380] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 219.635840] Interruptibility = 00000001 ActivityState = 00000000 [ 219.642078] *** Host State *** [ 219.645275] RIP = 0xffffffff811f4764 RSP = 0xffff8801bd0df350 [ 219.651260] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 219.657676] FSBase=00007fb88387a700 GSBase=ffff8801db000000 TRBase=fffffe0000003000 [ 219.665478] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 219.671367] CR0=0000000080050033 CR3=000000019ae4c000 CR4=00000000001426f0 [ 219.678398] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff86c01380 [ 219.685061] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 219.691112] *** Control State *** [ 219.694570] PinBased=0000003f CPUBased=b5986dfe SecondaryExec=000000ca [ 219.701233] EntryControls=0000d1ff ExitControls=0023efff [ 219.706684] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 219.713609] VMEntry: intr_info=80000202 errcode=00000000 ilen=00000000 05:58:29 executing program 3: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @rand_addr=0x40000000}}) r1 = socket(0x10, 0x3, 0x3) getsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000180), &(0x7f0000000140)=0x4) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'ip6_vti0\x00', {0x2, 0x4e20}}) write(r1, &(0x7f0000000000)="2400000021002551071c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) 05:58:29 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000a93000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000a94000/0x1000)=nil, 0x1000, 0xe000, 0x3, &(0x7f0000b18000/0xe000)=nil) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='\x00') mlock2(&(0x7f0000b20000/0x2000)=nil, 0x2000, 0x1) [ 219.720274] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 219.726868] reason=80000021 qualification=0000000000000000 [ 219.733198] IDTVectoring: info=00000000 errcode=00000000 [ 219.738647] TSC Offset = 0xffffff88fd9dc631 [ 219.742971] EPT pointer = 0x00000001cb9ba01e 05:58:29 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) io_setup(0x8, &(0x7f0000000100)=0x0) r3 = socket$kcm(0x29, 0x5, 0x0) io_getevents(r2, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000000)={0x77359400}) sendmsg$nl_route(r3, &(0x7f0000000540)={&(0x7f0000000040), 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockname(r3, &(0x7f0000000080)=@generic, &(0x7f0000000140)=0x80) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140)}]) 05:58:29 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e'], 0x29) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid'}}, {@noextend='noextend'}, {@access_client='access=client'}, {@cache_loose='cache=loose'}, {@uname={'uname', 0x3d, 'vboxn\x00t1(}%$'}}, {@version_u='version=9p2000.u'}, {@cache_mmap='cache=mmap'}]}}) [ 219.892986] IPVS: ftp: loaded support on port[0] = 21 [ 219.902719] attempt to access beyond end of device [ 219.907807] loop4: rw=12288, want=8200, limit=20 05:58:29 executing program 1: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8927, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0000548000000000b62900000000399dd01201bc0000000000001041637f682a3ae186055fdc3d454d811ae288e193c59fcee3ab14f35e42e223d6f776"]}) close(r0) close(r1) 05:58:29 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 219.957445] attempt to access beyond end of device [ 219.962462] loop4: rw=12288, want=12296, limit=20 [ 219.972644] XFS (loop6): Invalid superblock magic number [ 219.988480] attempt to access beyond end of device [ 219.993851] loop4: rw=12288, want=8200, limit=20 05:58:29 executing program 6: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='.Ocgroup\x00', 0x200002, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000000), 0x4) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000008c0)=""/246) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'team_slave_1\x00', {0x2, 0x4e23}}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000003c0)=""/246) close(r1) 05:58:29 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00090000000000000000005d155fccb9bbd81b00000000000200000017000000000b5d4a89aea800006e6f646566766d6efd1482772d73656c696e75"], 0xc0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) getresgid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000200)) mount$9p_virtio(&(0x7f0000000040)='nodevvmnet1--selinuxem1', &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='9p\x00', 0x200040, &(0x7f0000000240)={'trans=virtio,', {[{@dfltgid={'dfltgid', 0x3d, r1}}, {@version_9p2000='version=9p2000'}]}}) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000380)) [ 220.041508] attempt to access beyond end of device [ 220.046540] loop4: rw=12288, want=12296, limit=20 05:58:29 executing program 2: utimensat(0xffffffffffffffff, &(0x7f0000c23000)='./file0\x00', &(0x7f0000864000)={{0x0, 0x2710}}, 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40000, 0x0) write$binfmt_misc(r0, &(0x7f0000000040)={'syz0', "9ce8f345bf9f6a253e9a9ea239877d5e7150a10ff98a802d88e8c3da2a598663e565fd5bc7c9785f9a44f1fa4c09c22847f6abfa5a97db3ec2b7c61defbb5d8f4a5efe72da8557f3"}, 0x4c) tee(r0, r0, 0xa, 0x8) 05:58:29 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid'}}, {@noextend='noextend'}, {@access_client='access=client'}, {@cache_loose='cache=loose'}, {@uname={'uname', 0x3d, 'vboxn\x00t1(}%$'}}, {@version_u='version=9p2000.u'}, {@cache_mmap='cache=mmap'}]}}) 05:58:29 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)) [ 220.109340] binder: 16807:16813 transaction failed 29189/-22, size 0-0 line 2852 [ 220.139632] binder_alloc: 16807: binder_alloc_buf, no vma [ 220.145364] binder: 16807:16817 transaction failed 29189/-3, size 0-0 line 2967 [ 220.153953] binder: BINDER_SET_CONTEXT_MGR already set 05:58:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000356000)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000280), 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x40, 0x0) accept4$alg(r1, 0x0, 0x0, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f0000000080)={0x0, 0x3, 0x7, &(0x7f0000000040)=0x2f9a}) 05:58:29 executing program 7: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2500, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) write$9p(r0, &(0x7f00000012c0)="1d385a6fbce2cfd5c37c10c44f08a87d4dddb125078ee5462c74527db9850ea942a0eeabb82a0ee29fc9a265620869dc3cd87453ebd4da86ea50eff758ba66f6ed8e53ac60bd79454894261ffc32fd0f0dc3e70ea89f559def1df3c74e6cba4e58a2bde912471df0545675072ae834f3a1ec0e8865b5d6f12061f0c6ffd7ac188db46b2c57eb2aa9629a92a22804557f29bd0667c4075f22edb2f2e89ae8346039b2a09ab472d75ef240bfa7fcbecdb9bb52d421e69c09bd659fab8655949d0c55198f85225986c81f9a2be6760db81cbdfa7fefc602", 0xd6) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x4, 0x2, 0x7ff, 0x3, 0x5, 0x1, 0xffffffff}, 0xfdda) r1 = semget(0x1, 0x3, 0x240) semctl$GETZCNT(r1, 0xfffffffffffffffe, 0xf, &(0x7f00000013c0)=""/4096) semctl$IPC_INFO(r1, 0x7, 0x3, &(0x7f00000011c0)=""/245) [ 220.174100] 9pnet_virtio: no channels available for device nodevvmnet1--selinuxem1 [ 220.182432] binder: undelivered TRANSACTION_ERROR: 29189 [ 220.194179] binder: 16807:16813 ioctl 40046207 0 returned -16 [ 220.195364] IPVS: ftp: loaded support on port[0] = 21 [ 220.209761] binder: undelivered TRANSACTION_ERROR: 29189 05:58:29 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) open_by_handle_at(r0, &(0x7f0000000000)={0x23, 0x9db8, "f6abddb389df64d5b6cd36c949a55ea437e2d46f4c44accd3df6db"}, 0x80) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) [ 220.232888] 9pnet_virtio: no channels available for device nodevvmnet1--selinuxem1 05:58:29 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x42801, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x7f) ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000100)={0x3, 0x0, [{}, {}, {}]}) write$vnet(r0, &(0x7f0000000140)={0x1, {&(0x7f0000000000)=""/53, 0x35, &(0x7f0000000040)=""/82}}, 0x68) write$FUSE_WRITE(r0, &(0x7f00000001c0)={0x18, 0x0, 0x6, {0xfffffffffffffc00}}, 0x18) close(r0) 05:58:29 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'tgr192\x00'}, 0x58) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0xa6a01, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000100), &(0x7f0000000180)=0x4) r2 = accept4(r0, 0x0, &(0x7f0000000040)=0xe8, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/xfrm_stat\x00') sendfile(r2, r3, &(0x7f00000002c0), 0x6) [ 220.335916] attempt to access beyond end of device [ 220.340951] loop4: rw=12288, want=8200, limit=20 [ 220.394195] attempt to access beyond end of device [ 220.399212] loop4: rw=12288, want=12296, limit=20 [ 220.427580] attempt to access beyond end of device [ 220.432604] loop4: rw=12288, want=8200, limit=20 [ 220.446885] attempt to access beyond end of device [ 220.451909] loop4: rw=12288, want=12296, limit=20 [ 220.473087] attempt to access beyond end of device [ 220.478197] loop4: rw=12288, want=8200, limit=20 [ 220.483209] attempt to access beyond end of device [ 220.488188] loop4: rw=12288, want=12296, limit=20 [ 220.493558] attempt to access beyond end of device [ 220.498574] loop4: rw=12288, want=8200, limit=20 [ 220.504915] attempt to access beyond end of device [ 220.509948] loop4: rw=12288, want=12296, limit=20 05:58:30 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r1, &(0x7f0000001480)=""/188, 0xbc, 0x2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x28, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f0000000140)={{r3, r4+30000000}}, &(0x7f0000000180)) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r0, &(0x7f000000d8c0)=[{{0x0, 0x0, &(0x7f00000018c0)}}], 0x1, 0x0) 05:58:30 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc80700145f8f764070") r1 = socket$unix(0x1, 0x6, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x40, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000002, 0x100010, r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r3, 0x0) accept$inet6(r3, &(0x7f0000000b00), &(0x7f0000000b40)=0x1c) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) getsockopt$nfc_llcp(r2, 0x118, 0x0, &(0x7f0000000040)=""/110, 0x6e) r4 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r4, 0x1000000000016) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) 05:58:30 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaa29ab0893fde86dd603f3a5400142f00fe8000000000000000000000000000bbff02000000000000000000000000000100006558", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800007e6dab16fb137fc918d793ccb961bbc0c4e4ee59aa06f2004a0a0e7add7ba570f8cb35d7d8b7015524d84a007f3a7c8a59ce1d6758536add5ad07a90a01f3d9aba5c504780a5dc01546267908fe7dd8792ac1bde4df61701718ef34b5d3fdc016fa7a52fcaaa803bd7803400ea37be52b2e15170aa89468c02b0ad58a5361b05b43e681444d6b50a79abddf7c4a43a861472eadded7085b2b5188913c502e80c211329f7defe7dbf505b49b775fa19c17684bb5c85e77dae8ac33e53df29ba7c985b5f2543109a"], &(0x7f00000004c0)={0x0, 0x4, [0x5, 0x6b8]}) 05:58:30 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid'}}, {@noextend='noextend'}, {@access_client='access=client'}, {@cache_loose='cache=loose'}, {@uname={'uname', 0x3d, 'vboxn\x00t1(}%$'}}, {@version_u='version=9p2000.u'}, {@cache_mmap='cache=mmap'}]}}) 05:58:30 executing program 2: r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000400), &(0x7f0000000440)=0xe, 0x80800) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000480), &(0x7f00000004c0)=0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001f00)={&(0x7f0000000200), 0xc, &(0x7f0000001ec0)={&(0x7f00000003c0)=@dellink={0x28, 0x11, 0x729, 0x0, 0x0, {}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}}, 0x0) 05:58:30 executing program 6: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f00000001c0)=""/184) fallocate(r0, 0x0, 0xdfa3, 0x5) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x2, 0xffffffffffffffff, 0x0, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast1}}}}, 0xa0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") fallocate(r0, 0x20, 0x1000, 0x100000000) 05:58:30 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)) 05:58:30 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getpeername$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f00000001c0)=0x1c) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r1, 0x65, 0x400000000000003, &(0x7f0000000000)=""/244, &(0x7f0000000100)=0xf4) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) 05:58:30 executing program 7: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$setregset(0x4205, r1, 0x201, &(0x7f0000000140)={&(0x7f0000000100)}) recvfrom(r0, &(0x7f00000002c0)=""/4096, 0x1000, 0x20, &(0x7f0000000180)=@generic={0x9, "4db1f96a219023129b575055a9b9ec818b0fa00fdd1861dc084e266ab8d3d548ef51084db30d4b0bdf028c459f128bc193c8406400c6e0f00ea3e782e0be3a7553527bc46fb602a26f582d1aabe18725505a691094f2ca741b179a8d25b2e4dfdee1c98a3769c95339bdb2f9d14751705c218ee5a9ecf483e1efb20f201d"}, 0x80) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "0049d13d339c3a83b57716ee817c892fe57dda6e3ac07858a088ca4db18e363c2dea8bdb564a22c9bc8faf6c532aaab9b6ba0630f11c15b164a12d3e48f3fd"}, 0x60) getsockopt$nfc_llcp(r0, 0x118, 0x0, &(0x7f0000000200)=""/177, 0x70c000) chdir(&(0x7f0000000080)='./file0\x00') 05:58:30 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@dfltgid={'dfltgid'}}, {@noextend='noextend'}, {@access_client='access=client'}, {@cache_loose='cache=loose'}, {@uname={'uname', 0x3d, 'vboxn\x00t1(}%$'}}, {@version_u='version=9p2000.u'}, {@cache_mmap='cache=mmap'}]}}) [ 220.870382] 9pnet: Insufficient options for proto=fd [ 220.872992] attempt to access beyond end of device [ 220.880612] loop4: rw=12288, want=8200, limit=20 05:58:30 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) statfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x266, 0xfa00, @id_resuseaddr={&(0x7f00000001c0)=0x1, r1, 0x0, 0x1, 0x4}}, 0xfffffd9e) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) [ 220.927525] attempt to access beyond end of device [ 220.932714] loop4: rw=12288, want=12296, limit=20 [ 220.943341] attempt to access beyond end of device [ 220.948383] loop4: rw=12288, want=8200, limit=20 [ 220.958774] attempt to access beyond end of device [ 220.963903] loop4: rw=12288, want=12296, limit=20 05:58:30 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") setsockopt$inet6_dccp_int(r0, 0x21, 0xa, &(0x7f0000000100)=0x416, 0x4) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, &(0x7f00000000c0)=0x100000000000001, 0x43, 0x0) get_mempolicy(&(0x7f0000000000), &(0x7f00000001c0), 0x1ff, &(0x7f0000fff000/0x1000)=nil, 0x3) getresuid(&(0x7f00000003c0), &(0x7f0000000140), &(0x7f0000000340)) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$invalidate(0x15, r2) 05:58:30 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800ac028306000000000000600000819500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x101000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000400)={&(0x7f0000000280), 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYRES16], 0x1}}, 0x0) [ 221.008414] 9pnet: Insufficient options for proto=fd [ 221.023019] attempt to access beyond end of device [ 221.028081] loop4: rw=12288, want=8200, limit=20 [ 221.034971] attempt to access beyond end of device [ 221.040017] loop4: rw=12288, want=12296, limit=20 05:58:30 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x40, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f00000000c0)=0x4, 0xff60) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") close(r0) setrlimit(0x7, &(0x7f0000000000)={0x14, 0x88}) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=0x0, &(0x7f0000000100)=0x4) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000140)={r3, 0x1ff}, &(0x7f0000000180)=0x8) pipe(&(0x7f0000001140)) [ 221.056885] attempt to access beyond end of device [ 221.061916] loop4: rw=12288, want=8200, limit=20 [ 221.067737] attempt to access beyond end of device [ 221.072756] loop4: rw=12288, want=12296, limit=20 05:58:30 executing program 3: unshare(0x400) r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) r2 = getpgid(0xffffffffffffffff) ptrace(0x8, r2) write$P9_RSTATFS(r1, &(0x7f0000000140)={0x43, 0x9, 0x1, {0x1, 0x6, 0x7, 0x3, 0x1, 0x3, 0x2, 0x1, 0x2}}, 0x43) r3 = open(&(0x7f0000000040)='./file0\x00', 0x20080, 0x30) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f0000000080)=0x280020) r4 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000729000/0x1000)=nil, 0x1000, 0x0, 0x8000000000004011, r4, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x400401, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r4) 05:58:30 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@access_client='access=client'}, {@cache_loose='cache=loose'}, {@uname={'uname', 0x3d, 'vboxn\x00t1(}%$'}}, {@version_u='version=9p2000.u'}, {@cache_mmap='cache=mmap'}]}}) 05:58:30 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000040), 0x1c7) ioctl(r1, 0x8, &(0x7f0000000000)="0f7fd9bd93db310361") sendmmsg(r2, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)=[{0x10, 0x84, 0x6}], 0x10}}], 0x1, 0x0) close(r2) close(r1) 05:58:31 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x4d5) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') accept4$bt_l2cap(r1, &(0x7f0000000080), &(0x7f0000000140)=0xe, 0x800) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000001c0)=0x800000000000fe9) socket$inet6_dccp(0xa, 0x6, 0x0) readv(r1, &(0x7f0000000800)=[{&(0x7f0000000700)=""/84, 0x54}, {&(0x7f00000008c0)=""/27, 0x1b}], 0x2) 05:58:31 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)) 05:58:31 executing program 7: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x7, 0x4002) bind$nfc_llcp(r1, &(0x7f0000000100)={0x27, 0x4, 0x0, 0x5, 0x0, 0x0, "8811e78754a539d39c2bd6a40fa8c8aa024d86cdc834bc921c0525fec2541e21ccf67e1d7b55cabe9e068dd58c6d51dcc09d325ebac7627ffe7a54cdbd77b3", 0x400000000}, 0x107) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001240)=""/250, 0xfa}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x77359400}}, &(0x7f00000000c0)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[]}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, &(0x7f0000000280)) tkill(r2, 0x16) 05:58:31 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_client='access=client'}, {@cache_loose='cache=loose'}, {@uname={'uname', 0x3d, 'vboxn\x00t1(}%$'}}, {@version_u='version=9p2000.u'}, {@cache_mmap='cache=mmap'}]}}) 05:58:31 executing program 2: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x8, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x3, 0x10380) truncate(&(0x7f0000000440)='./file0\x00', 0x7) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000380)=@nat={'nat\x00', 0x19, 0x2, 0x288, [0x200000c0, 0x0, 0x0, 0x200002b8, 0x200002e8], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0xd, 0x60, 0x6005, 'bridge0\x00', 'veth1_to_bridge\x00', 'bridge_slave_0\x00', 'bond0\x00', @random="bdec0c6ea575", [0x0, 0xff, 0xff], @remote, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0xb0, 0xb0, 0xe8, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0x4, 0x3}}}]}}, @snat={'snat\x00', 0x10, {{@broadcast, 0xfffffffffffffffe}}}}, {{{0x1f, 0x36, 0x9b07, '\x00', 'veth0_to_bridge\x00', 'ip6tnl0\x00', 'bcsf0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x0, 0x0, 0xff, 0xff, 0xff], @empty, [0xff, 0xff], 0x70, 0xa8, 0xe0}, [@arpreply={'arpreply\x00', 0x10, {{@link_local, 0xfffffffffffffffe}}}]}, @arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}]}, 0x300) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000), 0x4) 05:58:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") clock_gettime(0x1, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e23, 0x7, @mcast1, 0x3}], 0x2c) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x0) ppoll(&(0x7f00000002c0)=[{r2}, {r1}, {r1}, {r2}, {r0}], 0x5, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340), 0x8) 05:58:31 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x5}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000001c0)={r3, 0x0, 0x0, 0xfffffffffffffffd}, &(0x7f0000000200)=0x10) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000001c0)=[0x580]) close(r2) r4 = socket(0x0, 0x7, 0x40) setsockopt$inet_tcp_buf(r4, 0x6, 0x1c, &(0x7f0000000000)="d50a0afa1fb6ee00251ee22be5104e2df506d116048d2f35e489cfcd8cabd2f84b6e68fcc15d30c7cbe28b09021c690608ab0f21b3e76654930f6ba09c00033abd359350455feaf2632098f211e04b64f2", 0x51) close(r1) 05:58:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) r2 = request_key(&(0x7f0000000040)='rxrpc_s\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000000c0)='*vboxnet1nodev', 0xfffffffffffffffe) r3 = request_key(&(0x7f0000000140)='big_key\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000001c0)='cgroup\x00', 0xfffffffffffffffe) keyctl$instantiate(0xc, r2, &(0x7f0000000100)="68e88b45944ffc3c694f50b357d9fd8f950300c3f7e6adfed70e0a248d6c9b6acc8fb7da03dfff186a3735b0b47b", 0x2e, r3) sigaltstack(&(0x7f0000009000/0x1000)=nil, &(0x7f0000000200)) mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil) mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000000a000/0x1000)=nil) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10800}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xd0, r4, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0xa}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3f}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1f}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x21}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}]}]}, 0xd0}}, 0x880) socket$xdp(0x2c, 0x3, 0x0) pwrite64(r0, &(0x7f0000000240)="bd087a272623ae846c81d63b43ad0a551eaa7b99677ddcec3a28f9dabe3c6729c9a228d5c8c48989a1daeae5115a6477f2c934e66ebbbf0ec4b38f60c1c6", 0x3e, 0x3a) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000004c0)={0x1, 0x2, [@local, @dev={[], 0x20}]}) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000000)) 05:58:31 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_client='access=client'}, {@cache_loose='cache=loose'}, {@uname={'uname', 0x3d, 'vboxn\x00t1(}%$'}}, {@version_u='version=9p2000.u'}, {@cache_mmap='cache=mmap'}]}}) 05:58:31 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockname(r1, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f00000000c0)=0x80) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="a8d1ab48cc33fa140bdebacf7abcee67", 0x10) r3 = msgget(0x0, 0x408) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)=0x0) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r8 = gettid() ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000400)=0x0) msgctl$IPC_SET(r3, 0x1, &(0x7f0000000440)={{0x8, r4, r5, r6, r7, 0x22, 0x885a}, 0x7fffffff, 0x8000, 0x0, 0xb0, 0x96d2, 0x1, r8, r9}) [ 221.707595] attempt to access beyond end of device [ 221.712614] loop4: rw=12288, want=8200, limit=20 [ 221.739146] attempt to access beyond end of device [ 221.744203] loop4: rw=12288, want=12296, limit=20 05:58:31 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x4d5) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') accept4$bt_l2cap(r1, &(0x7f0000000080), &(0x7f0000000140)=0xe, 0x800) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000001c0)=0x800000000000fe9) socket$inet6_dccp(0xa, 0x6, 0x0) readv(r1, &(0x7f0000000800)=[{&(0x7f0000000700)=""/84, 0x54}, {&(0x7f00000008c0)=""/27, 0x1b}], 0x2) 05:58:31 executing program 3: shmget(0x3, 0x1000, 0x54000020, &(0x7f0000ffc000/0x1000)=nil) shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffc000/0x2000)=nil) shmget(0x3, 0x3000, 0x54000000, &(0x7f0000ffd000/0x3000)=nil) r0 = shmget$private(0x0, 0x1000, 0x300, &(0x7f0000ffe000/0x1000)=nil) r1 = msgget$private(0x0, 0x4) msgrcv(r1, &(0x7f0000000000)={0x0, ""/75}, 0x53, 0x3, 0x1000) shmctl$SHM_LOCK(r0, 0x2) [ 221.777025] attempt to access beyond end of device [ 221.782074] loop4: rw=12288, want=8200, limit=20 05:58:31 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x200040, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0xfffffffffffffff9, 0x220, 0x8001, 0x9, 0x1, 0x100, 0xaa, 0x8000, 0x40, 0x3, 0x7}, 0xb) accept$inet6(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x1c) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') r3 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000040)=""/57, 0x39) r4 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r4, 0x15) close(r1) 05:58:31 executing program 7: ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)) getpgid(0x0) r0 = gettid() r1 = getpgrp(r0) ptrace$setopts(0x4206, r1, 0x6, 0x1) syz_emit_ethernet(0x29, &(0x7f00000000c0)={@remote, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0xffff8000, 0x6558, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000000)) [ 221.819150] attempt to access beyond end of device [ 221.824242] loop4: rw=12288, want=12296, limit=20 05:58:31 executing program 2: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) recvfrom$inet6(r0, &(0x7f0000000040)=""/202, 0xca, 0x40000001, &(0x7f0000000180)={0xa, 0x4e24, 0x3ff}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [0x488]}) 05:58:31 executing program 5: r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)=0x0) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x2002, 0x41ba, 0x20000000000, 0x3, 0x0, 0x100000000, 0x4, 0x8, 0x7, 0x4, 0x1905, 0xffff, 0x6, 0x40, 0x80000001, 0x9, 0x7e47, 0x6, 0x7fff, 0x1, 0x7, 0x10001, 0x9c7, 0xcea, 0x3ff, 0x80000000, 0x100000001, 0x1, 0xff, 0x7ff, 0x1f, 0x4, 0x10001, 0x7, 0x6, 0xffff, 0x0, 0x3, 0x2, @perf_bp={&(0x7f00000000c0), 0x4}, 0x4002, 0x0, 0x0, 0x0, 0x9, 0x3, 0x1}, r1, 0x3, r0, 0x1) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000580)='/dev/uinput\x00', 0x8080, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f00000005c0)='/dev/snd/pcmC#D#c\x00', 0x13, 0x980) r5 = dup3(r0, r2, 0x80000) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000600)={r4, 0x7dea, 0x400, r5}) r6 = openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x2000, 0x52) recvmsg$kcm(r6, &(0x7f0000000540)={&(0x7f00000002c0), 0x80, &(0x7f0000000440)=[{&(0x7f0000000340)=""/139, 0x8b}, {&(0x7f0000000400)=""/15, 0xf}], 0x2, &(0x7f0000000480)=""/184, 0xb8, 0x3e5}, 0x40) accept4$packet(0xffffffffffffff9c, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14, 0x800) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000200), &(0x7f0000000240)=0x10) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000080)={@remote, r7}, 0x14) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a600800000000000000068354015002c000a000d000000b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) 05:58:31 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x4d5) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') accept4$bt_l2cap(r1, &(0x7f0000000080), &(0x7f0000000140)=0xe, 0x800) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000001c0)=0x800000000000fe9) socket$inet6_dccp(0xa, 0x6, 0x0) readv(r1, &(0x7f0000000800)=[{&(0x7f0000000700)=""/84, 0x54}, {&(0x7f00000008c0)=""/27, 0x1b}], 0x2) [ 221.895812] attempt to access beyond end of device [ 221.900896] loop4: rw=12288, want=8200, limit=20 [ 221.905795] attempt to access beyond end of device [ 221.910777] loop4: rw=12288, want=12296, limit=20 [ 221.917462] attempt to access beyond end of device [ 221.922478] loop4: rw=12288, want=8200, limit=20 [ 221.980582] attempt to access beyond end of device [ 221.985671] loop4: rw=12288, want=12296, limit=20 [ 222.000981] netlink: 'syz-executor5': attribute type 10 has an invalid length. 05:58:31 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)) 05:58:31 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose='cache=loose'}, {@uname={'uname', 0x3d, 'vboxn\x00t1(}%$'}}, {@version_u='version=9p2000.u'}, {@cache_mmap='cache=mmap'}]}}) 05:58:31 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x8a, &(0x7f0000000080)="de009b8db770076a6337ccd9e871", &(0x7f00000000c0)=""/138}, 0x28) 05:58:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85714070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)) r2 = syz_open_pts(r1, 0x0) read(r2, &(0x7f00000000c0)=""/1, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000fd0ffc)) ioctl$TCFLSH(r2, 0x540b, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x40) 05:58:31 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = memfd_create(&(0x7f0000000000)="ac0000", 0x5) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x43, @local, 0x1}, 0x1c) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000037c0), 0xfffffdef) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000040)=""/55) 05:58:31 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x4d5) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') accept4$bt_l2cap(r1, &(0x7f0000000080), &(0x7f0000000140)=0xe, 0x800) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000001c0)=0x800000000000fe9) socket$inet6_dccp(0xa, 0x6, 0x0) readv(r1, &(0x7f0000000800)=[{&(0x7f0000000700)=""/84, 0x54}, {&(0x7f00000008c0)=""/27, 0x1b}], 0x2) [ 222.027067] netlink: 'syz-executor5': attribute type 10 has an invalid length. [ 222.057733] netlink: 'syz-executor5': attribute type 10 has an invalid length. [ 222.074495] netlink: 'syz-executor5': attribute type 10 has an invalid length. 05:58:31 executing program 5: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)) getpid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)=0x0) r1 = getpgrp(r0) ioprio_get$pid(0x2, r1) 05:58:31 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose='cache=loose'}, {@uname={'uname', 0x3d, 'vboxn\x00t1(}%$'}}, {@version_u='version=9p2000.u'}, {@cache_mmap='cache=mmap'}]}}) [ 222.123057] attempt to access beyond end of device [ 222.128103] loop4: rw=12288, want=8200, limit=20 05:58:31 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x301000, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000100)) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f00000000c0)={0x0, 0x2710}, 0x254) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000040)=0x10) 05:58:31 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x4d5) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') accept4$bt_l2cap(r1, &(0x7f0000000080), &(0x7f0000000140)=0xe, 0x800) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000001c0)=0x800000000000fe9) readv(r1, &(0x7f0000000800)=[{&(0x7f0000000700)=""/84, 0x54}, {&(0x7f00000008c0)=""/27, 0x1b}], 0x2) [ 222.169199] attempt to access beyond end of device [ 222.174368] loop4: rw=12288, want=12296, limit=20 [ 222.204439] attempt to access beyond end of device [ 222.209470] loop4: rw=12288, want=8200, limit=20 [ 222.251349] attempt to access beyond end of device [ 222.256432] loop4: rw=12288, want=12296, limit=20 [ 222.323859] attempt to access beyond end of device [ 222.328922] loop4: rw=12288, want=8200, limit=20 [ 222.347542] attempt to access beyond end of device [ 222.352662] loop4: rw=12288, want=12296, limit=20 [ 222.358106] attempt to access beyond end of device [ 222.363096] loop4: rw=12288, want=8200, limit=20 [ 222.367978] attempt to access beyond end of device [ 222.372973] loop4: rw=12288, want=12296, limit=20 05:58:32 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc807003157a846426b5f85714070") 05:58:32 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000080)) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x20, 0x4) close(r0) 05:58:32 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r0, 0x8200) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000)={0x6}, 0x4) r1 = open(&(0x7f0000000040)='./bus\x00', 0x4040, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) truncate(&(0x7f0000000140)='./bus\x00', 0x0) 05:58:32 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x4d5) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') accept4$bt_l2cap(r1, &(0x7f0000000080), &(0x7f0000000140)=0xe, 0x800) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000800)=[{&(0x7f0000000700)=""/84, 0x54}, {&(0x7f00000008c0)=""/27, 0x1b}], 0x2) 05:58:32 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose='cache=loose'}, {@uname={'uname', 0x3d, 'vboxn\x00t1(}%$'}}, {@version_u='version=9p2000.u'}, {@cache_mmap='cache=mmap'}]}}) 05:58:32 executing program 2: r0 = getpid() clone(0x102, &(0x7f0000000240)="cf8f8ca960b9de6140047af2312ace99c205529cfe0bbbf90744012703dabd240df68849fffb7fa326142671816d50e46b", &(0x7f0000000400), &(0x7f0000000340), &(0x7f00000002c0)) mknod(&(0x7f0000000080)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000ee6ff8)='./file0\x00', &(0x7f0000000000), &(0x7f00000088c0)) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, r0) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0xda2) kcmp$KCMP_EPOLL_TFD(r2, r0, 0x4, 0xffffffffffffffff, &(0x7f0000000000)) execveat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', &(0x7f00000004c0), &(0x7f0000000500), 0x0) open$dir(&(0x7f0000000380)='./file0\x00', 0x27e, 0x0) 05:58:32 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)) 05:58:32 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c000100626f6e64000000000c00020008000600ffffffff"], 0x3}}, 0x4004001) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RLERRORu(r1, &(0x7f00000000c0)={0xffffff4b, 0x7, 0x2, {{0x49}, 0x4}}, 0xd) write$P9_RRENAMEAT(r1, &(0x7f0000000080)={0x7, 0x4b, 0x1}, 0x7) write$P9_RSYMLINK(r1, &(0x7f00000001c0)={0x14, 0x11, 0x2, {0x0, 0x4, 0x7}}, 0x14) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000100)={0x7, 0x7fffffff, 0x1ff, 0x2, 0x2, 0x3}) 05:58:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000100)={0x2, 0x3, 0x0, 0x2, 0xdf}) mmap(&(0x7f00001ed000/0x4000)=nil, 0x4000, 0x0, 0x4012, r0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f00001f7000/0x4000)=nil, 0x4000}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x7, 0x10}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={r2, 0x30, &(0x7f0000000180)=[@in={0x2, 0x4e24}, @in={0x2, 0x4e20}, @in={0x2, 0x4e22, @multicast2}]}, &(0x7f0000000200)=0x10) [ 222.732216] f2fs_msg: 120 callbacks suppressed [ 222.732234] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 222.744161] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 05:58:32 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_client='access=client'}, {@uname={'uname', 0x3d, 'vboxn\x00t1(}%$'}}, {@version_u='version=9p2000.u'}, {@cache_mmap='cache=mmap'}]}}) 05:58:32 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000040)=0x90e, 0x4) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)={0x20, 0x18, 0x301, 0x0, 0x0, {0x16}, [@typed={0xc, 0x3, @u64}]}, 0x20}}, 0x0) 05:58:32 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x100, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000180)="7422a5c9c7fcc6b155d54661b691c67f", 0x10) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000da9000)=ANY=[@ANYBLOB="020300000700000000000000000000000500050000ff00000a00000000000000000000010000000000000000000000000000000000000000"], 0x38}}, 0x0) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000000)={0x0, 0x0}) io_setup(0xe5d0, &(0x7f0000000040)=0x0) io_submit(r3, 0x2, &(0x7f00000004c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x0, r2, &(0x7f0000000140)="83f99b3498d484010bf3338570c8d871e76f6f4a0d503106cb3ac5746348f77239dd2cf75a4cec119d74d989439ab714b7bd1e22d2", 0x35}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x2000000000000000, r2, &(0x7f00000000c0), 0x100, 0xfffffffffffffe00}]) 05:58:32 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000100)) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1f) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r1, 0x5412, &(0x7f0000000000)) [ 222.809159] attempt to access beyond end of device [ 222.814195] loop4: rw=12288, want=8200, limit=20 [ 222.821312] F2FS-fs (loop4): invalid crc value [ 222.826577] attempt to access beyond end of device [ 222.831874] loop4: rw=12288, want=12296, limit=20 [ 222.837452] F2FS-fs (loop4): invalid crc value [ 222.842217] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 222.848873] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 05:58:32 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket(0x200000000000011, 0x4000000000080002, 0x0) accept$inet(r3, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, &(0x7f0000000200)=0x10) getsockopt$packet_int(r2, 0x107, 0x1f, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x220000, 0x144) 05:58:32 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x4d5) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') accept4$bt_l2cap(r1, &(0x7f0000000080), &(0x7f0000000140)=0xe, 0x800) readv(r1, &(0x7f0000000800)=[{&(0x7f0000000700)=""/84, 0x54}, {&(0x7f00000008c0)=""/27, 0x1b}], 0x2) 05:58:32 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r1 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f00000000c0)="8907040000ce3558b2f03c625e0f2e61f5dc38e71227cffcc32f000000000000000000", 0x23) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000583ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xfffffffffffffff9, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'bridge0\x00', 0x201}) r2 = gettid() ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000040)) tkill(r2, 0x14) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000240)={0x0, 0x0, 0x1, [0x8]}, &(0x7f0000000280)=0xa) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000002c0)={r3, 0x2f606bad, 0xc7}, 0x8) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000140)=@srh={0x2f, 0x12, 0x4, 0x9, 0x8, 0x10, 0x54, [@local, @loopback, @empty, @mcast1, @loopback, @empty, @mcast2, @local, @remote]}, 0x98) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x400000, 0x0) ioctl$KIOCSOUND(r4, 0x4b2f, 0xffff) [ 222.855975] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 222.864380] attempt to access beyond end of device [ 222.869668] loop4: rw=12288, want=8200, limit=20 [ 222.877749] F2FS-fs (loop4): invalid crc value [ 222.883189] attempt to access beyond end of device [ 222.888199] loop4: rw=12288, want=12296, limit=20 [ 222.894288] F2FS-fs (loop4): invalid crc value [ 222.899016] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 222.902113] netlink: 'syz-executor3': attribute type 3 has an invalid length. [ 222.919602] attempt to access beyond end of device [ 222.924633] loop4: rw=12288, want=8200, limit=20 [ 222.929779] attempt to access beyond end of device [ 222.934788] loop4: rw=12288, want=12296, limit=20 05:58:32 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xfffffffffffffffc}, 0x2c) 05:58:32 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_client='access=client'}, {@uname={'uname', 0x3d, 'vboxn\x00t1(}%$'}}, {@version_u='version=9p2000.u'}, {@cache_mmap='cache=mmap'}]}}) [ 223.005818] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 223.012851] attempt to access beyond end of device [ 223.012865] loop4: rw=12288, want=8200, limit=20 [ 223.012908] attempt to access beyond end of device [ 223.012918] loop4: rw=12288, want=12296, limit=20 05:58:32 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)) 05:58:32 executing program 7: pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x8000) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) fallocate(r2, 0x20, 0x0, 0x8000) creat(&(0x7f0000000000)='./file0\x00', 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)={&(0x7f0000000180)='./file0\x00'}, 0x10) dup2(r0, r1) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) 05:58:32 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x4d5) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') accept4$bt_l2cap(r1, &(0x7f0000000080), &(0x7f0000000140)=0xe, 0x800) readv(r1, &(0x7f0000000800)=[{&(0x7f0000000700)=""/84, 0x54}, {&(0x7f00000008c0)=""/27, 0x1b}], 0x2) 05:58:32 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x3e, &(0x7f0000976000)=ANY=[@ANYBLOB="01dd60060000000000ffff020000000000000200000000000001800090840000fffd0000000000000000f400000000000000"], &(0x7f0000a95fe8)) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) [ 223.092359] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 05:58:32 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_client='access=client'}, {@uname={'uname', 0x3d, 'vboxn\x00t1(}%$'}}, {@version_u='version=9p2000.u'}, {@cache_mmap='cache=mmap'}]}}) 05:58:32 executing program 2: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, [], 0x1d}, 0x1ff}, @in={0x2, 0x4e20, @loopback}], 0x3c) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f00000002c0)=@ethtool_dump={0x3b, 0x2, 0xff0f0000, 0x80000}}) close(r2) close(r1) 05:58:32 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x4d5) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') readv(r1, &(0x7f0000000800)=[{&(0x7f0000000700)=""/84, 0x54}, {&(0x7f00000008c0)=""/27, 0x1b}], 0x2) 05:58:32 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x41, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) setgroups(0x1, &(0x7f0000000400)=[r2]) r3 = syz_open_procfs(r1, &(0x7f0000000000)='fdinfo/3\x00') ioctl$RTC_UIE_OFF(r3, 0x7004) [ 223.204814] attempt to access beyond end of device [ 223.209877] loop4: rw=12288, want=8200, limit=20 [ 223.218809] attempt to access beyond end of device [ 223.223845] loop4: rw=12288, want=12296, limit=20 [ 223.230906] attempt to access beyond end of device [ 223.235920] loop4: rw=12288, want=8200, limit=20 [ 223.241063] attempt to access beyond end of device [ 223.246116] loop4: rw=12288, want=12296, limit=20 05:58:32 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_client='access=client'}, {@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@cache_mmap='cache=mmap'}]}}) 05:58:32 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x4d5) readv(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000700)=""/84, 0x54}, {&(0x7f00000008c0)=""/27, 0x1b}], 0x2) [ 223.329413] attempt to access beyond end of device [ 223.334443] loop4: rw=12288, want=8200, limit=20 [ 223.342381] attempt to access beyond end of device [ 223.347486] loop4: rw=12288, want=12296, limit=20 [ 223.378126] attempt to access beyond end of device [ 223.383146] loop4: rw=12288, want=8200, limit=20 [ 223.396264] attempt to access beyond end of device [ 223.401340] loop4: rw=12288, want=12296, limit=20 05:58:33 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000ec0)=@broute={'broute\x00', 0x20, 0x2, 0x2a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000b80], 0x0, &(0x7f0000000b40), &(0x7f0000000b80)=ANY=[@ANYBLOB="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"]}, 0x320) 05:58:33 executing program 3: lremovexattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)=@random={'os2.', 'system.posix_acl_default\x00'}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000faffe7)=@known='system.posix_acl_default\x00', &(0x7f00001cffec)="0200000001000000000000000200000000000000", 0x14, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x7ff, 0x408401) ioctl$KVM_NMI(r0, 0xae9a) 05:58:33 executing program 7: pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x8000) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) fallocate(r2, 0x20, 0x0, 0x8000) creat(&(0x7f0000000000)='./file0\x00', 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)={&(0x7f0000000180)='./file0\x00'}, 0x10) dup2(r0, r1) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) [ 223.853225] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 223.865225] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher 05:58:35 executing program 6: socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') readv(r0, &(0x7f0000000800)=[{&(0x7f0000000700)=""/84, 0x54}, {&(0x7f00000008c0)=""/27, 0x1b}], 0x2) 05:58:35 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x80200, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x5422, 0x0) 05:58:35 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)) 05:58:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'bond0\x00'}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000001c0)={0x74, 0x0, [0x5]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:58:35 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_client='access=client'}, {@cache_loose='cache=loose'}, {@cache_mmap='cache=mmap'}]}}) 05:58:35 executing program 5: socket(0x2, 0x0, 0x5) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 05:58:35 executing program 7: r0 = socket(0x11, 0x4800000000080003, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00001fb000)={'vcan0\x00', r1}) sendto$packet(r0, &(0x7f0000000040)="2d67fcffffff000000000bbc256011b0", 0x10, 0x0, &(0x7f0000000000)={0x11, 0xc, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 05:58:35 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='user.syz\x00', &(0x7f0000000180)='user.syz\x00', 0x17d, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f00000000c0)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x200, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000380)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f00000004c0)=0xe8) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = gettid() fstat(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000006c0)=0x0) r9 = getuid() r10 = getgid() fcntl$getownex(r0, 0x10, &(0x7f0000000700)={0x0, 0x0}) getresuid(&(0x7f0000000740)=0x0, &(0x7f0000000780), &(0x7f00000007c0)) r13 = getegid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001cc0)=0x0) r15 = getuid() getgroups(0x4, &(0x7f0000001d00)=[0xffffffffffffffff, 0x0, 0xee01, 0x0]) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000001d40)=0x0) lstat(&(0x7f0000001d80)='./file0/../file0\x00', &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000001e40)=[0xee01, 0xee00, 0xee00]) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001e80)={0x0}, &(0x7f0000001ec0)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000001f00)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f0000002000)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002040)={0x0, 0x0, 0x0}, &(0x7f0000002080)=0xc) r23 = getpid() r24 = getuid() lstat(&(0x7f00000020c0)='./file1\x00', &(0x7f0000002100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r26 = getpgrp(0x0) stat(&(0x7f0000002180)='./file0\x00', &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r28 = getegid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000027c0)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002800)={0x0, 0x0}, &(0x7f0000002840)=0xc) r31 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000002880)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000028c0)={{{@in=@rand_addr, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f00000029c0)=0xe8) getgroups(0x2, &(0x7f0000002a00)=[0xee01, 0xee00]) r35 = openat$ion(0xffffffffffffff9c, &(0x7f0000002a40)='/dev/ion\x00', 0x20100, 0x0) r36 = getpgid(0x0) fstat(r0, &(0x7f0000004000)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000004080)='./file0\x00', &(0x7f00000040c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r39 = gettid() fstat(r0, &(0x7f0000004600)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000004680)='./file0\x00', &(0x7f00000046c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000004740)={0x0, 0x0}) stat(&(0x7f0000004780)='./file0\x00', &(0x7f00000047c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000004840)='./file0\x00', &(0x7f0000004880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r45 = gettid() stat(&(0x7f0000004900)='./file0\x00', &(0x7f0000004940)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000049c0)='./file0\x00', &(0x7f0000004a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000080c0)=0x0) stat(&(0x7f0000008100)='./file0\x00', &(0x7f0000008140)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000081c0), &(0x7f0000008200)=0x0, &(0x7f0000008240)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000009780)={0x0}, &(0x7f00000097c0)=0xc) fstat(r0, &(0x7f0000009800)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000009880), &(0x7f00000098c0), &(0x7f0000009900)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000009940)={0x0}, &(0x7f0000009980)=0xc) r55 = getuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000099c0)={0x0, 0x0, 0x0}, &(0x7f0000009a00)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000009a40)={0x0}, &(0x7f0000009a80)=0xc) stat(&(0x7f0000009ac0)='\x00', &(0x7f0000009b00)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000009b80)=0x0, &(0x7f0000009bc0), &(0x7f0000009c00)) sendmmsg$unix(r1, &(0x7f0000009cc0)=[{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000300)="aad0832242f7c227819c4006a4ed4ff566ad384a8c345eb7ebb9719996ffb0da924630d237a08b026f1fd580", 0x2c}], 0x1, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @cred={0x20, 0x1, 0x2, r11, r12, r13}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}], 0xe0, 0x40000}, {&(0x7f0000000900)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000001ac0)=[{&(0x7f0000000980)="c830cf5c21de20e35045b103eef07d5d1775e81728e7be", 0x17}, {&(0x7f00000009c0)="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", 0x1000}, {&(0x7f00000019c0)="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", 0xff}], 0x3, 0x0, 0x0, 0x2400c044}, {&(0x7f0000001b00)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001c80)=[{&(0x7f0000001b80)="43e82fdc9ba9954dfcd5b9e5fec028204351f1a26b4225d59da28d46ff54c180e02087037409672d687a70bd803713666f82213edca174d3e6d0fa3d86d37dc1ab3b1a9c4721787fb360208dc8c0cde509fb50e2a94fc15407d22fb9c9b92d78041113cc701266f329ef37ae8cc64be86f175e667c2dc2767b87b44b35ccd05b6a687cdbb093a4a7fdc74b6142bb3b5ed78dc3c14bcbdafdb8b2fddf4200e129ac6a8fa86d8e2d65f7c7a000d98fa548dcc27d7f03904f0b844a18ab531e8ac91b8db2c2aca8ccf6d990fe9332da73a868d4b2efd43998d6", 0xd8}], 0x1, &(0x7f0000002240)=[@rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r14, r15, r16}, @cred={0x20, 0x1, 0x2, r17, r18, r19}, @rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r20, r21, r22}, @cred={0x20, 0x1, 0x2, r23, r24, r25}, @cred={0x20, 0x1, 0x2, r26, r27, r28}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}], 0x108, 0x20040040}, {&(0x7f0000002380)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000002740)=[{&(0x7f0000002400)="4bcb48f98710d388a1bd6da5fa1d6fdf38019123fc61ec65dfbbd4ab84a67206c0d0a952095a94e6f8e3bac3f27c7adf9dbdfb28b4d215e3d6f0c495c04cb15ba386909b10c792a5db88a6b4ac456b5aeb8ef88bc17694103e9a4cf5ac3e02061422215e5db2308c6757bafdc44ee3026c7bb58509f0be9a54e1c06b80c65ffe51e0e0d304af32f145370143fc64fdf8df2d01d0", 0x94}, {&(0x7f00000024c0)="44dcc2d2b07a5b7bf59fec0e64871271bb3d5ca1fcb86b480119d0dcde6f37e5881c152f3fa2f7c0778e4ffec488646ecd2ae368bafd46fc31de185124147df8e34a6817970694ec3e5574cbfdae9be7755efed804d837bd329dc7c98bbdb9eb6076414ccebfae3a862b245dd1bfff90a372299cca645f3c0da7f56c5910ba55f5dc83f19f17f5bc7277b168ba5add29d9f176f28845bdeb9a9cf5f87e35195542", 0xa1}, {&(0x7f0000002580)="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", 0xfd}, {&(0x7f0000002680)="f3db20dd49f238f46a317a563020156e94e0640fea360a5588a07d1c12ba73b1ae69928f021df93f796b", 0x2a}, {&(0x7f00000026c0)="e429d4c727a044440fef667c259e0c6a9b78087efc4f79c761f6e065c977082c5582e9f3f009a7c93a07f3f72447addbdbb97890caed9d64bac5a85fbf1feb84d9401d33226dabd31be8ef262553537fb06fcaf928dee9b3d50631a50d925a0e4271cc2cd34ff06439d71002f999bb", 0x6f}], 0x5, &(0x7f0000002a80)=[@cred={0x20, 0x1, 0x2, r29, r30, r31}, @cred={0x20, 0x1, 0x2, r32, r33, r34}, @rights={0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r35, r0, r0, r0]}, @rights={0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0]}], 0xb0, 0x40800}, {&(0x7f0000002b40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003f80)=[{&(0x7f0000002bc0)="9756bb62a0134970622eb2595f7cacb52c9d4e79cef1cc0fc4efabd27ca2c4da0657b8c6b83900816718e5dff9e993756a7e70859437b2fc92d55d48ac21829786e64a3a41987f2dfc5a482d78a1600a39c3e49562c6c9ae73cb4ea7f342d0ffa950d26c5f2b5a5f0cfc0f938ddf2250b045c76b986d8e7a00fe5a308d48113d7e1b10a90c7e78943e5c8720a25f4774", 0x90}, {&(0x7f0000002c80)="24fb632d3993c6703b69d1727ac2cd39793f4353c1b4c7f3f0527a5085becc0cd1ebc5a504d7f7d46c719c7985c911d3cefee7d16df15d22b4ba4cdc4bf5bd5568f7e77c72e8e3a05caf1e0633f1657d03761ebc2176e25e3db36d19453bc988fab1343b9ad771a9b3aebfea4b4583b92bf50c917c49af33420e3eae37e6ec2f0152f0f74665", 0x86}, {&(0x7f0000002d40)="aa009f156239927c2888ab17334cb4abfad4fb506330f6d776fb2d39e68d32957993bf48449a9f5e599162de29ebf0fd07d79edc4297061bc7ae4a2bcf898385fac64a8a5cd4bbe72d762564e3c3eded363717d76ca4c6d0f117b06f1ac1db329b1bfd29582acfad954033f9646edfca75625de2cbfa306f25b87347866b8b62a434fb7d18bf058e73c25f1df2e1f3868f27eeabb297f6f0a625125e3cb0daec4644d12bbf4fb7f4eabb9f9bab357d0566c77fdfea52f5e422bf6221a87df457bc6f6d06c5a912154a81e3be0a53d3d95f20b2883aa6747eeadaa397edba9f779fb37e7257c018aeb79b8a7c47fd4731b5ecf4c3818a20e2b509546870bac7c0b5f3976bf757a076074fe03fc508d0d562afb2549874a9d886b009d99253e5abb51a7b1b076f05293f9cd281f9e88faec289de860efea0a2560ee9fd5ab9ebaef3f60be06ddaeec27e68c2939c31b735df5a42f64088710960fb68f174a8b299c0b3dadbb172fc7f97aa50b0f181d9c0119404919ec2a940322a77e6f5f7443c122284e07a52e17aa96751f27483c6d4901cd55c875183e924d58829cb66ac422d826abeaa5be8c85c06506cbd48ade97fd423f37c6f957e6083292d15ab33d735f30f901c696e068e2f3ddab5e6da7b775eceb57a892f3710adaf1d52d1c30f4331922c4b07e0eebd2d2e644bb4ae8fc91a03033024cdea997c408e533ed1b3a25265798d925eefe19ddac15acedd7c7a01cfe361b4ac086deecb5227a8a92c8580b6e545fdf1ac4ea56c2b5075b2225e2333c057d0f8ffda74d76d586b92435d81742acc91b7cc97639f654609ec2dbc31a542c65909f0146f5f09f8c03162367f70a530d20599920b129b3d2853ac6dbb033d0ca749727bc5e3363e23175354d1dd482b3e2102d19508a0d1e5f44c14b1ffc677806da829f492207bf808c19adaa731304338b15f493a6becb853e3794459d663712cdadf0c756a2d997b48047dfd7b1e4c1d2abe947c8d9cf475a93a93d6db8a4dd893be0176c44640497eaf73dce7747f18a3fa70cba2fe4557533731dc45c441f88713d08c6a1526a0f4d39a45c353e818b8a63917ecc3d044377a223150cb837781ae44be833f4e2599ece807958d74c9f68a51add6a6fb82094d3709f08cba7bdc87f13c59e5efec51d6dd968b81707eaf9b64f01f6a9f9c482f5145f5b4ed736dd5eccc10200ecaa220549d9c9967d0103ff5ae2411c9969412e9d30819d9aa8c4a9ce5a5ef22d409c6e9d70aad11d0890e4e46dd1fced1d9dc3258eb47cce07711ba926259bd93e74320916da06643ec11ec872f52332ee81cddd1e7baa24c99acc73bae149e52149753200b485ff1c38430bd66ec07598ddd090e9b3ec78c4f54367a7284e13088cbbe73502e6bc782fa10f4eb470d15da9b85cf6438f8683c7882999608ab8784d5a1f087a1ad0a548d633c4ab3c20f20c9f78ec233e866793bcf672c97f7a8792b8ab24eba398906b1ec1f736a1ac99df8bb9d821fbcacdaa4396effa76a0ac53adf6454f86ca8390ab655880e937fb56cdae1c6af4f5a182bdbf3445e3b533f9a94cad28712dc540bb0ae26defe8a44a4f038fe51456f3eff0b48d5cdbbf51b15c8cf19050a86f931b6c7351aa145322dfaaa2edba511abfde6bb9e48b1112e5a505c257cff9878dbb020d96c46eb5019e86258c7aa56585b70f57fef839564678c8202bac03cdfa4bf6378d7674bc0cf9b912db291d26c886867fb8a035bad5eba523ada5fca5ee45dd74c57782d4539cb85ebd19b14f1768d316fe34fceafb542b700a771a9c886b3ee864f5c8f01c92f7753f9cd87ea6103ce6ae32e0b149dc673ac0e5013250db75d04200da0e30d01663d9b92cd480727b065b4b4987911d4a21201385fa64a70db6d44ffbe41f717252996f0f3bb0996216baeae88534fb29d34afc807015142c8b615a273ce62cce59656ff948b98c934ed750498762cac86c5731b3cf990ace1efd04fc442531eb85bd381e70dea6e10ad2406f31b10c3852c9e5954ad0fee06253ee5fa40809f451112ef6d6e64a7c141e736e80ca5b685fcbf98bb954d099507498518a84e3b949bdb654c867b8964529bab7011a9a7a63e3f831be1bacf4686c95bdd37e0b6a59906bbd7db1977c03109eb607065cb382651148826ddfdbc83a31238eb8d872971a2f40a5690c1610324a1702654ea3abfb3ea910c1a1e6aba723cbce81dab62b1739ba0685b8829e2e551956ca1815194a96314c859fc13f873c98f34fee038da0a6a74d829e406e419cc8493e2e79fc6d6a044811f46e1d52dbecf514ade74d11d164242d1b96e5fadbe1c9f58151b9fcfdf054578b73c9f083fa29031c92ea5821ff6e133ffac8959db15ff22b773b0c77bbaf1c440f61e41a3bc5ff6f18a357bf971808902336461922595d54a72cd24ef44781f13cea040727b8dfcddb5d7422fd6bba196df63c23ea02d701d549aa6615e7e3d43bf7ff3e0de9d0b53d681e4512e19c7766e8e38da8a37883ddc22989f34b28c3a512c77f43c7959c82400d0a76de397d37dac0739769f770f89e331ded3af15f33a386a706140c1e517ec5185571a758119f4becdea1aa270e53c113dfa85c533d4815b1296ce38276c2330be558b568a6bf74841794476b6e1df4cb433fb8c186a5640a9cd4dc35a3b98945e8aa684edb1c40438d26c18be8a8321303b4ffa2ebd8e6d4ea129a1be52b7329d280d6d291df153a1b8b365d4dc30dde2c541510f6df088171d0c1647e009a1bb37c488e5aba4cdc9f70c11932539fd82fac3c251b94807d5608762bae0c8cdb87add41530143a4d8e9a73982a328f37f2867688385b0b28781f44c2978271c8e6f48ec4df1e386e7fcee61917f74db39fe3e07ce9bac74331a0bd7cd4eee12050d995a4d7c38636000e130dec5e4988c3dbaed2cdac6311fe1c4da0cab64497e654f387a46d5e4db810be7682457706d6612e9bb08e3509b05cbd14809ecf8e81813fc8564de6dbb82fc9a704dbd38b8e43389120e0f09802d06cc9f2783d4560ac4bced1b8ff7b1cf2138fd19ef83256ba5c4eea82401c021f0187a6ffe1ec19997d72411a2e002bb43abf353fc1b47658109812190bbe2d5b7949eafe79b52bbee2558f386bd0cabfff4b50db7aae63c560b69bbd8629c1b41ea8664434f40c5cb7d31b167062374b99c7d5ab0a8d2fdf3947ef2098347691b7167282547e9615c66140cdf8cc886a3abbfd940a3d77f3389e26c32874246f2e0ebc6fb6e4db987413a33fd3e99c8ef554a9b72dd567d2dac29edbcabdeedfdbfe5b607136f48de51cc909d05d24d51e22fa752c6a7fca393f7fa3ab5c2798d5ebde908a89e862e88574a41bddbd38d08ad6ba28b2c9ba44d4eb2dcd3a935dcc5be711e65a59b7b0607bf1548801fa41655835962a70520b8f726850059f1910750ea6b74db3fe027dee366f1ecdac461feb7813b18465ecbaca66cb577d1f36a171683ba70d2bb0c757869d234274b6d757dfb9bce4e470690ae342f8b5a6e59304ea216348cc144bc2dbf11350833ff750986748b8fc0fa3bc01eb5a84d1678ef348c4dd1e06b1db26f46aa3bfaceef4e9806080d2ab26bd40595f6a9d49ceb8cc97afcda9b0719348639fb7e4f58860524c47e68117cd9fa833ad29f202aaa3613682b5833bf80ad6d929495862780630ea9863cd6b062d67d432486c6997a5b57c3e035f0e8f184db8121b2b1da1fde32c441a7dc8dfd2404be74d8e6ab5b579b7da899c5f6f2ca87153cd38b66ba8aa209aba36088a8e1cdf1352945fab1c1baccd8c8f73e9bfecc0a618164d9f92ba75ad8dbee299b2fc13302f7b7ac0c6aeab069542c43e42f8a142838746b64b8d54e3b9ea45bce1a8582eaff3bf4eb95f95252a6920b352220a6e5ffac936b731fd2c781d950afece02e7f322621ae6f7328480d2367e50bdea02071ebf809cbeb50d4b253eaec3f422a297ff38f6c9e353359c3fb500b5e5ac3a2a2a9c852f94473603831a671d40de9d517c039deeb49740444348ead8a618a5e4758bda805e6bc3b294cc83d72b6f0d9feb0f88fa8885592e8983dc56eb5090baa2a7259549bfa9a5f6979cb5db663c468a491c5e5daa011fb2f1dc8302143583dc83bf5f6ca79d426c6721fdf8632f42ad14b4c7092b678f382b155387ed3c3827b272a58148074d46b8a36953882cdda0fc397e33450f95e0a7680e6717f0ed584c059770c76dc05f87a91960b5dbd5e14392ad5d63af3d71aaa628d2fcd030aa4514a6eef5cf958c74a025ba720ffd791b4e356df93ae0761002f9253d21a5af6871f65f0ae418f6cee148b789317f16456101f4ea5c0a66e5f6065a9155f50cb6105ea9ad002a70b02e1b9928a4efc1102f8a19b5aa8edf975639e941e1ede4bc0aee871bdff94042fc96da81733ab5dd0acdc91338d1b94697aadb8602cd3cca04627af9162bc9a0311ca03acb2df4716fe23cf97d5366782ae5196b2e213c02b97eaaa5809227708184c6af4e279677272095ff6d208e5471f8c711bc77b5251ae5a1919f24fa3e487d27ba35a8a1cf682811bf4b665bd5c0f12165a347fb42ea2c9a775f7d5ec079b84a4e557f480df18f5f5b510a2fbeb4418ac483149c4cfc3ccde81dd535fc38c307f64f749045513043bc724f1976249ce6608a263b08be08bb0b76f9c30fd30f1c655c9d20603f20a155a036dd2501d9f9fa0cb8b5dc90ee56e894464023d79e5e793149b44b6f7fe3cec7795b24024015f788afb8f7d76187363db823ea96243cd135145fff9302211b9ca23fbea3ba80ec9891ea4679b982d66e6e00680a8bdd8e1e01f63393e7b5b08545e0ca6626c8da54e5ba8990f429730d006ddd857bb3b6ccaa34d9f16e05fae9c3eb124937ad7c83c3a360f7758c59a1f1ed023bad57c4a197873e1fa37b0ac018a8c68523cdb874e84fc764b1e7cb6541fde88bac576dac2d8107a147c6ab97127f3b537bdc7fd23203076d6e26fc9dbd7141bcaca4ba17203951040558357755f04b5fb0b0442e772702fad2785b09c8f7bcdf8825034e3b226486e14dba9167913b1e3a170d42b4e92607bff81f260fce764e729fc5dfee0c5879ee42061605f0f65cba9b2eb9db8ed8f24e65a36443ee0b49bcc225f4f1caf73d355ac226a3c836d3cb616e86d48cc1f5f21d0524837111076b33b25bbee74b486e93eed0c553f66e551d23832ab816824d94c5daf5f61ed5ff4f7dba25f5ea13baa9d3f1dca7c4077ebda5a4b1563fc87889d5f42a06e7b923b920a749a0be3ec098c52b5b3874bd07236a91ee518ba08a9c913689c8e9e3356e88e67959afb991ab651edbba18dda507859ee8204a765bed474dce8300c02a2b1aa768a92a27f35d841d1c01f33a83ce5131cc554446b5a6e75a618438c8877ae5ecd0369f3b1c91c3b155aec8be00fdc84b397e1c811168ad37f0381ae368887c8c9ac2eab5671b492955ce72c7d94712ea7c3af89547d66feb5c0229b954a0eaa34a20e009360ae7f27dba0298202d5c5c200a78ffe830d1bbe9b3ab45e020ce0ba744bbe29757bd3bf1b872faf165407b118b7839af57382520e92b94ccde5e7d37762786760c5c3f261a086efbf6d82d732ddd5b9af0e78c25b74de8444ff2b9f4a0f941e984268823e8ba923a0041b291801a67b196f7233bc343008a95417c8811f563663b21d727542f00bc1fc37ea0f2faa3e304b8758ca94f94816bd42fc3b211a88c46d70b28d0dc386d96aeee4ad9a0a", 0x1000}, {&(0x7f0000003d40)="cff85fa2e3d9092586fe8b90a64f7b1b067000328196c864fffde3ca79b4122d80705af4e3a65056e99e5dc312f6457cd0fbfa73b8b86bfe85aae8f923058dc63a8f69aa77", 0x45}, {&(0x7f0000003dc0)="c835e4313dd3efded7d4db5eba751ea7998df51da5d1bc2819104a0fa3a998abd336b877e94816a3d92d2495d24d1e55cfd7382e4dd5c7bdaa68dcd0a7806f58ac7452e776a05668ba57d4e262745d62ffb882a0c006875fc1970a01d2163b53121ebd9e86a6b02b65d178b545c9b0959a2d6d736b696fb5efeb8ba0944f015d5fc6c0099ecd8890b9077cc773221a82dbe187c349ea433082c1617dd363a1e5029d9f9748b16a55db706951d40b0be5227008586037a9a22623b01120099ffe18e3df88f0908714869885ace7edb44c40cea5e4a34aaff8442e6f0c8ed1b4edb1f266927ec513cfc97f6d2cfc81bef7c9b0d820616b", 0xf6}, {&(0x7f0000003ec0)="19f0ace42a7fba5b1da8fc357b9ba33a66070c4f89de20eedcdb51a986813e494d4d7bf4a246fd9656f85af986998285455426a5fb2e8aa78758ea5059b25a2d2eadad27178083a6dd97a0e45cf82c38713dfe38b7d4fe03c9da1b1597fff5d4ceb80c9404fe09a770a9ec24aec19ae70d40bee6a2fc993e28d7e1bd4516a43439819014eff927b3a17ae8e1bf2a93e430c3aba628c3fe17b16677d8c121677d043c5a8b592c6ee767c2b4ff25c251a4f546b3c31e", 0xb5}], 0x6, &(0x7f0000004140)=[@cred={0x20, 0x1, 0x2, r36, r37, r38}], 0x20}, {&(0x7f0000004180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004300)=[{&(0x7f0000004200)="8a960ca184f9cb42e018f65da057972703fa8112aa62a0e44e7fdc76e9e9dc75c22804441a50d738c1f6c9d4b50cac13427cf33c2289a33af1ed0694c50b8da9d08696e80a5e67af3362e74574db66e14fd5fd5a4fbe4dae75380f629553db24723babb005b6af1a88a27fe19125b5ad624ff7d7fd29a720e0d0ec812c88809a076186f27301a7a8b069cac638ae0c59e987decca9aa16c70a23a5a33466c692f66aeab3f8584f62903ba76c75e04fca065cba7e615d1762610d4ff78bd9a935b787e83e4d0c935327971caa8b034eee79178921d4d81fbcffb78f6da0e9627405ac21133b004886d959ad657f1022fa772449d0ebdc09", 0xf7}], 0x1, 0x0, 0x0, 0x1}, {&(0x7f0000004340)=@file={0xbf57dc7b80760016, './file0\x00'}, 0x6e, &(0x7f0000004580)=[{&(0x7f00000043c0)="3a3e9d278b06c43daac51227c5a900c13f65fa9ad13e281ae011472a03d40ce07448f064de13888025272d7de0b484", 0x2f}, {&(0x7f00000050c0)="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", 0x1000}, {&(0x7f0000004400)="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", 0xfc}, {&(0x7f00000060c0)="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", 0x1000}, {&(0x7f0000004500)="81d3a573284eb43730175719addc20e27a63920de67412297997ec0204c70bb7b94737c0aab7e9e3dae84ed74b99ff355ac48cd5f19b1f0b3a047105d1531b624ab2", 0x42}, {&(0x7f00000070c0)="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", 0x1000}], 0x6, &(0x7f0000004a80)=[@rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @cred={0x20, 0x1, 0x2, r39, r40, r41}, @cred={0x20, 0x1, 0x2, r42, r43, r44}, @rights={0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r45, r46, r47}, @rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0]}], 0x128, 0x40010}, {&(0x7f0000004bc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004f40)=[{&(0x7f0000004c40)="8cdb866385c70909205bdd1a355ced0db80d99e88611542df2b5f26ce7612ae7b36517d7d8c7687ee479bdc808f08286b727ec84326c3ea91f2e4b6f53cab55e74eeaaf976b1767add7f85205e437834691fa2e87bc5422b3a3cf14c583dd361e36d96a8a671cba1ae9061d19b9cb3afc1227981764192274d549cc4fb4b4d33f245867be7ee987ba1202ca25a1f07218d30f34e976b921f31047109d4aa324f638693ad2a93d07758942c", 0xab}, {&(0x7f0000004d00)="32481d5c044324a12e3df723d94de81df8885b0488241afc277db7c803955643a72eab4112114ebd9261425fc03b51a89fa87b556673eb3d4be36bad59cb7647d93d6440df2ca8907c62011a324471c38e90def4f7771d1c6c101074102d4b46164716a13e5d33bc84f7d263d3557b52cc991fc1bc6c98c81acf9d7b", 0x7c}, {&(0x7f0000004d80)="aa50e44c363566908ae1f3804a148fa453fa353cb16914eec56402920b59b6d3", 0x20}, {&(0x7f0000004dc0)="d21eab33a853b0ad928ae929b74ecd1980884163cb533f1d5aaef7c54102c17d3c6ef113262d0bc6", 0x28}, {&(0x7f0000004e00)="e1074246a8cefaad07465dd7c5e2295ebe8be187", 0x14}, {&(0x7f0000004e40)="3b3a323f4c346396f282362e1e7663c804a46b15690b22ea661a406278a71718133f9be7e49787dca53a642c9af4b4077e544af9849ec3006518c02de546e19b7ffa2d54718a410bfda325f81cb8fb2225d58a98abc49669d900d0e3b74b81b3a0ba0115cd29a3aebb5b129a1c7a31344256ad7aface8b449476ce63d49730895b3a06755bc8db6da3d595eceb7966d716c8da5b2a49ff90ebc19bcfc23c96e39a0da64cff64a27df78bd32fa4d0314c7aac34da1f71e25ecc30c08498ecdb8f55b675a47029e189a73e9791517290c6727daa86ba0cd977b79caa4507d18329078d404e", 0xe4}], 0x6, &(0x7f0000008280)=[@rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r48, r49, r50}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @rights={0x18, 0x1, 0x1, [r0]}], 0x80, 0x4000810}, {&(0x7f0000008300)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000009700)=[{&(0x7f0000008380)="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", 0x1000}, {&(0x7f0000009380)="a32f3c6f2bce103330a5b7201db205417a0d3d1e930996ae70cfa14ff8687cd4b1f3d0d308dd6f33bc2936d363d56c4cde98f82b4b7529a28d754c3fe5a3c3765753cc5da4e3d922bcd259ec6f39d4eb8b038b9c8038aec5e012897f35335087e384b9268bcaee4490b1a64db255129199092918ccb3c2ab272967d924b41df4cbab", 0x82}, {&(0x7f0000009440)="3d50f4619ef1fce635c324913a7ee19a35312883bff97a8ca343e6724145c39b8c7bdbdd32c7a22553", 0x29}, {&(0x7f0000009480)="87063b0315d5f435f8b362d0888a6928ab1542be072286553a02f1c9470341ae9a9d8785e9179b7fbdf637f9849fcca8206bed469ded552aafc755ec765ced7e1f4ea9526166e2d7862bf59e16db2497adf9c6cef1bc18d876e1939a450e6eaf14ecfae846321067717f1e64ec34374a3af571fa70dd58fffd8469409e720e5eaf7e64fe9a89a71bfc20178320af1838a4e39fe5a1efa627dee925b85dcc4fe38609b4a1fce9f197208f53eeef18d2d57d329817e85156cee76d1f751a4141b7d34df6af105c5e3fd8013f40af79593be2229f3b6abd4be48138a59c45625d1bd41ebcad86037d111356f3f6e2252da4bd6da72b", 0xf4}, {&(0x7f0000009580)="dc01a869659b0ba0a23b0682e6da8b1eac9b47f2bdddc019bc3a1dfc38b3a712fc4edf7cacb8e3ad195c379af8578b63420ed6480e82af78feeaea1de727d9040f031b1c0924a1c1760dfd38dc69996b1551f47e218415952413c964f408ebff46d99282bf8b17248a3239f1d72df39bf5b36b5790bda2830cca57b94c38e589097c6ce1bd769e", 0x87}, {&(0x7f0000009640)="ef0bab2f0c3dbf7e3b5ae25a6e4898086f3dc0c46b09efe67dce4e0f1b48c819412feb25cc0620ac7198046ef5dd6b35d287b64623cccbfa25c8c547730ca21d134f8b6fb7aaf1e7043eb60e6f6e83bd1669c71ec9b8edcb91fb023812a484e5a61a7a1aca87dfe7ee71f784e482e925d37327ea195269dca0cee6afe0651cf91830c1f943ab5736a2e1bbf3e5d03ef12a1f8b3c0c65560cf1", 0x99}], 0x6, &(0x7f0000009c40)=[@cred={0x20, 0x1, 0x2, r51, r52, r53}, @cred={0x20, 0x1, 0x2, r54, r55, r56}, @rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r57, r58, r59}], 0x78, 0x4048000}], 0x9, 0x24000094) getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000004fc0)=@known='user.syz\x00', &(0x7f0000005000)=""/171, 0xab) 05:58:35 executing program 6: socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') readv(r0, &(0x7f0000000800)=[{&(0x7f0000000700)=""/84, 0x54}, {&(0x7f00000008c0)=""/27, 0x1b}], 0x2) 05:58:35 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r1 = timerfd_create(0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x810, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x8000000000081800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) r4 = dup2(r1, r3) ioctl$RTC_WIE_OFF(r4, 0x7010) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000380)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5e8, 0x428, 0xf0, 0xf0, 0x340, 0x340, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, &(0x7f0000000140), {[{{@uncond, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x5}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1, 0x9, @multicast2, 0x4e21}}}, {{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x1b}, 0xffffffff, 0xffffff00, 'bridge_slave_0\x00', 'bond_slave_1\x00', {}, {0xff}, 0xff, 0x0, 0x41}, 0x0, 0x100, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xa}}, @common=@set={0x40, 'set\x00', 0x0, {{0x2, [0x5, 0x9, 0x3, 0x7fe0000000000000, 0x2, 0xe5e2], 0x5, 0x2, 0x5}}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x100000001, @dev={0xac, 0x14, 0x14, 0x16}, 0x4e20}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@udp={0x30, 'udp\x00', 0x0, {0x4e23, 0x4e24, 0x4e24, 0x4e24, 0x1}}, @common=@ah={0x30, 'ah\x00', 0x0, {0x4, 0xffff}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x9}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x1b}, @dev={0xac, 0x14, 0x14, 0xf}, 0xffffff00, 0xff000000, 'dummy0\x00', 'syzkaller1\x00', {0xff}, {0xff}, 0x6f, 0x2, 0x4}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x2}}, @common=@set={0x40, 'set\x00', 0x0, {{0x800, [0xfffffffffffffffe, 0x3, 0x6, 0x40, 0x0, 0xffffffff], 0x95d, 0x1ff}}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x1, 0x1}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x648) close(r2) 05:58:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = memfd_create(&(0x7f0000000080)='/dev/kvm\x00', 0x1) ioctl$VT_RELDISP(r3, 0x5605) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x8000, 0x0) ioctl$TIOCMBIC(r4, 0x5417, &(0x7f0000000040)=0x2) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="79611b73508dff7f7fc900dad1"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x800, 0x0) 05:58:35 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_client='access=client'}, {@cache_loose='cache=loose'}]}}) [ 226.051913] attempt to access beyond end of device [ 226.056951] loop4: rw=12288, want=8200, limit=20 [ 226.091321] attempt to access beyond end of device [ 226.096416] loop4: rw=12288, want=12296, limit=20 05:58:35 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) remap_file_pages(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r2, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x3b}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x6}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e24}]}, 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x80) [ 226.122122] attempt to access beyond end of device [ 226.127320] loop4: rw=12288, want=8200, limit=20 05:58:35 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x3, 0x402) r1 = syz_open_dev$mice(&(0x7f0000000300)='/dev/input/mice\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/163, 0xa3) write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46fcffffffff2d64916cb0bed66c42030000000000"], 0x18) socket$inet6(0xa, 0x4000000001, 0x0) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000000000000000000040000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000030000000023449142fe38ea0875f71f341acf94521e2efe991a51a5d8475deb5fb59ee1f29e"], 0x8f) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/132, 0x84) 05:58:35 executing program 6: socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') readv(r0, &(0x7f0000000800)=[{&(0x7f0000000700)=""/84, 0x54}, {&(0x7f00000008c0)=""/27, 0x1b}], 0x2) 05:58:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000de5079f030b65d20d7c1e331a668df3f35508109c772a3da41166a02ba5bf9f1cdfa93ea2d02afced0ca351728bee71226e1ebc66da9c4ed25f66d60c63bf5b916db68a7a2438981a0044b1b49bf819f8d56dc326ca4e72933a843ec5809c086c0ff03f0e489a7f7ace27ce16c94cdc6b9536008c7b2138659c1bcbc8a89b960bcb92d07774bc8d8e1f5c478153a4c68c495e5f36b394884e9510d6f7361900fcb3e56e01aa6", @ANYRES16=r1, @ANYBLOB="070400000000000000000a000000"], 0x14}}, 0x0) [ 226.178573] attempt to access beyond end of device [ 226.183753] loop4: rw=12288, want=12296, limit=20 05:58:35 executing program 7: r0 = socket(0x20000000000000a, 0x2, 0x0) bind$inet6(r0, &(0x7f0000012000)={0xa, 0x0, 0x0, @mcast2, 0x1000}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x19, &(0x7f0000000080)=""/16, &(0x7f0000000040)=0xffffffffffffff01) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) [ 226.223356] attempt to access beyond end of device [ 226.228403] loop4: rw=12288, want=8200, limit=20 [ 226.250384] attempt to access beyond end of device [ 226.255426] loop4: rw=12288, want=12296, limit=20 05:58:35 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_client='access=client'}, {@cache_loose='cache=loose'}]}}) [ 226.337906] attempt to access beyond end of device [ 226.342961] loop4: rw=12288, want=8200, limit=20 [ 226.392705] attempt to access beyond end of device [ 226.397719] loop4: rw=12288, want=12296, limit=20 05:58:35 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)) 05:58:35 executing program 5: seccomp(0x0, 0x0, &(0x7f0000000080)) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="02") r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r2 = socket$alg(0x26, 0x5, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000003580)={&(0x7f00000003c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000034c0), 0x0, &(0x7f0000003500)=""/106, 0x6a}, 0x0) sendto$inet(r0, &(0x7f00000006c0)="ba671368d1010000004900000001000000018be49e9301442865319997d0efdb2f54b6a10c7327757482bfce945c2a91fb8dfafc1d3f56bc543ab87321e12cca08a744a2d128b00634bc882151d36809229a96bc3437ef159489384ade077ba295eac2882dbfd3781dd4d4e609c42628dbb709b3eb1fa030009045dd98b9e6d77b6cec9ceb685595d43995e0f04c32260943add79831e661c6a351dedc8b9d220fbf9fb6e44fb6a629ce9a82025124fec9f3ee751f7da0cd7e799be88ddbdac20b48e890ff81d7fa28c2d017d7932f2569038740461accd4582f576e4fdb6150a3399f8266bc19eb943648ad1ad81420ed6c382436e474390c", 0xf9, 0x0, &(0x7f000069affb)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ipddp0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f00000000c0)={@mcast2, 0x67, r4}) 05:58:35 executing program 2: r0 = accept(0xffffffffffffff9c, &(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f00000000c0)=0x80) recvfrom$inet6(r0, &(0x7f0000000100)=""/4096, 0x1000, 0x40000100, &(0x7f0000001100)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, [], 0x1c}, 0x6}, 0x1c) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f00007d0000)={&(0x7f00008ddff4), 0xc, &(0x7f0000944ff0)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x18, 0x5, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x4}}, 0x1c}}, 0x0) 05:58:35 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket(0x2000000002, 0xb, 0xfffffffffffffffe) getsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000140), &(0x7f0000000180)=0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='sessionid\x00') sendfile(r1, r2, &(0x7f0000000000), 0x80000003) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) 05:58:35 executing program 6: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000002c0)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x4d5) r0 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') readv(r0, &(0x7f0000000800)=[{&(0x7f0000000700)=""/84, 0x54}, {&(0x7f00000008c0)=""/27, 0x1b}], 0x2) 05:58:35 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, &(0x7f0000000140), &(0x7f0000000240)=""/250}, 0x18) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter\x00') getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000440)={{{@in=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@local}}, &(0x7f0000000080)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000540)={{{@in, @in=@dev={0xac, 0x14, 0x14, 0x1a}, 0x4e22, 0x5, 0x4e20, 0x80, 0x0, 0x20, 0x20, 0xbf, 0x0, r3}, {0x9e, 0x6, 0xb5a, 0xd3, 0x9, 0xbc7, 0x8000, 0x10001}, {0x1b73189c, 0x0, 0x20, 0x65a}, 0x0, 0x6e6bbc, 0x1, 0x1, 0x2, 0x2}, {{@in6=@mcast1, 0x4d5, 0xff}, 0xa, @in6=@mcast1, 0x3503, 0x0, 0x1, 0x9423, 0x8, 0x400, 0x9}}, 0xe8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xc, 0x20000000004, 0x4, 0xb, 0x0, r1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r4, &(0x7f0000000040), &(0x7f0000000180)=""/181}, 0xe) 05:58:35 executing program 0 (fault-call:8 fault-nth:0): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_client='access=client'}, {@cache_loose='cache=loose'}]}}) 05:58:35 executing program 5: r0 = getpid() perf_event_open(&(0x7f0000014f88)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, r0, 0x0, 0xffffffffffffffff, 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x52dc, 0x2400) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000080)=0x40, 0x4) 05:58:35 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85714070") r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x2, 0x2c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, &(0x7f00000000c0), &(0x7f00000006c0)=ANY=[@ANYBLOB="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"]}, 0x333) 05:58:35 executing program 7: r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x300, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) connect$l2tp(r1, &(0x7f0000e92000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @remote={0xac, 0x14, 0x0}}, 0x2}}, 0x2e) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f00000000c0)={{0x87, @dev={0xac, 0x14, 0x14, 0xb}, 0x4e24, 0x2, 'lblcr\x00', 0x2, 0x6}, {@multicast2, 0x4e23, 0x3, 0x8}}, 0x44) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@sack_info={0x0, 0x9, 0x7}, &(0x7f0000000180)=0xc) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000001c0)={r3}, 0x8) getpeername(r1, &(0x7f0000000740)=@pptp={0x0, 0x0, {0x0, @local}}, &(0x7f0000000540)=0x80) [ 226.504797] FAULT_INJECTION: forcing a failure. [ 226.504797] name failslab, interval 1, probability 0, space 0, times 0 [ 226.516353] CPU: 0 PID: 17308 Comm: syz-executor0 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 226.524868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 226.534238] Call Trace: [ 226.536859] dump_stack+0x1c9/0x2b4 [ 226.540526] ? dump_stack_print_info.cold.2+0x52/0x52 [ 226.545736] ? perf_trace_lock+0x49d/0x920 [ 226.550003] should_fail.cold.4+0xa/0x11 [ 226.554081] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 226.559201] ? __f_unlock_pos+0x19/0x20 [ 226.563192] ? lock_downgrade+0x8f0/0x8f0 [ 226.567337] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 226.572863] ? proc_fail_nth_write+0x9e/0x210 [ 226.577365] ? kasan_check_read+0x11/0x20 [ 226.581517] ? lock_acquire+0x1e4/0x540 [ 226.585486] ? fs_reclaim_acquire+0x20/0x20 [ 226.589806] ? lock_downgrade+0x8f0/0x8f0 [ 226.593954] ? check_same_owner+0x340/0x340 [ 226.598271] ? fsnotify_first_mark+0x350/0x350 [ 226.602846] ? rcu_note_context_switch+0x730/0x730 [ 226.607772] ? fsnotify+0x14e0/0x14e0 [ 226.611571] __should_failslab+0x124/0x180 [ 226.615808] should_failslab+0x9/0x14 [ 226.619610] __kmalloc_track_caller+0x2c4/0x760 [ 226.624277] ? strncpy_from_user+0x510/0x510 [ 226.628689] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 226.634248] ? strndup_user+0x77/0xd0 [ 226.638047] memdup_user+0x2c/0xa0 [ 226.641578] strndup_user+0x77/0xd0 [ 226.645208] ksys_mount+0x3c/0x140 [ 226.648752] __x64_sys_mount+0xbe/0x150 [ 226.652719] do_syscall_64+0x1b9/0x820 [ 226.656611] ? syscall_return_slowpath+0x5e0/0x5e0 [ 226.661543] ? syscall_return_slowpath+0x31d/0x5e0 [ 226.666468] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 226.671481] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 226.676328] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 226.681516] RIP: 0033:0x456a09 [ 226.684702] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 05:58:36 executing program 6: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000002c0)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x4d5) r0 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') readv(r0, &(0x7f0000000800)=[{&(0x7f0000000700)=""/84, 0x54}, {&(0x7f00000008c0)=""/27, 0x1b}], 0x2) [ 226.703601] RSP: 002b:00007f3ecbe13c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 226.711308] RAX: ffffffffffffffda RBX: 00007f3ecbe146d4 RCX: 0000000000456a09 [ 226.718572] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 226.725836] RBP: 00000000009300a0 R08: 00000000200004c0 R09: 0000000000000000 [ 226.733103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 226.740372] R13: 00000000004d1750 R14: 00000000004c6e7f R15: 0000000000000000 [ 226.772104] attempt to access beyond end of device [ 226.777114] loop4: rw=12288, want=8200, limit=20 [ 226.782499] attempt to access beyond end of device [ 226.787658] loop4: rw=12288, want=12296, limit=20 [ 226.792874] attempt to access beyond end of device [ 226.797863] loop4: rw=12288, want=8200, limit=20 [ 226.802726] attempt to access beyond end of device [ 226.807844] loop4: rw=12288, want=12296, limit=20 [ 226.863333] attempt to access beyond end of device [ 226.868394] loop4: rw=12288, want=8200, limit=20 [ 226.881027] kernel msg: ebtables bug: please report to author: Wrong len argument [ 226.889952] IPVS: set_ctl: invalid protocol: 135 172.20.20.11:20004 [ 226.908592] IPVS: set_ctl: invalid protocol: 135 172.20.20.11:20004 [ 226.913443] attempt to access beyond end of device [ 226.920078] loop4: rw=12288, want=12296, limit=20 [ 226.925358] attempt to access beyond end of device [ 226.930398] loop4: rw=12288, want=8200, limit=20 [ 226.936289] attempt to access beyond end of device [ 226.941404] loop4: rw=12288, want=12296, limit=20 05:58:36 executing program 3: r0 = socket(0x10, 0x8000000000000003, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000140)=r1) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80000) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f00000000c0)) write(r0, &(0x7f0000000040)="240000001a0025f00018000422edfc0e8000000000000000000000010800020048050000", 0x24) 05:58:36 executing program 1: r0 = memfd_create(&(0x7f00000000c0)="76626f786e6574310097058bf080cee62d030a9cf0d65cef940d980e71bc26f0468b0f126caa79607c57dc7c7e427724be79180bc165d48ee4fce3c7", 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="260f38cad30f20c035000004000f22c0b9d4080000b80000c0feba000000000f300f2302440f20c03501000000440f22c0f40f20d835200000000f22d8c4c1116482450000000f20c666baf80cb85217f080ef66bafc0c66ed", 0x59}], 0x1, 0x0, &(0x7f0000000480), 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000041ff3)='/dev/snd/seq\x00', 0x0, 0x20002) r2 = dup2(r1, r0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000040)={@local, @empty, @ipv4={[], [], @broadcast}, 0x80, 0x4, 0x3, 0x400, 0x34ec, 0x40000006, r3}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000041f74)={0x0, 0x0, 0x0, 'queue1\x00'}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) write$sndseq(r0, &(0x7f0000000280)=[{0x9, 0x100000001, 0x0, 0x0, @time={r4, r5+10000000}, {}, {}, @result}], 0xfffffe53) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000002c0)={0x5a}) 05:58:36 executing program 0 (fault-call:8 fault-nth:1): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_client='access=client'}, {@cache_loose='cache=loose'}]}}) 05:58:36 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x29a, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000000000000c9b5da01f26e756227af99d69c3363389beb9d9efac53c2c587d5c7ac883e6fd0295fc3743000611154083879337f74fa601c228a8db86a693aae2c291d57c82d867f0"], 0x8, 0x800) msgctl$IPC_RMID(0x0, 0x2) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @local}, 0x1c) accept4$inet6(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f0000000240)=0x1c, 0x0) 05:58:36 executing program 2: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mlock2(&(0x7f0000a93000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000a94000/0x1000)=nil, 0x1000, 0xe000, 0x3, &(0x7f0000b18000/0xe000)=nil) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f0000000100)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000140)={r3}) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x101000, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000080)=0x9) ioctl$TCGETA(r4, 0x5405, &(0x7f0000000040)) 05:58:36 executing program 6: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000002c0)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x4d5) r0 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') readv(r0, &(0x7f0000000800)=[{&(0x7f0000000700)=""/84, 0x54}, {&(0x7f00000008c0)=""/27, 0x1b}], 0x2) 05:58:36 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) openat$cgroup_ro(r1, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000002800000850000950000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x13, 0x0, &(0x7f0000000040)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x27}], &(0x7f0000000140)='GPL\x00', 0x41, 0xffc4, &(0x7f00000004c0)=""/167}, 0x48) flistxattr(r1, &(0x7f0000000380)=""/224, 0xe0) 05:58:36 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)) [ 227.214908] Unknown ioctl 1074275332 [ 227.222195] attempt to access beyond end of device [ 227.227241] loop4: rw=12288, want=8200, limit=20 [ 227.235912] Unknown ioctl 21509 [ 227.261617] FAULT_INJECTION: forcing a failure. [ 227.261617] name failslab, interval 1, probability 0, space 0, times 0 [ 227.263886] attempt to access beyond end of device [ 227.272990] CPU: 0 PID: 17365 Comm: syz-executor0 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 227.277874] loop4: rw=12288, want=12296, limit=20 [ 227.286329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 227.286337] Call Trace: [ 227.286369] dump_stack+0x1c9/0x2b4 [ 227.286393] ? dump_stack_print_info.cold.2+0x52/0x52 [ 227.311916] ? perf_trace_lock+0x49d/0x920 [ 227.316174] should_fail.cold.4+0xa/0x11 [ 227.320246] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 227.325352] ? perf_trace_lock+0x920/0x920 [ 227.329584] ? kasan_kmalloc+0xc4/0xe0 [ 227.333468] ? strndup_user+0x77/0xd0 [ 227.337262] ? ksys_mount+0x3c/0x140 [ 227.340969] ? __x64_sys_mount+0xbe/0x150 [ 227.345117] ? do_syscall_64+0x1b9/0x820 [ 227.349179] ? proc_fail_nth_write+0x9e/0x210 [ 227.353673] ? kasan_check_read+0x11/0x20 [ 227.357831] ? lock_acquire+0x1e4/0x540 [ 227.361800] ? fs_reclaim_acquire+0x20/0x20 [ 227.366116] ? lock_downgrade+0x8f0/0x8f0 [ 227.370267] ? check_same_owner+0x340/0x340 [ 227.374583] ? lock_release+0xa30/0xa30 [ 227.378559] ? rcu_note_context_switch+0x730/0x730 [ 227.383484] ? __check_object_size+0xa3/0x5d7 [ 227.387981] __should_failslab+0x124/0x180 [ 227.392209] should_failslab+0x9/0x14 [ 227.396005] kmem_cache_alloc_trace+0x2cb/0x780 [ 227.400684] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 227.406225] ? _copy_from_user+0xdf/0x150 [ 227.410373] copy_mount_options+0x5f/0x380 [ 227.414602] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 227.420147] ksys_mount+0xd0/0x140 [ 227.423684] __x64_sys_mount+0xbe/0x150 [ 227.427656] do_syscall_64+0x1b9/0x820 [ 227.431535] ? finish_task_switch+0x1d3/0x870 [ 227.436028] ? syscall_return_slowpath+0x5e0/0x5e0 [ 227.440953] ? syscall_return_slowpath+0x31d/0x5e0 [ 227.445878] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 227.450898] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 227.455756] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 227.460937] RIP: 0033:0x456a09 [ 227.464126] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 227.483021] RSP: 002b:00007f3ecbe13c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 227.490737] RAX: ffffffffffffffda RBX: 00007f3ecbe146d4 RCX: 0000000000456a09 [ 227.498002] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 227.505266] RBP: 00000000009300a0 R08: 00000000200004c0 R09: 0000000000000000 05:58:36 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000002c0)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x4d5) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') readv(r1, &(0x7f0000000800)=[{&(0x7f0000000700)=""/84, 0x54}, {&(0x7f00000008c0)=""/27, 0x1b}], 0x2) 05:58:36 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f00000001c0)={0x22, 0x401}) move_pages(0x0, 0xa5, &(0x7f0000000240)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000006000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil], 0x0, &(0x7f00000003c0), 0x0) kexec_load(0x3f, 0x3, &(0x7f0000000140)=[{&(0x7f0000000000)="57a17f02699acd6b0b31f09b64e6f3bbccdd5a58514f43b1678598b6e81667f17327a2af88c29bbaab2468b77f5142410a062026cc4228a3743390fb8ef0f506c757894041fa95b4e0755d12aa06407f0bbb70a7879c03e7263c82a139e12fc51085d689f2cb69fa91d8682f63d601b1a172e56a0db2ecab3d252d6d5401899b1486c460900dcbcb531c7351be2c524f325342fc08a56e843f9a8af41925e846f71777bc9148fd47affae0b9eb4f91fe", 0xb0, 0x4, 0xfffffffffffffffc}, {&(0x7f00000000c0)="8b4a10f4d9a4439c5eebeec2fe3694d6ec0c5673f5ac4774888648c0c7d014489951d02f5fb403a84861bfc4c8a7c382616ae9f82d", 0x35, 0x4, 0x3d6}, {&(0x7f0000000100), 0x0, 0xe4b, 0x8001}], 0x3e0000) 05:58:36 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x9, 0x80000) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000007d00)=0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007dc0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000007ec0)={&(0x7f0000007d80)={0x10, 0x0, 0x0, 0x1080000}, 0xc, &(0x7f0000007e80)={&(0x7f0000007e00)={0x70, r3, 0x0, 0x70bd26, 0xffffffffffffff6d, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xffffffffffffff96}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x14}, 0x1) fcntl$lock(r0, 0x7, &(0x7f0000007d40)={0x1, 0x7, 0x0, 0x200, r2}) [ 227.512530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 227.519792] R13: 00000000004d1750 R14: 00000000004c6e7f R15: 0000000000000001 [ 227.534175] Unknown ioctl 1074275332 sendmmsg$nfc_llcp(r1, &(0x7f0000007bc0)=[{&(0x7f0000002ec0)={0x27, 0x0, 0x0, 0x1, 0x3ff, 0x3, "588e48938e968d7c5af534f7f40ba551a515246a4b55d1edb7fe709b96c1cfd4f65485f377151406fbc2cc48fcb794714a0e8e8e05bd3ee290598a3ab33f2c"}, 0x60, &(0x7f0000003040)=[{&(0x7f0000003bc0)="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", 0x1000}, {&(0x7f0000002f40)="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", 0xfc}], 0x2, &(0x7f0000003080)={0xb8, 0x118, 0xb0, "0993757d9f0b8b284a0a237adee3622f7c55fffc743860e707127d72ccb0fa9f70e90e3394af26f844be8a3f759f3f22b908233345000945849d94b7afa1d8d1aa52b675236dbc756d0486f03df2d7723f8c672f0eeb64ddf5ce1271633e0af0d2939469f8695d6e557c6dd80ab768ad88b58693d781c4b0556eea75bc704d0789deaf6e2b4d6052a9ae893266ab3f60f01956cd9caa1b8081747e8739d459befe4aca4b0e1ee9"}, 0xb8, 0x4051}, {&(0x7f0000003140)={0x27, 0x1, 0x2, 0x0, 0xfffffffffffffff9, 0x6, "97a512f7e183af7ee629baedce91037a290b4302db30f1f5a9e8d14bdaea3d18cbdaff2bc4a9ef2d160e8059f215f83d5eb75feea4c164952801d58fc998bc", 0x34}, 0x60, &(0x7f00000037c0)=[{&(0x7f00000031c0)="b50a7fdd7e32901a90d8537ca51a23db9fabb07ac38d49a23a7823f277286ba7540e0452577269c3e6ef0d5fe3fff04ce04641f9dbf038337016262bd7d1036994ec955126cddf15c541ff262e913649f9fddbfc1297b88a84f47a93654537bbb8909cbd36a23e4cab6324deda1004dcbddc36", 0x73}, {&(0x7f0000003240)="f782ced4edf1010a2764bfa13ce38a8d6aee33278691f4bcbc8d472ff8b89aefd46fac6c5a709e450f77f89605da309e5517abdd865d8075504f70863a57742c997b839759e124a8aaca865c2c75e1c82f257d441e492a4c7656119a51904e89a8580364716460b023c2deae9a2dc72f05965d25f41d9313320fe5ce8d39eccd86af5b6d2afac48582a49c7a52aaecfc43b1abbd1b85b3dabe2c96e97a8b021f533a7c9abd7c0eeed591ff7ffee98eb9c79ec8cf9382be8ae45600158aa0f1843f4fcf9899454d768393a55fd89504bce7", 0xd1}, {&(0x7f0000003340)="3c048ca4cae25c2bb39e0f102f09300f921a40fc9a66f21e500c7b4dc8c29258fb6d02ad28146b30ff771adb32d5e16105b4865723db194a615b70ed4f73d0547926a3662577e3da2da5c2d4c87f416073b3eec002a7216a3cfd0a29fe2edf607f00efd996af6ce54d1272b33a56bec434920cf158f61500c5f524cc319ce7830c75094f50f50a1d2f0bb5a847746f856e5e7516c6f691d7930ed018885d021702ae3baf6fcf0d1193cfc8f4cf1212285fce43a7a21de03dbb4099498f242869b775d181c40bba80949e090010f3bd4851d01266378a3c13bfa4685a9422ce64", 0xe0}, {&(0x7f0000003440)="c0573edfca3ae8514ac479f6df69a3cebf46687a126d0e96e392077c7cae87f788ea0fdb19bba635685f9d78a88e0297f659e6e3561236327c8e43bf24c1e7e597e516bd4291ca01873edb1264ccd01f6079d594bcc03e03ca714e9c98c751131369571327fa90a3554bde87a7416a9f517b3828e178c6c2f7e8a2a79507a272d91d5139f01b6818fa1cc1b6b96354f994541ecd6a2575ead0a95579a26a275870e7015dd3d3dcfc95f6c4b46bbc71fd771477b4b5ac591396431236a7960c005231d3533ec1cf4ca8c0ecf80a6e72724c81bee6c7a3166dff674ae6bdf0", 0xde}, {&(0x7f0000003540)="4fb9f7f28d667712b4c5e30aa7bfc3989a792c8f9117ac0a80d230357001679afa5fdd8d9cd7654ff3f203ec2632d5ec3e717b00be79d5151879c91054045ec062d379785fe0fb4882b119b6d7ead881bc0d6db478940e512164a24e2466a9884bd01713793f8dc1359be17d3cbf7e64f485bba8bdc290b490400579db336052ddeb5e2c94d14adff54eb09e6b316197618aedeab886d326a711335d67e445f7431c5d95549417d6d226f2d3b62722e26e738444584128e365c2df530e", 0xbd}, {&(0x7f0000003600)="57a6bc698afd699d90c5037e36dba81eadb094c21ba8342e4deae4699408e4e215649c8c5a8fe2521be85ec253971b49fac155d8f5bd7bbeda76a7efcc58896f614ce2302acb15b688213abd08aaf282bbafa7b00df3535c9cdee662ca8eb435cce7ea6f37acc12362b2c7469fbbdf5fdcb1c0566e6530e535677b50050428e0119bad40881151499e0ae88bdb38b4d3a26704f059b61a20949111d5411f8e60a902811928350c321851325760977536bcee825b542638e3f51bc9beb0e2c49d3fbc326586e3a513da780a37e5e37e0220", 0xd1}, {&(0x7f0000003700)="657099a3672d72fccb2d4cf229e982716507a65fbb3c85448adceb6a7b3c512affb3a78ac7936415e616949e0db9c88531c6d52242af2140d54420ded431d17c51254a3c6d67", 0x46}, {&(0x7f0000003780)="9f17fe2cbc321607a8e91539d78399c86c10d573", 0x14}, {&(0x7f0000004bc0)="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", 0x1000}], 0x9, 0x0, 0x0, 0x4}, {&(0x7f0000003880)={0x27, 0x1, 0x2, 0x6, 0x4, 0x7fff, "5c1fda490962d1d11be6c7b4e9c4d122de1d4a076b550d0451653270b099113d11465f3343e2c2ea985e2eef9a099deaef4cb08384296ebc9294e66212af4c", 0x34}, 0x60, &(0x7f0000006e80)=[{&(0x7f0000003900)="1efedc83b1f50ee6f38ba8613c59b963ab8ba3b9fb0dddedb7bb0aed1cefa134555fb7ff7ecec47d74bfa2c27156fe65ab28633cb76380cfdf209c724089a57ba07dc7f65a478623b3c1132485b54fb5b4c4f63152f457edd290fd48c3eb588a9c7bca567dc2a570a6f7e984695e2e0a4171b2713bb7f118c72ec79c3c8a69290823ff7629887600cd0e45dbe15a9a662989ac0d0bf6674d0c8a44b22acbb8cf60a0ee5f95c2c1dd62854c0faf0c1051ea2ba4dc0aa33532a798b254364c46d3cfe3d4b4d8047d7556b1500fac08e8f4a35829848855bef00da015754a5bcb061e3a54e15eaf8946bb0ea494d3456f2a50b459e325e5c1df0a41cd9025740e", 0xff}, {&(0x7f0000003a00)="ee442781af1d3014189870d6b80092569f489a8a383d928dcb6aef2861255670f73063de5a308d7995894536a5b1aa47b8e2c0416a730a2e43443fca0ef261bb616fd8a08ca7edc68c0dd819c5c6c2380398e942cb6ba4a29b028fbb3f382883670ecf8c85304f121a5569eac517bcc0bf5e256b4c8950876ab6f5914f5eb5bd1f9245d6b08557f91e6c79e45ecd91893b765b350fef710f1599d8ffa033081bf0b34a42c6fe1bfd875e9b9ca2d0b51d75aad5b2863fb7a0529104f56cdab72ffef02ddb", 0xc4}, {&(0x7f0000003b40)="e87d1c6f1a", 0x5}, {&(0x7f0000005bc0)="859156dc3a90899a42ddbf061000d5547f0edff65ca7fa57f7199a49802b3f84b3b10c2256d6d0ea53707396957ea8d25901a42a3df96b36a1e0d84fff9da5c96b606e8cfc663be78e7950ee61a2d2a7891c791d53315e5b5b1bb0d8d3d645356676bba368e0fcf09741d4d8c8cd28f990490976a77dcade556256dfc7c96838cb85f5a2c48188ecceb446b0de611e66c5e5c014864adf51b25f2f4afc3fe875a3e3b326200adc6973e80b1c0772588cf96d1c77bedcf42fc9fd0f292d274b90b409de205b4aa8568064789690ad028ada6e0e5132d0a2bc33a333223a1e8e4e55e8cd1122063f9ab4d0abfad02186f42d6d30e7cb289757f7e6af89d7fa6324771b28e1702be4cccecc1744b9aba4acdd8db555536419ff9a10ec05e2f25b70bba9988c04679d61a403a4dffcabf6f7531451fa81ec9991c8b6f5c0a6448ab824442d4806489ca06948798ba335eaeb9d3a434341d46ab95ce42aa1fe0eaabb9b2c75a2a2dc861d4b69bbc54d1e31113c84b00f84c68f86365250796c9b129824e0fe625acc638cbe5fa4246fed3d765590743aca4531a61de2cddf21b4191ff91c8409ae11821ce3402b9a3a25a00dcb14dae38aff640cf6ec7e94623e170a364125ff38ff476739f8415468f7363ef1706b4ef9fbd6504446f0856eaa73c84c1271a73a749c0e60d53e36b1f65ec676d84fdce0ae8b6feac6ea0164bae79eb1ee2c8e0d367421a87e50657f6949c2da343abb2746dc6a24c8ea83bd9d09723d67c92cb188730971aa2685dee2928e79d6994bd6462d9c7ca28b027a984dc7ad7089fccf3472d849680986c59cb1646f53431d76e1fea288e665e8a5e5e96f7df3177ed4ca6ead961ceb3ba2d3622ac97b23d14a9c337d37e6b33cf18ca3e5c248a607e655b1e3f6aae9e5f7156e6c9ac90a3c5bc503046c97aea3c114b6a8d6c41c70a1052cbf1f6dd12f81f45ca23b723ad83a0d6cde389418fe71805a078487b743c487effc4ecbc546618a37a8543fb7cd7c02de9cca90d7091dd03002c4e71230cf82e8a4048af6cfe68d1038ae0d26f8f11ac64f6d901f3b75996b01aa2aff6fe6bd17ff58f5e2f273bd46e10bcd66ea6b02663e1eb7a87d8ccbf9fdccb8559605cf9d5cce9c5e7b31bf28e4e04bb8fbfd5344a6ada4cd61a46c30e77746e8bb5116e1e16c289d5c24018d7b35de585524678c6abef9f2e08028c128809835b3495baecd6ea02b1e944a91c7fd33496ae2edc909be8321cd2dfd431ed361072739e8fdd881dbc6afe7e783f6f9144228f37fe77a99eb6b902a82cd93b0c7111185f8656d4ce52252d8ab0053e21a075d450bbe89a4490fcf3d2baff8cfb115dcb4c02ab847f45a661da291968b34963c09530d264f9e4432e274235c8853a2119ae08e9cfc6eb447f65a4785923821dc7501280587d1691884ffac09553216d50a7437aa8f982a5a6016a73715850e896e4aca0eebd68a44308bc77d2231cc9eeab269a036600b1074c30aeb6e37064f92dc20e2a2bf21cd25a48874f652f2f3709961a57cebdb7e570232a7c0c623c96add86cba8572a01160b9f3e69616d668c998834e80f5e724ac9eb9b5dbb545cf925c5d3955924e9bc9ebcce2ec75ffaf256f73ab4e408ffafc08cbcf46dadde6e67847a7a0ddd414835af30678310115c665831e3a372302ddbe73de6f3e488f3839aee54b2cec837c21b7d47f998db27b4b955a58f85b1a2a0567873f2825f79e83e619ffb304bf3c08854df323c7d92bb3703d138843b4751e0bd25938ffdd79de4fb34aa11765bac021d4aaea9c2e2a2c048725800eb0ce0a2e87c8f0b50e377526f3ea7979cdabb1d2cbecdc8d2105d4719d9b01deccf68331bbddafe49a1c84f33300e6928e1a5c5ced28067d6d17a80246d998f085a36dd36821d4be40d37e8cf359c265018c304ddd2bf35098682dcdec18a499ebe5dedab0bcf4cd868f2d7a7eb908ceb3d43c7b753b351592c9781936ff4d455a8e4829d1ae7c25c4e37fda4df8145ad6be0a80303dd29fef44f49f1a317690242d5b1e40ec0d93578e8d0172ad583f259ee0467d61ca72ee3a250088f7fd06212c98a18b190647bc9f1be77d8c75db3aee6be29da7b1abc4777c0c03c66ab183376b68268215a2ffd7935d1ef3cc9aebe15e4918437a514f53d0b31e056fcea215c00e538510befcea02c649182273e16bbd87299916cbf110e2f9a63980eb43e6b51a9605509d2261e8496b71de30061f2c4bc6f5fec98292f654ba1e5556083282b5707f35dddd7fa8008f6d7b113080740326998f2555844e1786860f68766c0fa1a62e149a4545191c8b44cce7a2a86db0fdcd76e368bd1920e08f7a100ae472e35ee5a02e4364c79245391c1f9f9315978ef0dda33f6b0dc798fba009db09e8868ca26a693dc7a1af149cd19800ee2131a467c2665ce011cb9268947cebc448962232a79a154a875e662b3688d01cf98b8df108b56d1c02b725ce1c70d733ba3b39688598823ccf13acd1aa7f34ee2a71e067933b79655ab1874616cf68aa552cb8569bf98988f2c5fe3af1f34ac3dd947ded02d33a387f5d2f41733cadf6c344c651cf0e6a75070cf9593e30174c7c031db9dd29c8d5d2155cf3c592a5142b0ea50fe5cc3360d2b99f6b35bb10d85467506b1b63f809742f360f7c2bdf3abefbcc274e9d6ccaab32020fffcd04284ecb8e72ab359019b6a6a79d2389ee25da298eada200fffda05c21d712082a5741600b65630d45fb771e6bde29a1c2fd768db963bf1e76adf7f1115b60b1860b47b5a28ff302d15b858dc7c936bd7defb8e1eea92548f57a6a80849b274851184fbdd157484a638d63be5da36081172836cb29fa26cd98ece640bf4a18e32ed1b3ea790c0864ed76cbd9452371deac8ffc7b6dfdfaeaca0676dd6eef854c5e48f0d28e82c98a23be898bbdeb41232fe36558ad8424bf62462ffce9951cae1b19d960fc87fd8385d6710ac3640ac16782b49285236cdcf15c32f119198eb173f36d33521f6135201413f0cf0f39d7d0d0d6a7ec611a084dfacfcd4758836d879cc1d884d2e33fbe4fc4517b82eb33b3c942d4d0df1fdda77863222885cd29a90a71a11f7d6734a3f6426a7a873d2a3abd0cc1ef4133407cedfbf68bd6ef5a2236f09d1748990492b4c57e7720c3d71d95acfdd3b71a3857ea6800d284a0d955db90b6af659c8df61eab5b000ebb323cc40baea371859baf3b2fa8f779c300243cbfc5cc07ad663896b48f4c5f43e3ed1768408ce375363c8f25e06626bb82bcddc1a0e3206447cadbd20935f36c611096ef1305261ceec4ab0cffb6e4742130196ef359b63991db650d55bb0605e3d1c54512d972108fc044fa2ddc7dd34faf9204a50a186ed6324c1dca373fd8f75bd9202589fe08face22da023bb10284abae754494ff345430cd57ef1eba8531545ad1883a53d14db4b54ccdbab9c2f2802fcc509eadf8d8b3899db015ee28724dc41916b10549aa9576bfe1c5a0324df28f246d2cfaa53b49f11d21f607f2ce94e122ccb465e5f5df4df6c77e66edc7ff6c513b708efcba520e911fae061e9f0f3ff52f6451769c8ba66acd322206e5998e341704067ecb8716598b77211b860d9aba79397b1614042097d5daad00d9ff34cd1ac08fe65681b21cfda99cd4396275bfa04a087959c2355c56a46d4bbd795044c07a5d70806c28696a9317758b4976e498fd7083d28eb1a5bc9fd3e934c595bfce2ed1e70df69c2e3f515e5c7fdf9c1d7292f4f328ecb9297ca9bc8c27304cabbea853783ca957be87fd7cd42268110722d8b9bea69a60ca41842b58a04b3dcbde0027d7672435b01021c57b3a7534c25183fb8afa34e67ab6c9a49fac75baf76b26223a69bea9777ef10f88032ec93710de46f2f33619ce547a79658a6b56b9b79fa7a59445939f625a59aa91913231220a806ca432b530b9a56b2fb7a970e1049ccb861a92ce10e5546f4c3192a64013584756fbb9830cd562667b4dcd0e37d1b1c28fb8d8d99f0ef69e842e6fac22a0d1eac83e40f9c2ff725a763a05033c6f15d6967f686d806c555faf787184fee831ffe91fbb9bd150d4561799c8094ca0909ae6bc693330f21be3c7d64c3dd64ca19408139d2c7c84660cd1095d913cf0a2f74ccdf4beb25f70061d9cce2f6fb0e4c5324cd7a647656c619e144bc71450d9025b8a0ba7b675478a1f3a659040a54020a797ac1e639c9df5052adc89d9cc79e2d1bd4652a0b1e6929bfb7595d081593f1cf88c88bba32ff38423b1a41dcc00129b33b09e08dd1f0fbac9e53ceef40b70f55a5992614a2c2d5c2ac16d92cfd00369103dd0755697cddd7d7bb297a209d6762b9142bfe69586bd3ec0c7036d0dfd72a0fcc6a502ed6535102effcafc3797b85f06cfa10d75d466838ac0d7933fcea52a4cd20960f590e9756a0a2290b09c731225d33ac28e6c3538f6a59c02feb0bb702605174871efec25347272762bb6befadd01091b9f2cbdb71b194896cc97fa99d5aa2a16213a36338f0d4187091c410f03511556ccbbc396fd02efda0e5545ae654100da7cd1fce79b206001d16ce4da3bb154465930cee4c0255e6f77273eae33ca5db4eaea74d4b6e9fc6cb16d0bbe666fdf5a6e72c9dc48115478e4d16bb6403b10a9100415ec44b8c6e685beb935947adf8d0877aff5f7b10aff1be2d8199009a2830f9757d15f83cf16cb5b0dadf6b8973efb376a4328731dcdc4444024d508b1a0e61d99dc0807d7d1a3f0e0a8babb2b2f8c42ef9076e8b75a93dd3c0df2a6320b67206607c5cbf2e2239c72e7ef8d8bbedc254882f65b1ebf6c46b705e036c88f21daadd7ef46c8e44a55bc64f332ea89befd3da9236c543438ab7f87c46c0fffba234b2d533dca1a8194c63b93a8a99c60a7744b36cb6c576daf9bb96c93cd7aa66c34451bfbfb21c9f774f13a36a1e530947bb4e0e7d100acb8194e0d7ca3602a11171b129661f0038f3acbdaa05eb3c1bbf3d275f3ea9f63fe3b007d28cf4f607c0f880ba7d2393e271e435c97907d1abe2861b35919aff8e138b4dd4af0271727a2159648565b2fc38a8427f3a6408814b2345b395038f99d1843f0a76a8dd19722efe8f90476fcd14cdcbd80abd1a46a415b7025c3d7e43f34a136b3983a2f370cd4dd65dcb2db8937859053e05e28c35b2775589bc2e58cacb0c854d4137ca992c4358dfd2895d2624848a01d5e15df197e9ef2a3c6e1bcf6a93ba835c7eef41d5ca8ee588bcbf0fa7657757985c410a6d5ee3ad0f9e936bf130d9d09af3d5a2cde55695c2cf3d0c1b19c97565bd6eba53afaa80ef9e285679af6518f13d51cb9a037535dfcb75ba2e65f1698429ce7d822245b3d3e97fe290075f4c68ffe07ff72dfb78af3bbb50d3e61827f8c0b24130c9afb71d09e73c583846d621d5f1795b382235afb0cddbb747631914957d60c623ae4b7cd725e71be4e85b8812afcf9792e57a601a5f55b8ea3cff1c8f0ab736b013d71e94868879d07ce39cbe5ca568604471c5986ad74c92c164090a1cf2d0485e854f8a5b3a2c78f32d6fff580a4babb346f572de33aa3695f93df4ae6fccb47535bb17ce6074750fa50f36bafbb117666c447c7d265b16456c7c20ade9484355048fc69080eed1c9970e0b63a287ca1d11cf4965c1e9ea0895be5c475dd13397418c863aad6b1e85526782674b38471b39c494f9efa6adde0db4e1102c5dd1c8b8796a836d377525f064265e8053b6ffe75cec35e29bca91f9137276253364e4c1ef8a", 0x1000}, {&(0x7f0000006bc0)="e69c22efd25f84f692f08861d4bd803750fca265292b1dacc769b632407b3162bc8f119a1cb6a7ee12f08ace4bb5cbd2a4c6ead397a4d2ecf6f7d18e70a0fd105c8a7631f524500337f02d366b00066abe424a84b547a0e2c09df2de7053acf5242141c3d57b843d4c34cec3384bc3037dacb25835f1", 0x76}, {&(0x7f0000006c40)="4ffe40b7d58f436372b4ac3dd65666dc6d5c44bda4882c9b2c4c80cdbf56dacfb3b474a4eb886fc73ac74fc80f6f917b361ea12131485a08d9f310ce799b401619dc53da40281331cd6e3749cc89f674a12a1269cbe9ad5e32f51f5a33c574fe34277257a8e063648260313a8ca422e5f6ecb7517539792ad3aecd", 0x7b}, {&(0x7f0000006cc0)="a631cbde36630e85ef572712759b2cece814440a89f9a6902c964f8fb01188ac4119d8a53d7077fffc14fae7b51494a27bf6b8b03d9f96fdb53660c7aef895c3ea34291158a45db7cb975cd904", 0x4d}, {&(0x7f0000006d40)="d37724ca1af16f80c92bf0d1f674b26ff2a86580cce6a84a3f533d5ea305196c59a6c1fc1be2d3a28f3e2f633c873b565953dc4b61fa7f4a9b5e33dfe865073b6ae5c0e20e3578a1d135e4fc4dafb4c9cce1", 0x52}, {&(0x7f0000006dc0)="8d813363512b11a56ba8301c8c1bfb4330f725393c555fbc59fb2b59d32b6262c395a4f0ab8c828781cd2180ced2a58bc1cd22484c1f5bbe676268743e7bf8c328175fce81994a21d4419a2f91eec026169b94b7d32506be7ac8cdad5a398d6b294bf0461805b968fc9c45dcc9b148b896fc473258ebb041111b0a5a893446e677a1cb852dcada026d1503790b148c521fc077350cf9ebbaa7c5c3c975", 0x9d}], 0x9, &(0x7f0000006f40)=ANY=[@ANYBLOB="d0000000000000001701000035a10000216a87df103f004aedae33086bfe25c5499d582efeb25e0bfda1d76e196385ce769ef87155487d08bf8a8d5a456a429777538866d115131dc0a1ecf24e21570c0042ee3cebc9cb006630d7a5d2399fe03cd2b6d9dfc3e842cf454187c4e1a9ee1ce4468dbab89e645796cfe8b62ce6642cfdbce123d6968de94b84de9bbe01d45869ae979258dd3b6f90ff3334255671194ef5890284f7d79082ce7214a03fcba558661f6dd40456ad34766e540f59856bbd74da8a3f803f43ed408500000000"], 0xd0, 0x4000}, {&(0x7f0000007040)={0x27, 0x0, 0x2, 0x7, 0x0, 0x2, "d7e37fa9e7108a0b966fda290cf78d6f363e7f13c17a92171f156f5d6e1bd8ff4f6d98979d4140cb6c527aabf61ca3acec02eeec49be421fc4efa115c1a8c3", 0x31}, 0x60, &(0x7f0000007600)=[{&(0x7f00000070c0)="428ba14d318880a210c6e84e4336e1cd48791cb971436fd90cbd8e2f03c6066712c95321699aebe4e44241295346e048809798c20adcb7250c170406eda749608d1333a03cb63a33d351539db02d3605f8f1a1b639d40122868c2529189fb4c565d4bd4c880c19f11754b1a4caa916dcf43b6e4e78653b6f903c31fb5c2a02a3552dbc8dcf7e26dd6c20da42e5e853d0262f6852a01f9f709b7581afee6bffc37cd69fff47", 0xa5}, {&(0x7f0000007180)="2364087f4e78582dba18ae10fa8f5f7d8d39921d95892fb73223a7b62a83e118bea353dc42d1ff70588c30bafcfd4e92bd0024ffa5295c0f49eb451c2ed736e8865a89fa03c0e93186e4720ce2a7936180769d4aa78346067577afa0e327dcb31d201f53c00649adadd30d65a3ba478bf9ad25533a6e04ad16d94165d6613706384fbe65e3b97dbc1f6893edc1f7573947a005adc9096485e0936e45cbea76dadceb56b45c34ec59a86b8ab50a0e561ac0", 0xb1}, {&(0x7f0000007240)="f04c0f0675b30db87c2f107e3e44bafedfad90e9b4c8e32676a93fd62d71fe17969fe0b672e2dd5a6c46f34a9eda4fcc0ee7d53bedeae52472fd14945fd0cc890420d0a0a0f1347ec637", 0x4a}, {&(0x7f00000072c0)="4b85d5c8723d9011429551652124dde2fab2f7bc722de60ab10af6873e102ec385d4fe52e0121f8cb3af09b429849c9881578a49ab43623fd374af3a64306b515dec436ce2737fb39c8f892e325db4a1c7c5a3473ebe8d", 0x57}, {&(0x7f0000007340)="531557809e3fb4fe21f88065ac3c6c1c8ed0e3cc1e9371418a00a0c83bd19055441dae36729b48b6c2382c3814b4001ccd2c499fd3f23a3656a6e8560224fa482871e23fe4dd9b03264a8ff2f7874c834acf348407", 0x55}, {&(0x7f00000073c0)="0dc5eac5e45c3e5c919c340dd7e7938ff82a87e9983482f0d3be2d2972ee727f584b02482de3739651c6923748e0442aba12b43f41eae5c0fff379751d7723ab70aaf154d3fc8f1f9b7bfe18c5afb44fc733221f27b54e06a598e3d634ff0c3c79d211faf18adc45d7a86a0eb2aa30f7d31107a8603cd6fce7a54665d6b67569331510304e3d3c212f09dcc641f903c376ee77648c912bb50ff9a4178d054f0ac2f861c41cd1df7f771865282e", 0xad}, {&(0x7f0000007480)="65c52bcd2296b717bb456e01255110febc4237b41515eedcf49e4035860d50ffab2fe5dddde39a3b42e8e274d7aa33c02d06b7e638d16271c44a07124877770adac091dfa1ec17ec55812d9a7ec5e6773f1b7ac39536763d8ec1fbf97018abe327ca2ee43e86eaa5ec0a65a99ab0922e1e88a54fda2407383007adff9200d32579b8a809672be76030b5b95a7ff83f377e725b1861084a4e6b", 0x99}, {&(0x7f0000007540)="61bf4007edfe875b00a5b108e8e9c70706b423d306ce0fc97d126c36bbc3bab3506005447e4b8134d0f1a88274900dbacee1b7f2805e69d1299d4841f348dfc500b3acc901134383e11f1823792a0b152d4fc4568d629342777c855c31cba744786a4fc85c9b8f97c1d301ace22114c87d874c0b5b9318bce83f507cc2c9c63bf540367fd3839140899527347b8fa4a8f45f", 0x92}], 0x8, &(0x7f0000007680)=ANY=[@ANYBLOB="58000000000000000000000005000000d90eb6981cd9477c851d1a4924c9ac51150d53d33644a62b19d1a064d81e6079a241a896841a1c049b758313fa294173e25a1c91dec68eab1c25b1cbceac7a587bfb302713000000"], 0x58, 0x80}, {&(0x7f0000007700)={0x27, 0x0, 0x1, 0x5, 0x7fffffff, 0x80000000, "db3ba4bceb0b599096d2b570c7e5c6b4b4fbc37221e502ef657a85fc14de9bb663fef896b31646ee278f82e7ddc24e78c3d796837cfed41c18c657a0f116c1", 0x3}, 0x60, &(0x7f0000007b00)=[{&(0x7f0000007780)="3c593a1e2acf7472be35d8b51ba74215a50a2ef3ff78a55595b6629f31d363d7638b1aac6a5b05d66ea191b35edef1bac97fd730317c032fa51f65497c2678aa6f0ca1cbf7abe90798a171d7d26456aa99806f36590e6e5e6f7b1ebb1a4bfbe9085bafa9de572047167b0d409a8bd08d25b9fb64be3f90defd6d866ed57734e8afaabcd52a1bc1ddac152910181e68819a5218ec168e574b0a8fa8b247b59a64dda4febe13cc7ae29dc7faa3ea609d525c0f7d6d1570cdcfedaf007d7856a562d6f3a56180db15f6b568512281961e57cdafe0df91aadb7f29a7b0a7cfa7db6fdf2e96c571cad5eba44870d81d7f1e2e3c81", 0xf2}, {&(0x7f0000007880)="9674f17c7fa0eba8e5354ccd80b220ea56f87a8f97897f19b5d699a2849e187b2618cdfccebfdb89be03910a1cacbe51c70546b41f13c8ced5ed971d8ab4eb20f1e8a7860a3e923935d36eff7598608f22b2db6d01cfbdae8a6f6f586f6fc04d95f9bf2c8b7ac18afb4b8f61c0c7d0338de67101a1e7f7a3184c16a22d80c6ff713bf2afdfd84f0fed7dade556a34148701ad3a89be5add6ea9841fb24a5ebf255fe9f521e36aa514593ae0c2a8fb22497fe0f5a053918c8f820c351fcfa7e06d398ea942bc190a6f5006ef125935423992e426d33c5cd60f61a984ef9", 0xdd}, {&(0x7f0000007980)="c2661c51760ab091939564f03b", 0xd}, {&(0x7f00000079c0)="756f8badcf8d4af8542a004ba30c96f20ea2114cafb6ad76d060b125d41b633320e0d0a4d0c1db100156f8c7dea5f51c4c84c031331f4b8295d8aa4ba84f134b83df30da13916eefa4dd79237d1606308a59082a043f4bd2290fbcfc7d190468773a99b5c03d09863d66564d99c69f67af228b3fee4b8b123a45dc8c61abb1aa8eeb1d0a6b7e626330dd323e61356ceebacfab323c07b7038629777b237a2d482d305a76116151708baded", 0xab}, {&(0x7f0000007a80)="77642dd373c5744979c8002f2afd6342b008c571e29e3e0637f4900e7db59b3d478d99c60b32055d7fd524f53313f30accacaca35d5df4", 0x37}, {&(0x7f0000007ac0)="0f", 0x1}], 0x6, &(0x7f0000007b80)=ANY=[@ANYBLOB="18000000000000001f0100000100000048d9000000000000"], 0x18, 0x40}], 0x5, 0x10) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000007f00)={'team_slave_1\x00', 0xfff}) sendmmsg$nfc_llcp(r1, &(0x7f0000002d40)=[{&(0x7f0000000040)={0x27, 0x0, 0x0, 0x7, 0x8001, 0xf5f4, "a463e80de89a993e7767bc462d4b5fc9107e99e53542ec5f0e24071877fb414c6f8a34ac5641ac4373351b21472032e6eddc4062aa3bd9236ef38eb00fe457", 0x33}, 0x60, &(0x7f0000000440)=[{&(0x7f00000000c0)="9896943d6c3da9bd7ed6544b9fa5ea7cecb04c539872571fb4fe6c56bfb6af0b788debb36c25c0f856e861c7c7b59adeebb69d66a551aac45c07db526e0946672a5b7be5a2843b1cb845a2d51ebc9d0009c0b1032cbdc8cbff3f349f656d38199cb1d4a11c", 0x65}, {&(0x7f0000000140)="d4d35421ad752dca1340dbe86aa7489c3baec2aa2aa867c6760511c451a2e685a73f656bd1580704f8dc81110dcdf9a4c28aa241ecf1d4f9bd2847d01dc80bfb258f235a8bee", 0x46}, {&(0x7f00000001c0)="3fd170358f4bd78039ade3e8ad9fbe7e998a998e4f79324ce5094c1d3981f369e486e26b62924ceffb90a97e812270dd9fb7a667678bba992029e983aa9d32f08f2ae8319c40375ee5509274179ae977e99315154bff6a0dfaa46d182694d7d761c02e5c4fb82cd44a4039b22fdea3ef56a56291f69086c48e1220d654acc2d2b0b612", 0x83}, {&(0x7f0000000280)="e9a613bd0b6cc8823644436875fdc02f63c8a6c2f99a5f6296113c5b8500a71f59ac5ff7fc39b741d56a08ad100bc597f25b1ac3bf6c5755ed4c7a3076948c7fabb8c83d3a91a104eafd7bbf2977ac4a7521fc9a1241f27680180299ac363cb460c76a27553cae951f7c9684b99ed4e9b89772934f2a315ebea2ad275e0834c576e08fc206baf0eeb11508d3137bf047d22066c087", 0x95}, {&(0x7f0000000380)="22c4ffb2bb21868dc642044c2897a9879d1ac9d2a9c83f9b711f35ee8e3b1c40baddb2b19583fb0e60d896a72d2312322d26b08fe6592ce4af64f9ceb78e550c06be9e317ffd4181c497fdaeb15e8c7b01c02e164ec87d74899a17f6e5c8d91ee872cb02fd7aac7a09f2d1d3331846cc2d95590646e6d13361b61c8c019a4cce72be1067b25c03add013bb7b2d124343cb530b77d5f2193d135d026addce518457", 0xa1}], 0x5, &(0x7f0000000500)={0x60, 0x118, 0x9, "7bcec22cc2170c9d57f3bd6248f8a56cb11e269c5968b985db6776c7de529b20e559a2ee93607fc7802cf5281cde399ce3236df712cd52bd7da0456ba201a6816372d384ca96cbf7bb49"}, 0x60, 0x20000000}, {&(0x7f0000000580)={0x27, 0x0, 0x2, 0x7, 0x8, 0x0, "2facc8ac8c8e027ae0a41ec1ae2bd94c696bc3f778307d09328ed76fd9dc5418d66cd3bc36507e9d210ba9f060578ebb2f86e4327b9b7603acc53d37bc188c", 0x38}, 0x60, &(0x7f0000000c40)=[{&(0x7f0000000600)="2a139d3133df07d58a12868f465b41594f6bbaa4e11305c48cf2fc1c9cf16a6086e8302f186d74991501dc940e63695c35f9fbc7724fad3a20b5209b2a69d8a22a6c37034f68f540324dab16818163fad6158c57ef53efe5cdd88def99816fd9df4e0e05d7f7319eb929bc8aee1f8fadfced506437f6411b42e2dff302502972bb22052d9c48768b9894e05c2439e7385a6a8eab0a02945cc14523df2ad9b8e2452732dd65b25609b6fbeff4b92c5263973b53c05b465ab88c0a6e5574a84b628b2423ef099a39f717ef01c83c979a5d3aa37b4dffc30501de5746a362dbc7d43cffcee2111a8fb7fb95c2f1416d4f37137d03dc", 0xf4}, {&(0x7f0000000700)="8e50eca4b91c3c98c7ab78f85943a652d3ff430c7a608618e0c6c7d4dcdccca5ff3cc4184da3d00139f30ae4eeb5b242eb9c6bb9150f4fc9171bef6d415c13c7d16d68cc8f32a11522078eb5f73d4936e6abe9d213ac162c2a07b97935b478d8030c361815853569f32efcd49038d2f846c0b801f0d4bcc616c8e02535df3939ae4d2bbac4085861dda015ae4a5412070afc9670f42237cda434e991141f6bafa678f5766231e07b21a71f4fc8eb0a690cded8900750a242e6553a38e594265d57c2bad4218b4e22e6d73effb11a9eade27b9ee6ac5d", 0xd6}, {&(0x7f0000000800)="2812e3b8194c0ce8d3d5da3a5cf9da0ae958dadae8e6ef01698764502aca6df9a7be9085d8018c61074c6c5eadeb59a788cb615c2c00c2df66fdac0127ebe78722522231c63f1bd6ff9babcf9a7cdb66bcfe8876ffb5293611c2333c49cbac028f1163e3c143ce89aebe58a10994ad71d4c10c50c4d018434db6a0e46706354ddb5f3e4acd83ce442dca8fa0d08e721420541b56aa69947fae8d1fbca75ce076c24299b778724cd8bcd2b3b51e8dc526269db110544d4dadd2c34f084fd26cc2be129a1076bda3bf422bb1b70b1f8b1070cea120", 0xd4}, {&(0x7f0000000900)="8860f0d8c5a08ce4b34375f7bcaba6b73ff94fdab6667fa0d1111cc5a4483ebc8c57fb10ec765f10aaddcfe3c58f63e811dfc8255d7ddaaeae1246e334e9e5b69482736c69ba968133c24243c36986f3e9835e2bcc882f55a426dbece6c2633db3e26a", 0x63}, {&(0x7f0000000980)="5b536618ac0b2006b51c88461c97f3071b579b9332eaad774520d0da55cd168bad98d71476c4f7a104c3ff782f37ef1a7ae0aba773d7cc1032c5d25d5d40a9541b924b01fca9e8", 0x47}, {&(0x7f0000000a00)="2c0ca6a6943a5a5900a49efdf95358", 0xf}, {&(0x7f0000000a40)="74d6a14470d7090156a752dae829f733770e93bc73a56d5f775d1a6acd27886c2ab43874278bc9c46e56dd42160af36d68141e1b3a90de3af0e88ec94cc7914ec0f38a6b2bfdc563224cb6182948d6d50c3c8b6d26f1db25c24ea67172cc4de478af85ba07dba73a3b67e8dafcead92877f53aa527cbb07fb872877ee49210e375f01bdc5f95529f127c52473075", 0x8e}, {&(0x7f0000000b00)="51663bfb68e2ccec", 0x8}, {&(0x7f0000000b40)="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", 0xfc}], 0x9, &(0x7f0000000d00)={0xc0, 0x108, 0x6, "91b15614c1096fb19fba724c250c3942938aacd0189d3a74a9e3b44f205f6387e3e1961c929cf17a927f58e149d983a0e19bfe4ef5b3b3632652b7a079b64c4726ae2b1a9462e869da3524419208587dd4365f0d82257099e974813b192ab526e7359f23f2085a691f97feaacebf62f3560b8300ac5b931dd919156fc762a5efb1ff19ecc89dd84a9b53815bf2672128258be50f706a909adf7f52b93b0077bb2998f40c4ce85be05e6e8913de"}, 0xc0, 0x80}, {&(0x7f0000000dc0)={0x27, 0x0, 0x0, 0x5, 0xff, 0x1, "6a4efc485ebefa42119520a3de1093966e7569c594e33781698bdea4a48f7f7aa63b9340028ed3690b6c79437d62aa43c9c011a15e45537ac3bee13b1669be", 0x27}, 0x60, &(0x7f0000000f40)=[{&(0x7f0000000e40)="31ff452ce51873f1b2f21945b4abc0d876db91beb03afa87da7d1e86bde8431ba9ed19fd3c7459bdf991fd775ee3", 0x2e}, {&(0x7f0000000e80)="c6df7899e715c2bf9dad61a994fd604f5f662e9e85d41d5ce8daca9896c956fd423174f09760e4813fc0f3dbc4b65cf0fcf11d1b48ca868f1d2980a3b9d961d4d38d955de2d559f4d1a75f29c13db1444b2b98", 0x53}, {&(0x7f0000000f00)="2d7c52d32a08418250b4afde402db2ba0b2433c9ef8f43a1144eef47d3e83594", 0x20}], 0x3, &(0x7f0000000f80)={0xc8, 0x29, 0x0, "5b06c845bc549c6476d055c1fb3ad29e8babe35f7874b35cd710186e52380ead324e8b834b7190f95fd122d860925d7994f349b67df30c5e4300529d68fc2186b7d94a2f674b15f8c05fcfe1669b2a13a74ff92bec6e975bfe8fa1d536ac5f9ed4346a102f370f5c3321035e71b371a6f5d8d869164abd7820fcff451d7bec03c606241eb416317d26442fc444057584bb7fe8cc9981381e6f504f03756b9d6d12ee19d87ac4920e5ff072869ab13304ca"}, 0xc8, 0x20004000}, {&(0x7f0000001080)={0x27, 0x0, 0x0, 0x5, 0x9, 0xb80, "80d379be24251a1e8050dab42886fa270a8915c4a7c14e9952c169cbe5c14a1bff8eb335aa6fb70edfd2930354ba3dc58d4a777edc6cce351fddb484b64153", 0x17}, 0x60, &(0x7f0000002500)=[{&(0x7f0000001100)="bb6bdcd485fd9bfd7ec3a29e4812cdde3d867207b4896a17e4ac7bb859f261d3c95b519f39ad2d923a981240233b458247aceb3b02ac1e1a7392a0f839a2770a8020994ac54c8cea33f5a6a1af6a550eef40cba6cba88bc8f254eaf30f80b77d0ea6c9371f", 0x65}, {&(0x7f0000001180)="3f48ab4e560f3280679b16c07447e755d0228a58ef47796123e302405f34596e6e807b07cc9e113446bd923783c15109b73a46710b7aa539e495fe0a7e9fe983a814f8b07c52c49c788674bedf47b86e2f87b2e1c153a473bf2d4a9958bf4e7c2a68771f7385804d1ed5afd2856ed4f2a21fde1aa5037f0e4259c9af67010b0eda5369929a6ba92cfa1b5d8ae4d86745", 0x90}, {&(0x7f0000001240)="51e0b03f", 0x4}, {&(0x7f0000001280)="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", 0x1000}, {&(0x7f0000002280)="9943bb1a4170fdaeeac35a96da6f18d4f6c22c08dd47cef69fdea8554e13ecaa5ac08fdb528c74b1999640f77e916645641fddbd03aa9314d60bee0c47d7f34a1664d0ff22d2043593821905941ea17c107c5c81321c47479e0d500c77e83fe9a36da8de68eeef4ff6929da28328b897f52a49b52dcfd95dc4c54cd2d2e575864ae7e8d3aaea8a866bf682deead7864e5226a69ced16a52ecd327d7ea64de37565f75b9b43566d200b56014525e2de186766ef3d74e1dedd3bf855c8f86ac64623292b7b653dfae90c44aba21112a44685e5e961827330bd1739120288b730bb43c38cb2c5", 0xe5}, {&(0x7f0000002380)="cae97a60ac122e81e91585fbb1886438bd4b72b0366a7617d32d8bffb5589c83816c1e52be8819bcc2f8639d7807288012f43c309f46e1729320800101caf206e0a5dac31a911cb94f10", 0x4a}, {&(0x7f0000002400)="13bb36535eac72268bf3d4fef5b0e81c554d42d50be97feea34fdd1c3617c55aed168e71e208b3ec6fb6d2abc75edb6e9cc4f6f747fa0138673245ff0c19763278a1637b6040eb2cece5801cab20cab1a2347af5fe53c79d4e0f762ab1fe3fe46bc5ea51e9e4dcc81086514a5eef903adff0875aa756da", 0x77}, {&(0x7f0000002480)="9ccc25db106ac79db52b21d4687635f2f834416bbe4ebd2b342ccf1a667791f86f9bb208062ba0632b519acc50c10f4c216577d3b7c58753d1974dd05cf70e026cf91178769ca30f3a6f", 0x4a}], 0x8, 0x0, 0x0, 0x880}, {&(0x7f0000002580)={0x27, 0x1, 0x2, 0x7, 0x0, 0x0, "10d4bbb63544fa4342e73618f07590b1c0a3d237c86ace5ea4a797cd1cb5f55c2f5d255bead2c1ff81bcf3dea280f3179335bedcf66d5ea691394741b7c3b6", 0x21}, 0x60, &(0x7f0000002a80)=[{&(0x7f0000002600)="c6dfcfa6a28a8ae34be392ed9626a256867b1ff059cda8518404151414f781e3ab7e4cc580cafe88b54cc88ecc0a42d4e52503c04116ce3e073eca1fe56bfde25d2e27cd5ada4c126d", 0x49}, {&(0x7f0000002680)="cff9b5a6e71532dbb6c848b848308ba57b18660518b81ab1cb37950703ebfa0e8a93e0b34964dde422fdefeeff4b4db5d706c2d39ff923", 0xff94}, {&(0x7f00000026c0)="c9f95e62756976c51b03da76b54f4f6e7670d137e765a88f728830a52c0f81b71eab3cda5a1dff06e6531b6fe67c6896498b966f3b123b8e4ae803c90292b830253f3d72562ee6f25b3456446fee48acb8543d7269cb81935348bf51bac64e05cb7a57e0e58a94a71e34afb8266af576ad7e17498e5a6077da7cf94fc161fe7abb19174be7c4df263198d60290a85163c7228b8cae3de9739270e9bde8a2356e001b44bb0dbb5774c0861d0cd67f7c427569e753", 0xb4}, {&(0x7f0000002780)="21d3784cf9e624c34239d80770bc5595b0ac2898586c982fd9ef2b3648e8d763f37fc9faed0e195a31e8cf3f7b31ea930705bc0393f2fe39365dec0147aa3765f00ddd5b7e0159db0896213dd45ac5359f9fbce28be3254a6d06a35a343e53fcc41e1cf6a0241281752a7fe1376fed13877cf7e9bd229e6151ec766d69670f86ec1a6d5ee514df822e719c752bfa9a8dac07df0bf74fea67098ce8ebc79143ed7cb74f534259b16900c12255f74dadd833b2c1b34febf4597d9452676093010e35ee6ec522c15a769157e1a054eb89339703cf016d7864ab0158cecceed3011d08da6a74800d1a811de11487c65ec376a7b8d13718818a04", 0xf8}, {&(0x7f0000002880)="cb30786a17f78e1973424310ea78ff6f59099fa62fcc657f7a09854127db87f9b3aae70c1b69d20c528a", 0x2a}, {&(0x7f00000028c0)="4b67d67b7ab61a94cb69518aa56c517489384a8ab57890ff35ffa71bfd3de6", 0x1f}, {&(0x7f0000002900)="4afeb728ea8afdf7fff4bc17202f64275c9c49acef7cdb998f55840bb9c4e9124d18c8e1ef6ca13a8bccbdd3c2ddb557ee383e73382a67fa928ea0e3fd02763d502c88827e7054621d1080fa20a84af1c4a42c608b7577485065b3cab2aaf173921bd386464d3cfab9b398ba2acaf7a9", 0x70}, {&(0x7f0000002980)="7631f38ddeb25568a63bf2587bfb75119b3f8e42bab101151c428a35083dc30cdbe2780f90fec5c1e1ecd2ca6f0b1ddc26980b3e4502e80f640ec0b9effb632dd63552f92f2a440afb019088d247d90a24a523115df4ab9fad4d23fa6a7be0eeacee70522d018f433ffc735946a325554313cbf5ced1fa9004a5288c72c79dca9e9e0642c8d2b5dde3fa8e293916bea74ba6fa339dbb8d7468a21a4abdbeec8c74200f3e60f519d36c09110654286a9674501dacd1704a3b7d1d63265c19eb3d44ff29d843052e0b96b8c0d1f71088d6077dee6914fa02", 0xd7}], 0x8, &(0x7f0000002b00)={0x68, 0x18f, 0x401, "2aeedb79220125fa5ac66934e63aace7ef21955596d03ce199bf2dba85a139bfd7cf8e5a4fdd791e2a575868637af23ad15f90f914f7dc4c628709a8f551419d1b837a289e148b6c34a9510e72aa1dabcca0"}, 0x68, 0x40000}, {&(0x7f0000002b80)={0x27, 0x1, 0x0, 0x3, 0x7fffffff, 0x7, "af507c7c2bc56d5c8c05b7126c2a9a0d726fe455e10c38d04d435bdc60989312416aecbdf2a47e230f029ef7ebdad4fa792535a7f3e57edf256464063f796e", 0x12}, 0x60, &(0x7f0000002c80)=[{&(0x7f0000002c00)="654a954aa6e7aae62a3535bd5ce57ec0b66e2d5b994d758e532e2faf6449", 0x1e}, {&(0x7f0000002c40)="29c83b43568e08ff8271c4ef67b7fb19bea4ad57b8b0020a355b305a138c7f0eee9f14a21e95888ab65f4bae2bd50314c71fa8ae0f420e", 0x37}], 0x2, &(0x7f0000007f40)=ANY=[@ANYBLOB="80000000000000000f01000001000000fadb5a3ea81e54a97aaf9a5cbf2d067cab926c10a6cbb15d9e8f82d05e0d80dbb55d926f524709d4e50579fd576e511d16a3227290d830989534c685bafa825e965397d59548f3e8300b5f9d973be6165a8a8249c36b31725643b90c52fc700432be08cc77f13c60adeacec0000000000d7f2a95384d72ab159850a348efa8dfaa"], 0x80, 0x10}], 0x6, 0x5) sendmsg$nl_route(r0, &(0x7f0000003b80)={&(0x7f0000000340), 0xc, &(0x7f0000003b00)={&(0x7f00000004c0)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8}]}, 0x28}}, 0x0) 05:58:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSWINSZ(r0, 0x5423, &(0x7f0000000000)={0x19}) read(r0, &(0x7f0000000080), 0x0) ioctl$KDDISABIO(r0, 0x4b37) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x400101, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000140)={r2, @in={{0x2, 0x4e24, @broadcast}}, 0x2, 0x2000400000000, 0xffffffffffffff00, 0x7, 0x4}, &(0x7f0000000200)=0x98) 05:58:37 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x20003000, &(0x7f0000001000/0x2000)=nil}) close(r0) r2 = socket$kcm(0x11, 0x3, 0x300) recvmsg$kcm(r2, &(0x7f000000a080)={&(0x7f0000007a00)=@can, 0x80, &(0x7f0000009f00), 0x0, &(0x7f0000009fc0)=""/147, 0x93}, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$kcm(r3, &(0x7f0000000380)={&(0x7f0000000080)=@nl=@unspec={0x0, 0x0, 0x1befff7f}, 0x80, &(0x7f0000000180), 0x0, &(0x7f00000001c0)}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8907, 0x703000) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x80, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000000180)={'nat\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000040)=[{}, {}]}, 0x78) 05:58:37 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000002c0)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x4d5) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') readv(r1, &(0x7f0000000800)=[{&(0x7f0000000700)=""/84, 0x54}, {&(0x7f00000008c0)=""/27, 0x1b}], 0x2) [ 227.603907] attempt to access beyond end of device [ 227.608996] loop4: rw=12288, want=8200, limit=20 [ 227.618874] attempt to access beyond end of device [ 227.623975] loop4: rw=12288, want=12296, limit=20 05:58:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$VT_RELDISP(r0, 0x5605) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000080)=0x9) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x5412, &(0x7f0000000000)=0xec11) 05:58:37 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ssse3\x00'}, 0x58) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000000)=0x3) r2 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) sendmsg$rds(r2, &(0x7f0000003200)={&(0x7f0000000400)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000780)=[{&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/138, 0x8a}], 0x2, &(0x7f0000003000)}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000200)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'team0\x00', r3}) 05:58:37 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc80700145f8f764070") r1 = signalfd(0xffffffffffffffff, &(0x7f00000015c0), 0x74) r2 = dup(r1) ioctl$TIOCEXCL(r2, 0x540c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000180)={0x0, 0x2}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={r3, 0x71b}, &(0x7f0000000240)=0x8) r4 = fcntl$dupfd(r0, 0x0, r1) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000000080)={'broute\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000040)=[{}], 0x0, [{}, {}]}, 0x98) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000280)=0x7, 0xff0e) 05:58:37 executing program 0 (fault-call:8 fault-nth:2): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_client='access=client'}, {@cache_loose='cache=loose'}]}}) 05:58:37 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)) r1 = creat(&(0x7f0000000080)='./file0\x00', 0xfd) ioctl$fiemap(r1, 0x40086602, &(0x7f0000000080)=ANY=[]) truncate(&(0x7f0000000040)='./file0\x00', 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00') 05:58:37 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)) 05:58:37 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000002c0)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x4d5) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') readv(r1, &(0x7f0000000800)=[{&(0x7f0000000700)=""/84, 0x54}, {&(0x7f00000008c0)=""/27, 0x1b}], 0x2) 05:58:37 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x7b) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f00000012c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)='E', 0x1}], 0x1, &(0x7f0000000200), 0x353}}, {{&(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @remote, 0x101}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000100)='8', 0x1}], 0x1, &(0x7f0000000440), 0x0, 0x4}}], 0x2, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 05:58:37 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000010000000000000018000000ff"]) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000140)=ANY=[]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [0x486]}) [ 227.802949] FAULT_INJECTION: forcing a failure. [ 227.802949] name failslab, interval 1, probability 0, space 0, times 0 [ 227.814522] CPU: 0 PID: 17419 Comm: syz-executor0 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 227.823036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 227.832408] Call Trace: [ 227.835020] dump_stack+0x1c9/0x2b4 [ 227.838660] ? dump_stack_print_info.cold.2+0x52/0x52 [ 227.843864] ? perf_trace_lock+0x49d/0x920 [ 227.848132] should_fail.cold.4+0xa/0x11 [ 227.852198] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 227.857303] ? lock_release+0xa30/0xa30 [ 227.861286] ? kasan_check_read+0x11/0x20 [ 227.865432] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 227.870107] ? kernel_text_address+0x79/0xf0 [ 227.874523] ? lock_acquire+0x1e4/0x540 [ 227.878491] ? fs_reclaim_acquire+0x20/0x20 [ 227.882808] ? lock_downgrade+0x8f0/0x8f0 [ 227.886960] ? check_same_owner+0x340/0x340 [ 227.891277] ? rcu_note_context_switch+0x730/0x730 [ 227.896202] ? copy_mount_options+0x5f/0x380 [ 227.900604] ? ksys_mount+0xd0/0x140 [ 227.904321] __should_failslab+0x124/0x180 [ 227.908563] should_failslab+0x9/0x14 [ 227.912363] kmem_cache_alloc+0x2af/0x760 [ 227.916529] getname_flags+0xd0/0x5a0 [ 227.920341] user_path_at_empty+0x2d/0x50 [ 227.924486] do_mount+0x17f/0x1e20 [ 227.928029] ? do_raw_spin_unlock+0xa7/0x2f0 [ 227.932450] ? copy_mount_string+0x40/0x40 [ 227.936678] ? kasan_kmalloc+0xc4/0xe0 [ 227.940579] ? kmem_cache_alloc_trace+0x318/0x780 [ 227.945436] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 227.950985] ? copy_mount_options+0x285/0x380 [ 227.956191] ksys_mount+0x12d/0x140 [ 227.959817] __x64_sys_mount+0xbe/0x150 [ 227.963790] do_syscall_64+0x1b9/0x820 [ 227.967682] ? finish_task_switch+0x1d3/0x870 [ 227.972172] ? syscall_return_slowpath+0x5e0/0x5e0 [ 227.977101] ? syscall_return_slowpath+0x31d/0x5e0 [ 227.982048] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 227.987065] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 227.991923] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 227.997108] RIP: 0033:0x456a09 [ 228.000303] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 228.019214] RSP: 002b:00007f3ecbe13c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 228.026941] RAX: ffffffffffffffda RBX: 00007f3ecbe146d4 RCX: 0000000000456a09 [ 228.034213] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 228.041571] RBP: 00000000009300a0 R08: 00000000200004c0 R09: 0000000000000000 05:58:37 executing program 1: r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000500)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYRESHEX=r0, @ANYRES64, @ANYRES32=r0, @ANYPTR64=&(0x7f0000000040)=ANY=[@ANYRESHEX, @ANYRESDEC=r0, @ANYRES64=r0, @ANYPTR64, @ANYPTR64], @ANYBLOB="b5d1a92881e8db09872ec258db59732ae77ea36345ce5c571e7a1bd0e1816cff728ec4908c42e356e98d2f9466f75fa657801664125dd66bc927af8cb248874968d56885428b53bace3de6fae7053aaff8bbe50a3ea2bc7ee45fd47f855c9a08507974d3dd76aa22bed9a603bad13bab0b6b22249318c21bfe7dd119dba1548dca5dc533bf3d7704193edffd9f9060d09a596e2c75af9b8de92898c7e01285e7c97be615669496a4c4680609bd2704816e50b399be9671dd6813b8b716b1fa7a29bbd258998dbcd4f9e7a8e2f0d16762fec4020b1ec13c99976a9c"], @ANYPTR64=&(0x7f0000000400)=ANY=[@ANYRESOCT=r0, @ANYRESDEC, @ANYPTR64=&(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYRESOCT=r0, @ANYRES32=r0, @ANYRESOCT=r0], @ANYRES64, @ANYRES32=0x0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRESHEX=r0, @ANYPTR]], @ANYRESOCT=0x0, @ANYRESOCT=r0, @ANYBLOB="4bcbc940527e7011cfc0d46fbe49cdd8b80a3f09a3251f7f5aad2350466aa3a6948ca85d733355bca475cbc152386a9dda65a3afdac295f069276d905b165648ebf0e7e4ef1d62707db483672c9e0b9accc21fd53d84d12b06182e32e0d286b887935969ac68e7d26de22d556c393742d43fadf0108ffc3b975e32aca8a41ee4a15845141e5c75044b2b34ec7d979b020952d9f7719ba48a3e661c220a6b613e3085dd6e8a4665dbcdc47fa84e320ae5f08696ea93c8eeebd4eb8cf0707f1dde21d297988686594664e65ded25771ea30386f08bcc93e132e99090466b1386af6277d501cd44d0ca93ebf6af6f69f4", @ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYRES16=r0, @ANYRES32=r0]]) getsockopt$inet_udp_int(r0, 0x11, 0x2000000000067, &(0x7f0000000180), &(0x7f0000000100)=0x1c5) socket$inet_udplite(0x2, 0x2, 0x88) ftruncate(r0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'veth0\x00', {0x2, 0x4e22, @rand_addr=0xaf10}}) [ 228.048840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 228.056107] R13: 00000000004d1750 R14: 00000000004c6e7f R15: 0000000000000002 [ 228.069983] f2fs_msg: 80 callbacks suppressed [ 228.069996] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 228.081632] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 05:58:37 executing program 0 (fault-call:8 fault-nth:3): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_client='access=client'}, {@cache_loose='cache=loose'}]}}) [ 228.104720] attempt to access beyond end of device [ 228.109839] loop4: rw=12288, want=8200, limit=20 [ 228.126494] F2FS-fs (loop4): invalid crc value [ 228.141474] attempt to access beyond end of device [ 228.146547] loop4: rw=12288, want=12296, limit=20 05:58:37 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'lo\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='%\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']}) tee(r0, r0, 0x101, 0x3) 05:58:37 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x0, &(0x7f00000002c0)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x4d5) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') readv(r1, &(0x7f0000000800)=[{&(0x7f0000000700)=""/84, 0x54}, {&(0x7f00000008c0)=""/27, 0x1b}], 0x2) [ 228.152299] F2FS-fs (loop4): invalid crc value [ 228.157131] F2FS-fs (loop4): Failed to get valid F2FS checkpoint 05:58:37 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) uname(&(0x7f0000000200)=""/213) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x80000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e23, @remote}}, [0xb06, 0x9, 0x9, 0x9, 0x0, 0xe7b9, 0x0, 0x7cee, 0x8, 0x8, 0xb0, 0xbc, 0x4, 0x9, 0xfffffffffffff801]}, &(0x7f0000000040)=0x100) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={r1, 0x4, 0x5}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000600)={0x5, 0x10, 0xfa00, {&(0x7f0000000400), r3, 0x3}}, 0x18) recvmmsg(r2, &(0x7f00000016c0)=[{{&(0x7f0000000100)=@ipx, 0x80, &(0x7f0000001680), 0x0, &(0x7f0000001b80)=""/238, 0xfffffffffffffee2}}], 0x1, 0x0, &(0x7f0000001c80)) [ 228.211674] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 228.218820] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 228.226915] attempt to access beyond end of device [ 228.232093] loop4: rw=12288, want=8200, limit=20 [ 228.247247] F2FS-fs (loop4): invalid crc value [ 228.257230] attempt to access beyond end of device [ 228.262294] loop4: rw=12288, want=12296, limit=20 [ 228.268679] F2FS-fs (loop4): invalid crc value [ 228.270862] FAULT_INJECTION: forcing a failure. [ 228.270862] name failslab, interval 1, probability 0, space 0, times 0 [ 228.273353] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 228.291321] CPU: 0 PID: 17445 Comm: syz-executor0 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 228.299821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 228.309179] Call Trace: [ 228.311772] dump_stack+0x1c9/0x2b4 [ 228.315443] ? dump_stack_print_info.cold.2+0x52/0x52 [ 228.320641] ? perf_trace_lock+0x49d/0x920 [ 228.324876] should_fail.cold.4+0xa/0x11 [ 228.328942] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 228.334049] ? kasan_check_write+0x14/0x20 [ 228.338288] ? zap_class+0x740/0x740 [ 228.341992] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 228.347093] ? debug_check_no_obj_freed+0x30b/0x595 [ 228.352114] ? quarantine_put+0x10d/0x1b0 [ 228.356275] ? lock_acquire+0x1e4/0x540 [ 228.360258] ? fs_reclaim_acquire+0x20/0x20 [ 228.364576] ? lock_downgrade+0x8f0/0x8f0 [ 228.368743] ? check_same_owner+0x340/0x340 [ 228.373064] ? lock_downgrade+0x8f0/0x8f0 [ 228.377210] ? rcu_note_context_switch+0x730/0x730 [ 228.382136] __should_failslab+0x124/0x180 [ 228.386377] should_failslab+0x9/0x14 [ 228.390180] kmem_cache_alloc_trace+0x2cb/0x780 [ 228.394846] ? kasan_check_write+0x14/0x20 [ 228.399081] ? do_raw_read_unlock+0x3f/0x60 [ 228.403402] vfs_new_fs_context+0x5a/0x6d0 [ 228.407639] do_mount+0x605/0x1e20 [ 228.411171] ? check_same_owner+0x340/0x340 [ 228.415508] ? lock_release+0xa30/0xa30 [ 228.419511] ? copy_mount_string+0x40/0x40 [ 228.423737] ? kasan_kmalloc+0xc4/0xe0 [ 228.427620] ? kmem_cache_alloc_trace+0x318/0x780 [ 228.432471] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 228.438024] ? _copy_from_user+0xdf/0x150 [ 228.442178] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 228.447715] ? copy_mount_options+0x285/0x380 [ 228.452214] ksys_mount+0x12d/0x140 [ 228.455844] __x64_sys_mount+0xbe/0x150 [ 228.459813] do_syscall_64+0x1b9/0x820 [ 228.463696] ? syscall_return_slowpath+0x5e0/0x5e0 [ 228.468618] ? syscall_return_slowpath+0x31d/0x5e0 [ 228.473652] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 228.478686] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 228.483550] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 228.488737] RIP: 0033:0x456a09 [ 228.491928] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 228.510828] RSP: 002b:00007f3ecbe13c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 228.518546] RAX: ffffffffffffffda RBX: 00007f3ecbe146d4 RCX: 0000000000456a09 [ 228.525826] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 228.533087] RBP: 00000000009300a0 R08: 00000000200004c0 R09: 0000000000000000 [ 228.540345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 228.547605] R13: 00000000004d1750 R14: 00000000004c6e7f R15: 0000000000000003 05:58:38 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x0, &(0x7f00000002c0)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x4d5) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') readv(r1, &(0x7f0000000800)=[{&(0x7f0000000700)=""/84, 0x54}, {&(0x7f00000008c0)=""/27, 0x1b}], 0x2) 05:58:38 executing program 7: io_setup(0x1, &(0x7f0000000040)=0x0) r1 = socket$unix(0x1, 0x20000005, 0x0) io_submit(r0, 0x1, &(0x7f00000026c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000080), 0x280}]) 05:58:38 executing program 1: r0 = socket$inet6(0xa, 0xffffffffffff, 0x0) fgetxattr(r0, &(0x7f0000000100)=@known='trusted.syz\x00', &(0x7f0000000480)=""/4096, 0x1000) ioctl(r0, 0x8911, &(0x7f0000000000)="0a5cc80700315f85714070") syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x8000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000400)="1020f5f20100070009000000030000000c0000000900000002000000010000000000000000480000000000000d00000024000000020000000200000002000000020000001a000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}], 0x3, &(0x7f0000000340)) 05:58:38 executing program 0 (fault-call:8 fault-nth:4): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_client='access=client'}, {@cache_loose='cache=loose'}]}}) 05:58:38 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0xffffff89, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x14, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, &(0x7f0000000040)={0x0, 0xfffffffffffffffe, [0x0, 0xd1b, 0x8000]}) socketpair$inet(0x2, 0x80a, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f00000000c0)={'veth1_to_bond\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}}) [ 228.579003] attempt to access beyond end of device [ 228.584085] loop4: rw=12288, want=8200, limit=20 [ 228.589043] attempt to access beyond end of device [ 228.594022] loop4: rw=12288, want=12296, limit=20 [ 228.599974] attempt to access beyond end of device [ 228.605860] loop4: rw=12288, want=8200, limit=20 [ 228.612081] attempt to access beyond end of device [ 228.617134] loop4: rw=12288, want=12296, limit=20 05:58:38 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x0, &(0x7f00000002c0)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x4d5) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') readv(r1, &(0x7f0000000800)=[{&(0x7f0000000700)=""/84, 0x54}, {&(0x7f00000008c0)=""/27, 0x1b}], 0x2) 05:58:38 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0xffffffffffffffff, 0x0, @empty, 0x20}, 0xfffffffffffffe67) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x13a) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000240)=""/211, &(0x7f0000000140)=0xd3) [ 228.775012] attempt to access beyond end of device [ 228.780073] loop1: rw=12288, want=8200, limit=64 [ 228.826201] attempt to access beyond end of device [ 228.831228] loop1: rw=12288, want=12296, limit=64 [ 228.834370] FAULT_INJECTION: forcing a failure. [ 228.834370] name failslab, interval 1, probability 0, space 0, times 0 [ 228.847441] CPU: 0 PID: 17482 Comm: syz-executor0 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 228.855929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 228.863983] attempt to access beyond end of device [ 228.865279] Call Trace: [ 228.865304] dump_stack+0x1c9/0x2b4 [ 228.865327] ? dump_stack_print_info.cold.2+0x52/0x52 [ 228.870258] loop1: rw=12288, want=8200, limit=64 [ 228.872826] ? filename_lookup+0x397/0x510 [ 228.872838] ? user_path_at_empty+0x40/0x50 [ 228.872859] ? perf_trace_lock+0xde/0x920 [ 228.889710] attempt to access beyond end of device [ 228.890619] should_fail.cold.4+0xa/0x11 [ 228.890639] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 228.894968] loop1: rw=12288, want=12296, limit=64 [ 228.899082] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 228.899100] ? do_raw_spin_lock+0xc1/0x200 [ 228.927042] ? zap_class+0x740/0x740 [ 228.930740] ? perf_trace_lock+0x920/0x920 [ 228.934982] ? quarantine_put+0x10d/0x1b0 [ 228.939144] ? lock_acquire+0x1e4/0x540 [ 228.943120] ? fs_reclaim_acquire+0x20/0x20 [ 228.947440] ? lock_downgrade+0x8f0/0x8f0 [ 228.951577] ? check_same_owner+0x340/0x340 [ 228.955886] ? lock_downgrade+0x8f0/0x8f0 [ 228.960018] ? rcu_note_context_switch+0x730/0x730 [ 228.964934] __should_failslab+0x124/0x180 [ 228.969173] should_failslab+0x9/0x14 [ 228.972958] kmem_cache_alloc_trace+0x2cb/0x780 [ 228.977610] ? kasan_check_write+0x14/0x20 [ 228.981828] ? do_raw_read_unlock+0x3f/0x60 [ 228.986148] vfs_new_fs_context+0x5a/0x6d0 [ 228.990378] do_mount+0x605/0x1e20 [ 228.993915] ? check_same_owner+0x340/0x340 [ 228.998219] ? lock_release+0xa30/0xa30 [ 229.002180] ? copy_mount_string+0x40/0x40 [ 229.006406] ? kasan_kmalloc+0xc4/0xe0 [ 229.010287] ? kmem_cache_alloc_trace+0x318/0x780 [ 229.015129] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 229.020669] ? _copy_from_user+0xdf/0x150 [ 229.024809] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 229.030330] ? copy_mount_options+0x285/0x380 [ 229.034818] ksys_mount+0x12d/0x140 [ 229.038440] __x64_sys_mount+0xbe/0x150 [ 229.042418] do_syscall_64+0x1b9/0x820 [ 229.046300] ? syscall_return_slowpath+0x5e0/0x5e0 [ 229.051215] ? syscall_return_slowpath+0x31d/0x5e0 [ 229.056146] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 229.061171] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 229.066004] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 229.071191] RIP: 0033:0x456a09 [ 229.074367] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 229.093266] RSP: 002b:00007f3ecbdf2c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 229.100985] RAX: ffffffffffffffda RBX: 00007f3ecbdf36d4 RCX: 0000000000456a09 [ 229.108249] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 229.115595] RBP: 0000000000930140 R08: 00000000200004c0 R09: 0000000000000000 [ 229.122858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 229.130115] R13: 00000000004d1750 R14: 00000000004c6e7f R15: 0000000000000004 05:58:38 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)) 05:58:38 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x4d5) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') readv(r1, &(0x7f0000000800)=[{&(0x7f0000000700)=""/84, 0x54}, {&(0x7f00000008c0)=""/27, 0x1b}], 0x2) 05:58:38 executing program 3: setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x9, &(0x7f00000000c0), 0x2) r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x4}, 0x8) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x201, 0x0) accept4$bt_l2cap(r1, &(0x7f0000000080), &(0x7f0000000100)=0xe, 0x80800) 05:58:38 executing program 7: epoll_create1(0x80000) r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000180)={{0x1ffc, 0x7fff}, {0xf, 0x20005}, 0x0, 0x5, 0x2000000}) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffa) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, r1) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0xfffffffffff7fffe, 0x30) 05:58:38 executing program 1: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)=0x4, 0x4) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='/group.stat\x00', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xc0185879, 0x20000001) 05:58:38 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x4d5) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') readv(r1, &(0x7f0000000800)=[{&(0x7f0000000700)=""/84, 0x54}, {&(0x7f00000008c0)=""/27, 0x1b}], 0x2) 05:58:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000), 0xc, &(0x7f0000013ff1)={&(0x7f00000001c0)={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2}, [@typed={0xc, 0x2, @u64}]}, 0x20}}, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x1, 0x10000) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000140)) 05:58:38 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x16, &(0x7f00000002c0)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000000700000008ffffffbd2301000000000095000000000000006916000000000000bf67000000000000570600000f0000006706000002000000070600000ee60000bf050000000000001f650000000000006707000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffbd43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) [ 229.315494] attempt to access beyond end of device [ 229.320554] loop4: rw=12288, want=8200, limit=20 [ 229.371433] attempt to access beyond end of device [ 229.376502] loop4: rw=12288, want=12296, limit=20 05:58:38 executing program 5: request_key(&(0x7f0000000300)='user\x00', &(0x7f0000000340)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000003c0)='trusted.,em1-=\b', 0xfffffffffffffffe) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x3) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='vegas\x00', 0x6) add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000480)='r', 0x1, 0xfffffffffffffffe) mount$9p_rdma(&(0x7f00000000c0)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x40, &(0x7f0000000180)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x8000}}, {@timeout={'timeout', 0x3d, 0x1}}, {@rq={'rq', 0x3d, 0x1ff}}, {@sq={'sq', 0x3d, 0x401}}, {@rq={'rq', 0x3d, 0x8}}, {@rq={'rq', 0x3d, 0x7ff}}]}}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0xc8, 0x15a, 0x1ff, 0x7, 0x8}) 05:58:38 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='ns\x00') fcntl$notify(r0, 0x402, 0x4000000001c) exit(0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f0000000340)=""/57, 0x39) 05:58:38 executing program 1: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x7fff) r1 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x2, 0x4, 0x1, 0x7}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={r2, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x40000, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r3, r0, &(0x7f0000f28ff8), 0x100000002) fcntl$getownex(r3, 0x10, &(0x7f0000000040)) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) r4 = getpgid(0x0) tkill(r4, 0x13) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f00000000c0)) 05:58:38 executing program 0 (fault-call:8 fault-nth:5): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_client='access=client'}, {@cache_loose='cache=loose'}]}}) [ 229.420476] attempt to access beyond end of device [ 229.425583] loop4: rw=12288, want=8200, limit=20 [ 229.442407] attempt to access beyond end of device [ 229.447423] loop4: rw=12288, want=12296, limit=20 [ 229.491639] attempt to access beyond end of device [ 229.496783] loop4: rw=12288, want=8200, limit=20 [ 229.502366] IPVS: ftp: loaded support on port[0] = 21 [ 229.526190] attempt to access beyond end of device [ 229.531229] loop4: rw=12288, want=12296, limit=20 [ 229.540777] FAULT_INJECTION: forcing a failure. [ 229.540777] name failslab, interval 1, probability 0, space 0, times 0 [ 229.545131] attempt to access beyond end of device [ 229.552082] CPU: 1 PID: 17529 Comm: syz-executor0 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 229.557024] loop4: rw=12288, want=8200, limit=20 [ 229.565474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 229.565479] Call Trace: [ 229.565506] dump_stack+0x1c9/0x2b4 [ 229.565527] ? dump_stack_print_info.cold.2+0x52/0x52 [ 229.565545] ? filename_lookup+0x397/0x510 [ 229.570475] attempt to access beyond end of device [ 229.579642] ? user_path_at_empty+0x40/0x50 [ 229.579659] ? perf_trace_lock+0xde/0x920 [ 229.579681] should_fail.cold.4+0xa/0x11 [ 229.579699] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 229.582279] loop4: rw=12288, want=12296, limit=20 [ 229.585870] ? kasan_check_write+0x14/0x20 [ 229.585884] ? do_raw_spin_lock+0xc1/0x200 [ 229.585899] ? zap_class+0x740/0x740 [ 229.585918] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 229.639734] ? debug_check_no_obj_freed+0x30b/0x595 [ 229.644739] ? quarantine_put+0x10d/0x1b0 [ 229.648877] ? lock_acquire+0x1e4/0x540 [ 229.652837] ? fs_reclaim_acquire+0x20/0x20 [ 229.657145] ? lock_downgrade+0x8f0/0x8f0 [ 229.661283] ? check_same_owner+0x340/0x340 [ 229.665589] ? lock_downgrade+0x8f0/0x8f0 [ 229.669724] ? rcu_note_context_switch+0x730/0x730 [ 229.674649] __should_failslab+0x124/0x180 [ 229.678871] should_failslab+0x9/0x14 [ 229.682657] kmem_cache_alloc_trace+0x2cb/0x780 [ 229.687309] ? kasan_check_write+0x14/0x20 [ 229.691614] ? do_raw_read_unlock+0x3f/0x60 [ 229.695926] vfs_new_fs_context+0x5a/0x6d0 [ 229.700155] do_mount+0x605/0x1e20 [ 229.703684] ? copy_mount_string+0x40/0x40 [ 229.707903] ? retint_kernel+0x10/0x10 [ 229.711777] ? copy_mount_options+0x213/0x380 [ 229.716257] ? write_comp_data+0x70/0x70 [ 229.720309] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 229.725829] ? copy_mount_options+0x285/0x380 [ 229.730323] ksys_mount+0x12d/0x140 [ 229.733936] __x64_sys_mount+0xbe/0x150 [ 229.737908] do_syscall_64+0x1b9/0x820 [ 229.741779] ? finish_task_switch+0x1d3/0x870 [ 229.746259] ? syscall_return_slowpath+0x5e0/0x5e0 [ 229.751175] ? syscall_return_slowpath+0x31d/0x5e0 [ 229.756090] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 229.761095] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 229.765924] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 229.771097] RIP: 0033:0x456a09 05:58:39 executing program 0 (fault-call:8 fault-nth:6): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_client='access=client'}, {@cache_loose='cache=loose'}]}}) [ 229.774276] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 229.793707] RSP: 002b:00007f3ecbe13c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 229.801402] RAX: ffffffffffffffda RBX: 00007f3ecbe146d4 RCX: 0000000000456a09 [ 229.808655] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 229.815907] RBP: 00000000009300a0 R08: 00000000200004c0 R09: 0000000000000000 [ 229.823176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 229.830430] R13: 00000000004d1750 R14: 00000000004c6e7f R15: 0000000000000005 05:58:39 executing program 5: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x80000001}, {0xa, 0x0, 0x0, @remote}}, 0x5c) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001c40)={&(0x7f00000000c0), 0xc, &(0x7f0000001640)=[{&(0x7f00000020c0)=ANY=[@ANYBLOB="1000007f0ad21853315b6502b153"], 0x1}], 0x1}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f0000000000)={0x7f, 0x18000000, 0xffffffff00000000, 0x4, 0x100000000}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000002100)=ANY=[@ANYBLOB="001000009cb31d58ff0ca0591e6f5e932a07b505ea40dd38d2b34cb8b8b99f8dfd4fdbab36805f720d85b24b7e590a121ca11171b9ce39dad7c6e9129d859b025dc7adb3aa6529f85450b339924e521d0c5c1297a60b5982aff9c9c2427c2d04da67123b73e738d4dd1c9c7aec0942f29b27f5a3cdf0349854633b3ed5bf1fad5a2d7cc144edafedb9dffeb3b13b501781cea0eb0037cc42df09de4fe7f049cc03ad8286dd02b861af07e259439ac2be0aabdd437ca4514ee43432c7f028d14097a53ba17ce1a38a7732543ba8bf972171b0ee2b91b6e412e4437c17120043429079014739cd4b181d6f8621c708ac0fc1e9cc48e91349480df72f6b18adccd03adf1ab494ab0772c3086d41d4ab2eacf99c93f0adcb4b2e953d5a6c7606d778f373067916ae4b97c8e907c709d7392463f031e973a738012141f971b44480eb46a6396f7a6db6ef6abfd19722ee5660af7bfc26b5eabdaa3fbcac7ceaa630457036b4be7944af74bd5d7402d67f9948ba97304653a83dc361790d7b3b4a95e7401293855f4d5d6684b52df9e777d58601ca613a27d2ad29c75bb14919c533038745c73a53"], &(0x7f0000001200)=0x1) r1 = accept(r0, &(0x7f0000000040)=@can, &(0x7f0000000100)=0x80) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x10000, 0x10000, 0x8}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000001c0)={r2, 0x2}, &(0x7f0000000200)=0x8) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) [ 229.919634] FAULT_INJECTION: forcing a failure. [ 229.919634] name failslab, interval 1, probability 0, space 0, times 0 [ 229.930935] CPU: 1 PID: 17543 Comm: syz-executor0 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 229.939428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 229.948784] Call Trace: [ 229.951385] dump_stack+0x1c9/0x2b4 [ 229.955063] ? dump_stack_print_info.cold.2+0x52/0x52 [ 229.960266] ? perf_trace_lock+0xde/0x920 [ 229.964425] should_fail.cold.4+0xa/0x11 05:58:39 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000440)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x4}}, 0xa) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x225, 0x84001) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x6, 0x0, 0x3}}, 0x28) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x1a, 0x1700, {0x0, &(0x7f0000000280)}}, 0x20) [ 229.968496] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 229.973608] ? save_stack+0xa9/0xd0 [ 229.977237] ? save_stack+0x43/0xd0 [ 229.980864] ? kasan_kmalloc+0xc4/0xe0 [ 229.984761] ? vfs_new_fs_context+0x5a/0x6d0 [ 229.989178] ? do_mount+0x605/0x1e20 [ 229.992942] ? __x64_sys_mount+0xbe/0x150 [ 229.997099] ? do_syscall_64+0x1b9/0x820 [ 230.001170] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 230.006547] ? quarantine_put+0x10d/0x1b0 [ 230.010714] ? lock_acquire+0x1e4/0x540 [ 230.014697] ? fs_reclaim_acquire+0x20/0x20 05:58:39 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000300)={'security\x00'}, &(0x7f0000000240)=0x54) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000001000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000e80)="66b88c008ec8430f01d10f20a03e66d17293c4e1fc117bd2660fe590387e000066baf80cb8e42ede86ef66bafc0cb806e60000efc4c20bf7b7004800000f00180f20d835200000000f22d8", 0x4b}], 0x1, 0x0, &(0x7f0000000e40), 0x1000032f) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000400)={0x0, 0x6, 0x4, 0x8, 0x6a3f, 0x0, 0x6, 0x1, {0x0, @in={{0x2, 0x4e21, @rand_addr=0x4}}, 0xffffffff80000001, 0x9, 0x1000000000000000, 0x6}}, &(0x7f00000004c0)=0xb0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000500)={r6, 0x100000001, 0x7, [0x4, 0x4, 0x3, 0x52, 0x8, 0xff, 0x9]}, &(0x7f0000000540)=0x16) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000080)=0x2) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000380)={0x3f, 0x6, 0x0, 0x8, 0x7}, 0x14) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$BLKBSZGET(r5, 0x80081270, &(0x7f0000000580)) [ 230.019032] ? lock_downgrade+0x8f0/0x8f0 [ 230.023187] ? fs_reclaim_acquire+0x20/0x20 [ 230.027524] ? check_same_owner+0x340/0x340 [ 230.031855] ? debug_mutex_init+0x2d/0x60 [ 230.036016] ? rcu_note_context_switch+0x730/0x730 [ 230.040957] __should_failslab+0x124/0x180 [ 230.045202] should_failslab+0x9/0x14 [ 230.049013] kmem_cache_alloc_trace+0x2cb/0x780 [ 230.053689] ? put_fs_context+0x500/0x500 [ 230.057852] legacy_init_fs_context+0x49/0xd0 [ 230.062358] ? refcount_inc_checked+0x29/0x70 [ 230.066862] vfs_new_fs_context+0x2c3/0x6d0 [ 230.071198] do_mount+0x605/0x1e20 [ 230.074753] ? copy_mount_string+0x40/0x40 [ 230.079012] ? kasan_kmalloc+0xc4/0xe0 [ 230.082899] ? kmem_cache_alloc_trace+0x318/0x780 [ 230.087746] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 230.093294] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 230.098839] ? copy_mount_options+0x285/0x380 [ 230.103353] ksys_mount+0x12d/0x140 [ 230.106973] __x64_sys_mount+0xbe/0x150 [ 230.110961] do_syscall_64+0x1b9/0x820 [ 230.114836] ? finish_task_switch+0x1d3/0x870 [ 230.119319] ? syscall_return_slowpath+0x5e0/0x5e0 [ 230.124235] ? syscall_return_slowpath+0x31d/0x5e0 [ 230.129148] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 230.134171] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 230.139004] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 230.144176] RIP: 0033:0x456a09 [ 230.147373] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 230.166257] RSP: 002b:00007f3ecbe13c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 230.173950] RAX: ffffffffffffffda RBX: 00007f3ecbe146d4 RCX: 0000000000456a09 [ 230.181200] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 230.188464] RBP: 00000000009300a0 R08: 00000000200004c0 R09: 0000000000000000 [ 230.195715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 230.202966] R13: 00000000004d1750 R14: 00000000004c6e7f R15: 0000000000000006 05:58:39 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)) 05:58:39 executing program 0 (fault-call:8 fault-nth:7): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_client='access=client'}, {@cache_loose='cache=loose'}]}}) 05:58:39 executing program 3: r0 = socket(0x40000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x8, &(0x7f00003dd000)=""/13, &(0x7f000033bffc)=0xd) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, &(0x7f0000000040)=0x1c) ioctl$TIOCMGET(r1, 0x5415, &(0x7f00000000c0)) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000100)={0x7b, 0xffff}) 05:58:39 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x4d5) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') readv(r1, &(0x7f0000000800)=[{&(0x7f0000000700)=""/84, 0x54}, {&(0x7f00000008c0)=""/27, 0x1b}], 0x2) 05:58:39 executing program 1: r0 = socket$inet(0x10, 0x3, 0xc) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x8000, 0x1) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dsp\x00', 0x1400000000807fd, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000180)={0x2, 0x0, 'client0\x00', 0xffffffff80000004, "40392fa9293acc54", "0722799707dda5ef3114422d3f4c8e3fdef7de81a1c889fba98ed07bca532cea", 0x7fff, 0x3ff}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000100)={0x0, r2}) fgetxattr(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="62757266732e4d6367726f7570626465762a6d6943245b611f0f22ab861380d87a78be6b3e6ba4407618451db656110a00e62c619c334a7213cc19464abd94ea6a7a02aaeb968c40dc132a59c81c0a91c4d2914b4f325e9bfd33b734185ce3001bb25e7b609ddfb6805c07db687adb4f47f1ef3d95181aba40a7a58c63de91e59c96e20d9636cc522ea2f237d097a8c32ebc37fe8a3f4d3d4aa299deb689d577dc6015195bbdf04aeccd8b38c29db90bcb01304abea664d1"], &(0x7f0000000240)=""/35, 0x23) fcntl$setstatus(r2, 0x4, 0x2000) set_mempolicy(0x3, &(0x7f0000000080)=0xfff, 0x1) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="24000000100001000000fd946fa2830020200a0009000300001c85680c1ba3a20400ff5e28000000050affffba16a0aa1c0009c001da5a80d1090000000000000029090000000cd37eaa0e9e", 0x4c}], 0x1}, 0x0) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000340)) 05:58:39 executing program 7: r0 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x7, 0x14000) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)=0x0) sendmsg$netlink(r0, &(0x7f0000000200)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0xa080a28c}, 0xc, &(0x7f0000000180)=[{&(0x7f0000000300)={0xa8, 0x2f, 0x308, 0x70bd2c, 0x25dfdbff, "", [@nested={0xc, 0x3d, [@typed={0x8, 0x50, @pid=r1}]}, @nested={0x8c, 0x1e, [@generic="cb1f5e9d34f9173bf9ab63bfb426696d09898272308c0ae8d93e259ccff0dc25e9e0d9198283cc712a258cbf96f9455440c10191cae521f027615d8821d551adae008ae78cea7013153bdc214c236951c606888d08cbf930c19fb55e538f9294efcb29f238dcc42e327b71ae648d38300a7f5fde4f6908ebbf673a387da2aaedd3e4c72976e00e"]}]}, 0xa8}], 0x1, 0x0, 0x0, 0x1}, 0x4000001) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000000080)) syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffd8c79a82, 0xaaaaaaaaaaaad22, &(0x7f0000000180), 0x80, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES16], @ANYRES32=0x0]) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000240)) [ 230.365773] FAULT_INJECTION: forcing a failure. [ 230.365773] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 230.377662] CPU: 1 PID: 17572 Comm: syz-executor0 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 230.385438] netlink: 20 bytes leftover after parsing attributes in process `syz-executor1'. [ 230.386153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 230.386159] Call Trace: [ 230.386182] dump_stack+0x1c9/0x2b4 [ 230.386203] ? dump_stack_print_info.cold.2+0x52/0x52 [ 230.415756] ? perf_trace_lock+0xde/0x920 [ 230.419928] should_fail.cold.4+0xa/0x11 [ 230.424006] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 230.429119] ? kasan_check_read+0x11/0x20 [ 230.433278] ? rcu_is_watching+0x8c/0x150 [ 230.437444] ? is_bpf_text_address+0xd7/0x170 [ 230.441954] ? kernel_text_address+0x79/0xf0 [ 230.446375] ? __kernel_text_address+0xd/0x40 [ 230.450883] ? lock_acquire+0x1e4/0x540 [ 230.454876] ? fs_reclaim_acquire+0x20/0x20 [ 230.459212] ? lock_downgrade+0x8f0/0x8f0 [ 230.463365] ? check_same_owner+0x340/0x340 [ 230.467685] ? rcu_note_context_switch+0x730/0x730 [ 230.472633] ? legacy_parse_monolithic+0xde/0x1e0 [ 230.477467] __alloc_pages_nodemask+0x36e/0xdb0 [ 230.482124] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 230.487125] ? lock_acquire+0x1e4/0x540 [ 230.491081] ? fs_reclaim_acquire+0x20/0x20 [ 230.495398] ? lock_downgrade+0x8f0/0x8f0 [ 230.499539] ? lock_release+0xa30/0xa30 [ 230.503520] ? check_same_owner+0x340/0x340 [ 230.507824] ? check_same_owner+0x340/0x340 [ 230.512129] ? debug_mutex_init+0x2d/0x60 [ 230.516355] ? kasan_unpoison_shadow+0x35/0x50 [ 230.520922] ? kasan_kmalloc+0xc4/0xe0 [ 230.524796] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 230.530320] alloc_pages_current+0x10c/0x210 [ 230.534721] get_zeroed_page+0x14/0x50 [ 230.538592] legacy_validate+0x133/0x220 [ 230.542637] ? vfs_set_fs_source+0x180/0x180 [ 230.547032] vfs_get_tree+0x144/0x5c0 [ 230.550830] do_mount+0x6f2/0x1e20 [ 230.554351] ? check_same_owner+0x340/0x340 [ 230.558654] ? lock_release+0xa30/0xa30 [ 230.562614] ? copy_mount_string+0x40/0x40 [ 230.566828] ? kasan_kmalloc+0xc4/0xe0 [ 230.570700] ? kmem_cache_alloc_trace+0x318/0x780 [ 230.575536] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 230.581074] ? _copy_from_user+0xdf/0x150 [ 230.585207] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 230.590727] ? copy_mount_options+0x285/0x380 [ 230.595205] ksys_mount+0x12d/0x140 [ 230.598818] __x64_sys_mount+0xbe/0x150 [ 230.602788] do_syscall_64+0x1b9/0x820 [ 230.606656] ? syscall_return_slowpath+0x5e0/0x5e0 [ 230.611571] ? syscall_return_slowpath+0x31d/0x5e0 [ 230.616485] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 230.621498] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 230.626326] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 230.631495] RIP: 0033:0x456a09 [ 230.634690] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 230.653694] RSP: 002b:00007f3ecbe13c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 230.661412] RAX: ffffffffffffffda RBX: 00007f3ecbe146d4 RCX: 0000000000456a09 [ 230.668691] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 230.675962] RBP: 00000000009300a0 R08: 00000000200004c0 R09: 0000000000000000 [ 230.683238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 230.690511] R13: 00000000004d1750 R14: 00000000004c6e7f R15: 0000000000000007 [ 230.701680] netlink: 20 bytes leftover after parsing attributes in process `syz-executor1'. [ 230.718218] attempt to access beyond end of device [ 230.723426] loop4: rw=12288, want=8200, limit=20 [ 230.733007] attempt to access beyond end of device [ 230.738052] loop4: rw=12288, want=12296, limit=20 [ 230.743947] attempt to access beyond end of device [ 230.749224] loop4: rw=12288, want=8200, limit=20 [ 230.774553] attempt to access beyond end of device [ 230.779560] loop4: rw=12288, want=12296, limit=20 [ 230.800156] XFS (loop7): Invalid superblock magic number [ 230.818319] attempt to access beyond end of device [ 230.823371] loop4: rw=12288, want=8200, limit=20 [ 230.837422] attempt to access beyond end of device [ 230.842436] loop4: rw=12288, want=12296, limit=20 [ 230.848883] attempt to access beyond end of device [ 230.853877] loop4: rw=12288, want=8200, limit=20 [ 230.866802] attempt to access beyond end of device [ 230.871890] loop4: rw=12288, want=12296, limit=20 [ 231.217832] device bridge_slave_1 left promiscuous mode [ 231.223370] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.233217] device bridge_slave_0 left promiscuous mode [ 231.238738] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.873505] team0 (unregistering): Port device team_slave_1 removed [ 231.881939] team0 (unregistering): Port device team_slave_0 removed [ 231.891072] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 231.906440] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 231.925734] bond0 (unregistering): Released all slaves [ 232.175420] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.181828] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.188975] device bridge_slave_0 entered promiscuous mode [ 232.220965] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.227465] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.235327] device bridge_slave_1 entered promiscuous mode [ 232.266972] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 232.298328] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 232.367010] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 232.399815] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 232.491620] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 232.498641] team0: Port device team_slave_0 added [ 232.518647] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 232.525795] team0: Port device team_slave_1 added [ 232.547634] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 232.568532] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 232.587178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 232.607822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 232.771263] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.777637] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.784260] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.790615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.393737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.455901] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 233.519202] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 233.525367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 233.535411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 233.591075] 8021q: adding VLAN 0 to HW filter on device team0 05:58:43 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x1d, 0x70d, 0x0, 0x0, {0x7}, [@generic="098f16d993"]}, 0x1c}}, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f00000001c0)=""/65) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000240)=r2, 0x4) write$P9_RATTACH(r2, &(0x7f0000000100)={0x14, 0x69, 0x2, {0x1c, 0x1, 0x8}}, 0x14) 05:58:43 executing program 0 (fault-call:8 fault-nth:8): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_client='access=client'}, {@cache_loose='cache=loose'}]}}) 05:58:43 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"00ac720000000000ec973f820f7c4000", 0x102}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="c2e4110a855c009eac019fa6028d760eebf1667a36321e4e042d35cda5cc38780d62c9aa3d7a8453988651fdbba91c740846fb0b5caa1b1422a4f9d956497407088075687387123907e06cc4e54510253e5f4074728514cbc87276e0bed1aa", 0x5f}], 0x1, 0x0) close(r0) 05:58:43 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x4d5) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') readv(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000700)=""/84, 0x54}, {&(0x7f00000008c0)=""/27, 0x1b}], 0x2) 05:58:43 executing program 5: socketpair$unix(0x1, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000200), 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0/file0'}, 0x11) close(r0) 05:58:43 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x7, 0x0) r1 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000000)={r0}) 05:58:43 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) socketpair(0x8, 0x1000000000e, 0xffffffffffffff01, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RAUTH(r2, &(0x7f00000000c0)={0x14, 0x67, 0x2, {0x80, 0x3, 0x6}}, 0x14) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000100)=0x0) getpriority(0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x7) ioctl$BLKPG(r1, 0x40140921, &(0x7f0000000040)={0x9, 0x1, 0x0, &(0x7f00000000c0)}) 05:58:43 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000040)="6632667305", &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)) [ 233.982303] FAULT_INJECTION: forcing a failure. [ 233.982303] name failslab, interval 1, probability 0, space 0, times 0 [ 233.993661] CPU: 0 PID: 17878 Comm: syz-executor0 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 234.002169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 234.011533] Call Trace: [ 234.014157] dump_stack+0x1c9/0x2b4 [ 234.017793] ? dump_stack_print_info.cold.2+0x52/0x52 [ 234.023000] ? perf_trace_lock+0x49d/0x920 [ 234.027252] should_fail.cold.4+0xa/0x11 [ 234.031327] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 234.036426] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 234.041435] ? bpf_prog_kallsyms_find+0xde/0x4c0 [ 234.046196] ? is_bpf_text_address+0xae/0x170 [ 234.050706] ? lock_downgrade+0x8f0/0x8f0 [ 234.054857] ? lock_release+0xa30/0xa30 [ 234.058842] ? lock_acquire+0x1e4/0x540 [ 234.062810] ? fs_reclaim_acquire+0x20/0x20 [ 234.067128] ? lock_downgrade+0x8f0/0x8f0 [ 234.071285] ? kernel_text_address+0x79/0xf0 [ 234.075693] ? check_same_owner+0x340/0x340 [ 234.080010] ? unwind_get_return_address+0x61/0xa0 [ 234.084938] ? rcu_note_context_switch+0x730/0x730 [ 234.089868] __should_failslab+0x124/0x180 [ 234.094112] should_failslab+0x9/0x14 [ 234.097925] __kmalloc_track_caller+0x2c4/0x760 [ 234.102587] ? save_stack+0xa9/0xd0 [ 234.106207] ? save_stack+0x43/0xd0 [ 234.109835] ? kasan_kmalloc+0xc4/0xe0 [ 234.113719] ? v9fs_mount+0x61/0x900 [ 234.117437] ? v9fs_session_init+0xdd/0x1a80 [ 234.121847] kstrdup+0x39/0x70 [ 234.125046] v9fs_session_init+0xdd/0x1a80 [ 234.129278] ? legacy_parse_monolithic+0xde/0x1e0 [ 234.134154] ? v9fs_show_options+0x7e0/0x7e0 [ 234.138565] ? lock_release+0xa30/0xa30 [ 234.142536] ? check_same_owner+0x340/0x340 [ 234.146854] ? lock_downgrade+0x8f0/0x8f0 [ 234.150997] ? kasan_unpoison_shadow+0x35/0x50 [ 234.155572] ? kasan_kmalloc+0xc4/0xe0 [ 234.159465] ? kmem_cache_alloc_trace+0x318/0x780 [ 234.164299] ? kasan_unpoison_shadow+0x35/0x50 [ 234.168885] ? kasan_kmalloc+0xc4/0xe0 [ 234.172775] v9fs_mount+0x7c/0x900 [ 234.176403] ? v9fs_drop_inode+0x150/0x150 [ 234.180636] legacy_get_tree+0x131/0x460 [ 234.184701] vfs_get_tree+0x1cb/0x5c0 [ 234.188509] do_mount+0x6f2/0x1e20 [ 234.192043] ? check_same_owner+0x340/0x340 [ 234.196366] ? lock_release+0xa30/0xa30 [ 234.200339] ? copy_mount_string+0x40/0x40 [ 234.204579] ? kasan_kmalloc+0xc4/0xe0 [ 234.208485] ? kmem_cache_alloc_trace+0x318/0x780 [ 234.213328] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 234.218859] ? _copy_from_user+0xdf/0x150 [ 234.223005] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 234.228536] ? copy_mount_options+0x285/0x380 [ 234.233032] ksys_mount+0x12d/0x140 [ 234.236657] __x64_sys_mount+0xbe/0x150 [ 234.240632] do_syscall_64+0x1b9/0x820 [ 234.244510] ? finish_task_switch+0x1d3/0x870 [ 234.249000] ? syscall_return_slowpath+0x5e0/0x5e0 [ 234.253927] ? syscall_return_slowpath+0x31d/0x5e0 [ 234.258851] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 234.263871] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 234.268726] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 234.273919] RIP: 0033:0x456a09 [ 234.277107] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 234.296010] RSP: 002b:00007f3ecbe13c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 234.303716] RAX: ffffffffffffffda RBX: 00007f3ecbe146d4 RCX: 0000000000456a09 [ 234.310977] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 234.318243] RBP: 00000000009300a0 R08: 00000000200004c0 R09: 0000000000000000 [ 234.325508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 05:58:43 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x4d5) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') readv(r1, &(0x7f0000000800)=[{&(0x7f00000008c0)=""/27, 0x1b}], 0x1) [ 234.332769] R13: 00000000004d1750 R14: 00000000004c6e7f R15: 0000000000000008 [ 234.355325] device gre0 left promiscuous mode 05:58:43 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x800000, &(0x7f0000000800)={[{@gid={'gid'}}, {@nls={'nls', 0x3d, 'none'}}]}) [ 234.384516] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 234.400391] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 05:58:43 executing program 0 (fault-call:8 fault-nth:9): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_client='access=client'}, {@cache_loose='cache=loose'}]}}) 05:58:43 executing program 7: syz_emit_ethernet(0x0, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)={0x0, 0x400000000004, [0x0, 0x5f4, 0x442, 0x3f]}) [ 234.443809] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 234.467914] hfsplus: unable to load nls mapping "none" [ 234.473449] hfsplus: unable to parse mount options [ 234.550129] FAULT_INJECTION: forcing a failure. [ 234.550129] name failslab, interval 1, probability 0, space 0, times 0 [ 234.561597] CPU: 0 PID: 17920 Comm: syz-executor0 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 234.570105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 234.579480] Call Trace: [ 234.582083] dump_stack+0x1c9/0x2b4 [ 234.585728] ? dump_stack_print_info.cold.2+0x52/0x52 [ 234.590932] ? perf_trace_lock+0x49d/0x920 [ 234.595191] should_fail.cold.4+0xa/0x11 [ 234.599270] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 234.604392] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 234.609422] ? bpf_prog_kallsyms_find+0xde/0x4c0 [ 234.614214] ? is_bpf_text_address+0xae/0x170 [ 234.618730] ? lock_downgrade+0x8f0/0x8f0 [ 234.622901] ? lock_release+0xa30/0xa30 [ 234.626905] ? lock_acquire+0x1e4/0x540 [ 234.630892] ? fs_reclaim_acquire+0x20/0x20 [ 234.635227] ? lock_downgrade+0x8f0/0x8f0 [ 234.639395] ? kernel_text_address+0x79/0xf0 [ 234.643815] ? check_same_owner+0x340/0x340 [ 234.648144] ? unwind_get_return_address+0x61/0xa0 [ 234.653086] ? rcu_note_context_switch+0x730/0x730 [ 234.658036] __should_failslab+0x124/0x180 [ 234.662285] should_failslab+0x9/0x14 [ 234.666099] __kmalloc_track_caller+0x2c4/0x760 [ 234.670784] ? save_stack+0xa9/0xd0 [ 234.674437] ? save_stack+0x43/0xd0 [ 234.678087] ? kasan_kmalloc+0xc4/0xe0 [ 234.681997] ? v9fs_mount+0x61/0x900 [ 234.685991] ? v9fs_session_init+0xdd/0x1a80 [ 234.690429] kstrdup+0x39/0x70 [ 234.693652] v9fs_session_init+0xdd/0x1a80 [ 234.697912] ? legacy_parse_monolithic+0xde/0x1e0 [ 234.702795] ? v9fs_show_options+0x7e0/0x7e0 [ 234.707232] ? lock_release+0xa30/0xa30 [ 234.711219] ? check_same_owner+0x340/0x340 [ 234.715555] ? kasan_unpoison_shadow+0x35/0x50 [ 234.720142] ? kasan_kmalloc+0xc4/0xe0 [ 234.724031] ? kmem_cache_alloc_trace+0x318/0x780 [ 234.728884] ? kasan_unpoison_shadow+0x35/0x50 [ 234.733467] ? kasan_kmalloc+0xc4/0xe0 [ 234.737370] v9fs_mount+0x7c/0x900 [ 234.740916] ? v9fs_drop_inode+0x150/0x150 [ 234.745145] legacy_get_tree+0x131/0x460 [ 234.749221] vfs_get_tree+0x1cb/0x5c0 [ 234.753021] do_mount+0x6f2/0x1e20 [ 234.756556] ? check_same_owner+0x340/0x340 [ 234.760874] ? lock_release+0xa30/0xa30 [ 234.764859] ? copy_mount_string+0x40/0x40 [ 234.769093] ? retint_kernel+0x10/0x10 [ 234.772987] ? copy_mount_options+0x1f0/0x380 [ 234.777481] ? copy_mount_options+0x1fa/0x380 [ 234.781982] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 234.787511] ? copy_mount_options+0x285/0x380 [ 234.792010] ksys_mount+0x12d/0x140 [ 234.795635] __x64_sys_mount+0xbe/0x150 [ 234.799619] do_syscall_64+0x1b9/0x820 [ 234.803500] ? finish_task_switch+0x1d3/0x870 [ 234.807991] ? syscall_return_slowpath+0x5e0/0x5e0 [ 234.812925] ? syscall_return_slowpath+0x31d/0x5e0 [ 234.817859] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 234.822879] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 234.827721] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 234.832911] RIP: 0033:0x456a09 05:58:44 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300091000000000fffffffb0000000200130002400000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000002000100000000ffffff00020000000005000500000000000a00000000000000ff0100000000900000000000000000010000000000000000"], 0x80}}, 0x0) socket$key(0xf, 0x3, 0x2) 05:58:44 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00005d6000)='/dev/sequencer\x00', 0x100, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000100)) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6(0xa, 0x1400000000004, 0x0) recvfrom$inet(r1, &(0x7f0000000040)=""/87, 0x57, 0x2, 0x0, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @loopback, @dev}, 0xc) fremovexattr(r3, &(0x7f00000000c0)=@known='system.posix_acl_default\x00') r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000140)={@multicast2, @loopback}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'lo\x00'}) [ 234.836097] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 234.854988] RSP: 002b:00007f3ecbe13c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 234.862692] RAX: ffffffffffffffda RBX: 00007f3ecbe146d4 RCX: 0000000000456a09 [ 234.869952] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 234.877212] RBP: 00000000009300a0 R08: 00000000200004c0 R09: 0000000000000000 [ 234.884476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 234.891736] R13: 00000000004d1750 R14: 00000000004c6e7f R15: 0000000000000009 05:58:44 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x4d5) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') readv(r1, &(0x7f0000000800)=[{&(0x7f00000008c0)=""/27, 0x1b}], 0x1) 05:58:44 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="cd390b0804000000ffffffff86dd6002290f0030290000000000000000000000ffff00000000ff0200000000000000000000000000010200907800000000609433df0000000000000000000000040000000000000001fe800000000000001100000000000000"], 0x0) 05:58:44 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)) [ 234.919634] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 234.944289] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 05:58:44 executing program 0 (fault-call:8 fault-nth:10): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_client='access=client'}, {@cache_loose='cache=loose'}]}}) [ 235.071529] f2fs_msg: 61 callbacks suppressed [ 235.071542] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 235.083167] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 235.090821] attempt to access beyond end of device [ 235.095831] loop4: rw=12288, want=8200, limit=20 [ 235.100720] F2FS-fs (loop4): invalid crc value [ 235.118979] attempt to access beyond end of device [ 235.124003] loop4: rw=12288, want=12296, limit=20 [ 235.138209] F2FS-fs (loop4): invalid crc value [ 235.142968] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 235.149517] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 235.156686] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 235.159015] FAULT_INJECTION: forcing a failure. [ 235.159015] name failslab, interval 1, probability 0, space 0, times 0 [ 235.164758] attempt to access beyond end of device [ 235.175587] CPU: 0 PID: 17961 Comm: syz-executor0 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 235.180365] loop4: rw=12288, want=8200, limit=20 [ 235.188807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 235.188814] Call Trace: [ 235.188838] dump_stack+0x1c9/0x2b4 [ 235.188862] ? dump_stack_print_info.cold.2+0x52/0x52 [ 235.193638] F2FS-fs (loop4): invalid crc value [ 235.203634] ? perf_trace_lock+0x49d/0x920 [ 235.203662] should_fail.cold.4+0xa/0x11 [ 235.206265] attempt to access beyond end of device [ 235.209915] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 235.209937] ? lock_acquire+0x1e4/0x540 [ 235.215113] loop4: rw=12288, want=12296, limit=20 [ 235.219665] ? fs_reclaim_acquire+0x20/0x20 [ 235.219685] ? lock_downgrade+0x8f0/0x8f0 [ 235.223941] F2FS-fs (loop4): invalid crc value [ 235.227975] ? check_same_owner+0x340/0x340 [ 235.227995] ? legacy_parse_monolithic+0xde/0x1e0 [ 235.228021] ? lock_acquire+0x1e4/0x540 [ 235.228034] ? fs_reclaim_acquire+0x20/0x20 [ 235.228052] ? lock_downgrade+0x8f0/0x8f0 [ 235.232989] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 235.238140] ? lock_downgrade+0x8f0/0x8f0 [ 235.238159] ? check_same_owner+0x340/0x340 [ 235.296081] ? rcu_note_context_switch+0x730/0x730 [ 235.301021] ? do_raw_spin_unlock+0xa7/0x2f0 [ 235.305444] __should_failslab+0x124/0x180 [ 235.309690] should_failslab+0x9/0x14 [ 235.313525] kmem_cache_alloc_trace+0x2cb/0x780 [ 235.318200] ? kasan_unpoison_shadow+0x35/0x50 [ 235.322794] ? kasan_kmalloc+0xc4/0xe0 [ 235.326704] v9fs_mount+0x61/0x900 [ 235.330259] ? v9fs_drop_inode+0x150/0x150 [ 235.334500] legacy_get_tree+0x131/0x460 [ 235.338580] vfs_get_tree+0x1cb/0x5c0 [ 235.342394] do_mount+0x6f2/0x1e20 [ 235.345952] ? copy_mount_string+0x40/0x40 [ 235.350197] ? retint_kernel+0x10/0x10 [ 235.354102] ? copy_mount_options+0x213/0x380 [ 235.358601] ? audit_kill_trees+0x450/0x450 [ 235.362931] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 235.368491] ? copy_mount_options+0x285/0x380 [ 235.372985] ksys_mount+0x12d/0x140 [ 235.376615] __x64_sys_mount+0xbe/0x150 [ 235.380586] do_syscall_64+0x1b9/0x820 [ 235.384474] ? finish_task_switch+0x1d3/0x870 [ 235.388975] ? syscall_return_slowpath+0x5e0/0x5e0 [ 235.393903] ? syscall_return_slowpath+0x31d/0x5e0 [ 235.398822] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 235.403847] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 235.408701] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 235.413888] RIP: 0033:0x456a09 [ 235.417074] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 235.435987] RSP: 002b:00007f3ecbe13c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 235.443691] RAX: ffffffffffffffda RBX: 00007f3ecbe146d4 RCX: 0000000000456a09 [ 235.450963] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 235.458226] RBP: 00000000009300a0 R08: 00000000200004c0 R09: 0000000000000000 [ 235.465487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 235.472750] R13: 00000000004d1750 R14: 00000000004c6e7f R15: 000000000000000a [ 235.521541] attempt to access beyond end of device [ 235.526809] loop4: rw=12288, want=8200, limit=20 [ 235.539573] attempt to access beyond end of device [ 235.544664] loop4: rw=12288, want=12296, limit=20 [ 235.562401] attempt to access beyond end of device 05:58:44 executing program 2: r0 = open(&(0x7f0000000040)='./file0\x00', 0x80000, 0x4) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r1, 0x386cbe24036ac66e, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4008001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r2, &(0x7f0000000000)="82", &(0x7f0000000040)}, 0x18) 05:58:44 executing program 5: perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x50080, 0x0) bind$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0x9, {0x1, 0x8, 0x5105, 0xfffffffffffff8c5, 0x0, 0xffff}, 0x9}, 0xe) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000001c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000280)={{0x0, 0x1af66859572ea747, 0xf9c9, 0x7f, '\x00', 0x9}, 0x4, 0x4, 0x9, r2, 0xa, 0x0, 'syz1\x00', &(0x7f0000000200)=['/dev/vsock\x00', '/dev/vsock\x00', '.=vboxnet0em1keyringtrusted-\x00', 'lo.selinux+vmnet1\x00', '+\x00', '$]ppp0\x00', '/dev/dsp\x00', 'eth0+\x00', 'wlan0user\'+*eth1\x00', '\x00'], 0x6f, [], [0x400, 0x3, 0x83f, 0x80000001]}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x80400, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r3, 0xc0405519, &(0x7f0000000080)={0x4, 0x6, 0xb89e, 0x7, '\x00', 0x3f}) 05:58:44 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) lookup_dcookie(0x8000, &(0x7f0000000180)=""/240, 0xf0) setsockopt$inet_mreqsrc(r1, 0x11a, 0x1, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2=0xe000000a, @loopback}, 0x28) write$P9_RLERRORu(r1, &(0x7f00000000c0)={0xffffffffffffffe4, 0x7, 0x0, {{0x1, 'tls\x00'}}}, 0xfdef) 05:58:44 executing program 0 (fault-call:8 fault-nth:11): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_client='access=client'}, {@cache_loose='cache=loose'}]}}) 05:58:44 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x4d5) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') readv(r1, &(0x7f0000000800)=[{&(0x7f00000008c0)=""/27, 0x1b}], 0x1) 05:58:44 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"00ac720000000000ec973f820f7c4000", 0x102}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="c2e4110a855c009eac019fa6028d760eebf1667a36321e4e042d35cda5cc38780d62c9aa3d7a8453988651fdbba91c740846fb0b5caa1b1422a4f9d956497407088075687387123907e06cc4e54510253e5f4074728514cbc87276e0bed1aa", 0x5f}], 0x1, 0x0) close(r0) [ 235.567509] loop4: rw=12288, want=8200, limit=20 [ 235.581959] attempt to access beyond end of device [ 235.587112] loop4: rw=12288, want=12296, limit=20 05:58:44 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)) [ 235.651614] Unknown ioctl -1069525735 05:58:45 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) r1 = syz_open_procfs(r0, &(0x7f0000000140)="2e65742f6b636d00080023dec82b4cd2cda8df189c90b187abf74f9ebf9070bf6f755b88a7ce074100ae0b080000000000000039329c0b6a39ec332c917401000000dca1c9305b556832") readv(r1, &(0x7f0000c43f70)=[{&(0x7f0000ea5000)=""/4096, 0x1000}], 0x1) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000100)={0x3, 0x4, 0x10001, 0x1000, 0xda, 0x1000, 0x1, 0x3, 0x9, 0x3}) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=""/65, 0x41}], 0x1) [ 235.702992] Unknown ioctl -1069525735 [ 235.710679] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 235.730719] FAULT_INJECTION: forcing a failure. [ 235.730719] name failslab, interval 1, probability 0, space 0, times 0 [ 235.742546] CPU: 0 PID: 17988 Comm: syz-executor0 Not tainted 4.18.0-rc6-next-20180725+ #18 05:58:45 executing program 7: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x20) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f00000000c0)=r2, 0x4) listen(r0, 0x0) listen(r0, 0x8) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000040), 0x4) [ 235.751064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 235.760435] Call Trace: [ 235.763055] dump_stack+0x1c9/0x2b4 [ 235.766805] ? dump_stack_print_info.cold.2+0x52/0x52 [ 235.772004] ? perf_trace_lock+0x49d/0x920 [ 235.776250] should_fail.cold.4+0xa/0x11 [ 235.781493] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 235.786607] ? save_stack+0xa9/0xd0 [ 235.790245] ? save_stack+0x43/0xd0 [ 235.793884] ? __kmalloc_track_caller+0x14a/0x760 [ 235.798731] ? kstrdup+0x39/0x70 [ 235.802104] ? v9fs_session_init+0xdd/0x1a80 [ 235.806511] ? v9fs_mount+0x7c/0x900 [ 235.810223] ? vfs_get_tree+0x1cb/0x5c0 [ 235.814192] ? do_mount+0x6f2/0x1e20 [ 235.817899] ? __x64_sys_mount+0xbe/0x150 [ 235.822041] ? do_syscall_64+0x1b9/0x820 [ 235.826099] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 235.831477] ? lock_release+0xa30/0xa30 [ 235.835475] ? lock_acquire+0x1e4/0x540 [ 235.839480] ? fs_reclaim_acquire+0x20/0x20 [ 235.843807] ? lock_downgrade+0x8f0/0x8f0 [ 235.847967] ? kernel_text_address+0x79/0xf0 [ 235.852373] ? check_same_owner+0x340/0x340 [ 235.856688] ? unwind_get_return_address+0x61/0xa0 [ 235.861615] ? rcu_note_context_switch+0x730/0x730 [ 235.866551] __should_failslab+0x124/0x180 [ 235.870786] should_failslab+0x9/0x14 [ 235.874584] __kmalloc_track_caller+0x2c4/0x760 [ 235.879249] ? save_stack+0xa9/0xd0 [ 235.882877] ? save_stack+0x43/0xd0 [ 235.886496] ? kasan_kmalloc+0xc4/0xe0 [ 235.890379] ? v9fs_session_init+0x115/0x1a80 [ 235.894872] kstrdup+0x39/0x70 [ 235.898061] v9fs_session_init+0x115/0x1a80 [ 235.902383] ? legacy_parse_monolithic+0xde/0x1e0 [ 235.907251] ? v9fs_show_options+0x7e0/0x7e0 [ 235.911658] ? lock_release+0xa30/0xa30 [ 235.915634] ? lock_downgrade+0x8f0/0x8f0 [ 235.919789] ? check_same_owner+0x340/0x340 [ 235.924109] ? kasan_unpoison_shadow+0x35/0x50 [ 235.928686] ? kasan_kmalloc+0xc4/0xe0 [ 235.932576] ? kmem_cache_alloc_trace+0x318/0x780 [ 235.937416] ? kasan_unpoison_shadow+0x35/0x50 [ 235.941992] ? kasan_kmalloc+0xc4/0xe0 [ 235.945884] v9fs_mount+0x7c/0x900 [ 235.949439] ? v9fs_drop_inode+0x150/0x150 [ 235.953677] legacy_get_tree+0x131/0x460 [ 235.958383] vfs_get_tree+0x1cb/0x5c0 [ 235.962187] do_mount+0x6f2/0x1e20 [ 235.965721] ? check_same_owner+0x340/0x340 [ 235.970058] ? copy_mount_string+0x40/0x40 [ 235.974292] ? retint_kernel+0x10/0x10 [ 235.978181] ? copy_mount_options+0x213/0x380 [ 235.982675] ? write_comp_data+0x22/0x70 [ 235.986733] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 235.992264] ? copy_mount_options+0x285/0x380 [ 235.996760] ksys_mount+0x12d/0x140 [ 236.000387] __x64_sys_mount+0xbe/0x150 [ 236.004372] do_syscall_64+0x1b9/0x820 [ 236.008266] ? finish_task_switch+0x1d3/0x870 [ 236.012760] ? syscall_return_slowpath+0x5e0/0x5e0 [ 236.017684] ? syscall_return_slowpath+0x31d/0x5e0 [ 236.022608] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 236.027630] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 236.032485] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 236.037666] RIP: 0033:0x456a09 05:58:45 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="800000000002000019000000e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000200)=ANY=[]) lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='security.ima\x00') r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x50000, 0x0) recvfrom$inet6(r1, &(0x7f0000000200)=""/202, 0xca, 0x43, &(0x7f0000000140)={0xa, 0x4e21, 0x7fffffff, @local, 0x3}, 0x1c) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000300)={0x1, 0x0, [0x6, 0x9, 0xffff, 0x0, 0x9, 0x49e, 0x5, 0x6333da28]}) fcntl$getflags(r0, 0x40a) sendto$inet6(r1, &(0x7f0000000380)="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", 0x1000, 0x51, &(0x7f0000001380)={0xa, 0x4e24, 0x6aaa, @dev={0xfe, 0x80, [], 0x11}, 0xfff}, 0x1c) [ 236.040856] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 236.059748] RSP: 002b:00007f3ecbe13c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 236.067457] RAX: ffffffffffffffda RBX: 00007f3ecbe146d4 RCX: 0000000000456a09 [ 236.074735] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 236.081997] RBP: 00000000009300a0 R08: 00000000200004c0 R09: 0000000000000000 [ 236.089255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 236.096525] R13: 00000000004d1750 R14: 00000000004c6e7f R15: 000000000000000b 05:58:45 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x4d5) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') readv(r1, &(0x7f0000000800)=[{&(0x7f0000000700)=""/84, 0x54}], 0x1) [ 236.111712] attempt to access beyond end of device [ 236.116810] loop4: rw=12288, want=8200, limit=20 [ 236.123977] attempt to access beyond end of device [ 236.129032] loop4: rw=12288, want=12296, limit=20 05:58:45 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0xfffffffffffffffd, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000140)={0x0, r2}) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0xe}}}, 0x1e) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000080)={'lo\x00', {0x2, 0x4e24, @local}}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x101002, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) epoll_create1(0x80000) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x7, 0x0) write(r0, &(0x7f0000000000)="220000004a000700ea091008090007000a000000e46916c36f0279c66874f3a17a17", 0x22) 05:58:45 executing program 0 (fault-call:8 fault-nth:12): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_client='access=client'}, {@cache_loose='cache=loose'}]}}) [ 236.153024] attempt to access beyond end of device [ 236.158133] loop4: rw=12288, want=8200, limit=20 [ 236.172608] attempt to access beyond end of device [ 236.177898] loop4: rw=12288, want=12296, limit=20 05:58:45 executing program 7: r0 = socket$inet6(0xa, 0x1000000000000003, 0xc2) listen(r0, 0x29d) 05:58:45 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001740)=""/163, &(0x7f0000000540)=""/246, &(0x7f0000000640)=""/4096}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000180)="025c3f0a00145f8f764070") ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r1}) [ 236.243171] attempt to access beyond end of device [ 236.248225] loop4: rw=12288, want=8200, limit=20 [ 236.279554] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'. [ 236.279781] FAULT_INJECTION: forcing a failure. [ 236.279781] name failslab, interval 1, probability 0, space 0, times 0 [ 236.299325] CPU: 1 PID: 18017 Comm: syz-executor0 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 236.307820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 236.316940] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'. [ 236.317179] Call Trace: [ 236.328172] dump_stack+0x1c9/0x2b4 [ 236.331835] ? dump_stack_print_info.cold.2+0x52/0x52 [ 236.337037] ? is_bpf_text_address+0xd7/0x170 [ 236.341546] ? perf_trace_lock+0xde/0x920 [ 236.345747] should_fail.cold.4+0xa/0x11 [ 236.349829] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 236.354976] ? save_stack+0xa9/0xd0 [ 236.358613] ? kasan_kmalloc+0xc4/0xe0 [ 236.362508] ? kmem_cache_alloc_trace+0x152/0x780 [ 236.367355] ? v9fs_session_init+0x21a/0x1a80 [ 236.371850] ? v9fs_mount+0x7c/0x900 [ 236.375575] ? legacy_get_tree+0x131/0x460 [ 236.379810] ? vfs_get_tree+0x1cb/0x5c0 [ 236.383786] ? do_mount+0x6f2/0x1e20 [ 236.387961] ? ksys_mount+0x12d/0x140 [ 236.391765] ? __x64_sys_mount+0xbe/0x150 [ 236.395916] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 236.401283] ? lock_release+0xa30/0xa30 [ 236.405263] ? lock_acquire+0x1e4/0x540 [ 236.409237] ? fs_reclaim_acquire+0x20/0x20 [ 236.413562] ? lock_downgrade+0x8f0/0x8f0 [ 236.417710] ? lock_acquire+0x1e4/0x540 [ 236.421696] ? check_same_owner+0x340/0x340 [ 236.426031] ? __kernel_text_address+0xd/0x40 [ 236.430543] ? rcu_note_context_switch+0x730/0x730 [ 236.435486] ? __save_stack_trace+0x8d/0xf0 [ 236.439827] __should_failslab+0x124/0x180 [ 236.441994] attempt to access beyond end of device [ 236.444069] should_failslab+0x9/0x14 [ 236.444087] __kmalloc_track_caller+0x2c4/0x760 [ 236.444107] ? kmem_cache_alloc_trace+0x318/0x780 [ 236.449509] loop4: rw=12288, want=12296, limit=20 [ 236.453282] ? kasan_kmalloc+0xc4/0xe0 [ 236.453295] ? p9_client_create+0x445/0x1631 [ 236.453311] kstrdup+0x39/0x70 [ 236.467908] attempt to access beyond end of device [ 236.471501] p9_client_create+0x445/0x1631 [ 236.471519] ? lock_release+0xa30/0xa30 05:58:45 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000480)={'veth0_to_bond\x00', {0x2, 0x4e20, @multicast2}}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x30000, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@broadcast}}, &(0x7f00000003c0)=0xe8) write$P9_RSTATu(r1, &(0x7f0000000400)={0x65, 0x7d, 0x2, {{0x0, 0x50, 0x3, 0x5, {0x2, 0x3, 0x7}, 0x2000000, 0x7, 0x7, 0x0, 0xe, '-eth1security+', 0x7, 'discard', 0x4, 'xfs\x00', 0x4, 'xfs\x00'}, 0x0, "", r2, r3, r4}}, 0x65) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, &(0x7f0000000040)={[{@discard='discard'}]}) 05:58:45 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x48, @tick=0x8, 0x7ff, {0x9, 0xfffffffffffffffa}, 0x5a9, 0x0, 0xf7}) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000200)) r2 = msgget$private(0x0, 0x0) msgsnd(r2, &(0x7f0000000480)={0x3}, 0x2000, 0x0) msgrcv(r2, &(0x7f00000000c0)={0x0, ""/84}, 0x5c, 0x2, 0x3800) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000140)={{0x7fff, 0x100}, 'port1\x00', 0x0, 0x80000, 0x7, 0x1f, 0x9, 0x5, 0x6, 0x0, 0x1, 0x9dc0}) [ 236.471538] ? p9_client_read+0xbb0/0xbb0 [ 236.475956] loop4: rw=12288, want=8200, limit=20 [ 236.479157] ? lock_acquire+0x1e4/0x540 [ 236.479171] ? fs_reclaim_acquire+0x20/0x20 [ 236.479191] ? lock_downgrade+0x8f0/0x8f0 [ 236.484437] attempt to access beyond end of device [ 236.488321] ? lock_release+0xa30/0xa30 [ 236.488338] ? kernel_text_address+0x79/0xf0 [ 236.488350] ? __lockdep_init_map+0x105/0x590 [ 236.488366] ? lockdep_init_map+0x9/0x10 [ 236.492349] loop4: rw=12288, want=12296, limit=20 [ 236.496471] ? kasan_check_write+0x14/0x20 [ 236.496483] ? __init_rwsem+0x1cc/0x2a0 [ 236.496500] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 236.553389] ? __kmalloc_track_caller+0x311/0x760 [ 236.558216] ? save_stack+0xa9/0xd0 [ 236.561828] ? save_stack+0x43/0xd0 [ 236.565440] ? kasan_kmalloc+0xc4/0xe0 [ 236.569310] ? memcpy+0x45/0x50 [ 236.572580] v9fs_session_init+0x21a/0x1a80 [ 236.576889] ? legacy_parse_monolithic+0xde/0x1e0 [ 236.581721] ? v9fs_show_options+0x7e0/0x7e0 [ 236.586118] ? lock_release+0xa30/0xa30 [ 236.590094] ? check_same_owner+0x340/0x340 [ 236.594414] ? lock_downgrade+0x8f0/0x8f0 [ 236.598549] ? kasan_unpoison_shadow+0x35/0x50 [ 236.603114] ? kasan_kmalloc+0xc4/0xe0 [ 236.606990] ? kmem_cache_alloc_trace+0x318/0x780 [ 236.611822] ? kasan_unpoison_shadow+0x35/0x50 [ 236.616390] ? kasan_kmalloc+0xc4/0xe0 [ 236.620265] v9fs_mount+0x7c/0x900 [ 236.623808] ? v9fs_drop_inode+0x150/0x150 [ 236.628031] legacy_get_tree+0x131/0x460 [ 236.632082] vfs_get_tree+0x1cb/0x5c0 [ 236.635871] do_mount+0x6f2/0x1e20 [ 236.639400] ? check_same_owner+0x340/0x340 [ 236.643746] ? copy_mount_string+0x40/0x40 [ 236.647969] ? retint_kernel+0x10/0x10 [ 236.651856] ? copy_mount_options+0x1e3/0x380 [ 236.656338] ? write_comp_data+0x1/0x70 [ 236.660310] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 236.665850] ? copy_mount_options+0x285/0x380 [ 236.670349] ksys_mount+0x12d/0x140 [ 236.673967] __x64_sys_mount+0xbe/0x150 [ 236.677931] do_syscall_64+0x1b9/0x820 [ 236.681807] ? finish_task_switch+0x1d3/0x870 [ 236.686293] ? syscall_return_slowpath+0x5e0/0x5e0 [ 236.691209] ? syscall_return_slowpath+0x31d/0x5e0 [ 236.696125] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 236.701131] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 236.705979] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 236.711162] RIP: 0033:0x456a09 [ 236.714343] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 236.733231] RSP: 002b:00007f3ecbe13c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 236.740936] RAX: ffffffffffffffda RBX: 00007f3ecbe146d4 RCX: 0000000000456a09 [ 236.748206] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 236.755476] RBP: 00000000009300a0 R08: 00000000200004c0 R09: 0000000000000000 [ 236.762733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 236.769990] R13: 00000000004d1750 R14: 00000000004c6e7f R15: 000000000000000c 05:58:46 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)) [ 236.789743] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 236.798887] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 236.807960] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 236.830663] EXT4-fs error (device loop2): ext4_iget:4778: inode #2: comm syz-executor2: root inode unallocated 05:58:46 executing program 0 (fault-call:8 fault-nth:13): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_client='access=client'}, {@cache_loose='cache=loose'}]}}) 05:58:46 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"00ac720000000000ec973f820f7c4000", 0x102}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="c2e4110a855c009eac019fa6028d760eebf1667a36321e4e042d35cda5cc38780d62c9aa3d7a8453988651fdbba91c740846fb0b5caa1b1422a4f9d956497407088075687387123907e06cc4e54510253e5f4074728514cbc87276e0bed1aa", 0x5f}], 0x1, 0x0) close(r0) [ 236.860051] EXT4-fs (loop2): get root inode failed [ 236.865080] EXT4-fs (loop2): mount failed 05:58:46 executing program 6 (fault-call:3 fault-nth:0): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x4d5) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') readv(r1, &(0x7f0000000800)=[{&(0x7f0000000700)=""/84, 0x54}, {&(0x7f00000008c0)=""/27, 0x1b}], 0x2) [ 236.918106] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 236.927238] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 236.936303] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 236.946875] EXT4-fs error (device loop2): ext4_iget:4778: inode #2: comm syz-executor2: root inode unallocated [ 236.957728] EXT4-fs (loop2): get root inode failed [ 236.962726] EXT4-fs (loop2): mount failed 05:58:46 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x80041, 0x0) setsockopt$inet6_int(r1, 0x29, 0x24, &(0x7f0000000080)=0x20, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 05:58:46 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x48, @tick=0x8, 0x7ff, {0x9, 0xfffffffffffffffa}, 0x5a9, 0x0, 0xf7}) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000200)) r2 = msgget$private(0x0, 0x0) msgsnd(r2, &(0x7f0000000480)={0x3}, 0x2000, 0x0) msgrcv(r2, &(0x7f00000000c0)={0x0, ""/84}, 0x5c, 0x2, 0x3800) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000140)={{0x7fff, 0x100}, 'port1\x00', 0x0, 0x80000, 0x7, 0x1f, 0x9, 0x5, 0x6, 0x0, 0x1, 0x9dc0}) 05:58:46 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) accept4(r0, &(0x7f00000004c0)=@vsock={0x28, 0x0, 0x0, @reserved}, &(0x7f0000000540)=0x80, 0x80000) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x400000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x3) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764270") r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000040)=0x527, 0x4) listen(r3, 0x14040004) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000000)=0xffffffffffff0001, 0x4) r5 = dup2(r1, r1) ioctl$KVM_GET_MP_STATE(r5, 0x8004ae98, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f000055bfe4), 0x0) sendto$inet6(r4, &(0x7f00000007fa)="97", 0x1, 0x0, &(0x7f00006f9000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) init_module(&(0x7f0000000080)='*systemGPL)\\\x00', 0xd, &(0x7f00000000c0)='nodev\x00') getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000300)={0x0, 0xfffffffffffffffd}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000380)=@assoc_value={r6, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x2, 0x10}, &(0x7f0000000180)=0xc) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f00000001c0)={r7, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}}, 0x7, 0x4}, 0x90) r8 = msgget(0x3, 0x200) msgctl$MSG_INFO(r8, 0xc, &(0x7f00000003c0)=""/213) [ 236.976075] XFS (loop7): Mounting V4 Filesystem [ 236.989805] XFS (loop7): totally zeroed log [ 237.005427] XFS (loop7): Metadata corruption detected at xfs_agi_verify+0x188/0x5a0, xfs_agi block 0x2 [ 237.015035] XFS (loop7): Unmount and run xfs_repair [ 237.020086] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 237.026849] 00000000c2f520c8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 237.029631] FAULT_INJECTION: forcing a failure. [ 237.029631] name failslab, interval 1, probability 0, space 0, times 0 [ 237.036042] 00000000a068f5c7: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 237.047029] CPU: 0 PID: 18059 Comm: syz-executor6 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 237.055830] 0000000068d2c586: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 237.064305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 237.064310] Call Trace: [ 237.064338] dump_stack+0x1c9/0x2b4 [ 237.073167] 000000006f6e7191: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 237.082505] ? dump_stack_print_info.cold.2+0x52/0x52 [ 237.082522] ? rcu_note_context_switch+0x730/0x730 [ 237.085093] 0000000023ed65e5: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 237.088699] should_fail.cold.4+0xa/0x11 [ 237.088715] ? kasan_check_write+0x14/0x20 [ 237.097540] 00000000fac40eeb: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 237.102700] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 237.102715] ? seq_read+0x71/0x1150 [ 237.107624] 00000000f8a71f83: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 237.116444] ? mutex_trylock+0x2b0/0x2b0 [ 237.116469] ? lock_release+0xa30/0xa30 [ 237.120506] 00000000561ff2c4: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 237.124711] ? dput.part.26+0x248/0x7a0 [ 237.124728] ? lock_downgrade+0x8f0/0x8f0 [ 237.175899] ? trace_hardirqs_on+0x10/0x10 [ 237.180117] ? lock_acquire+0x1e4/0x540 [ 237.184073] ? fs_reclaim_acquire+0x20/0x20 [ 237.188373] ? lock_downgrade+0x8f0/0x8f0 [ 237.192501] ? mnt_get_count+0x150/0x150 [ 237.196543] ? check_same_owner+0x340/0x340 [ 237.200844] ? rcu_note_context_switch+0x730/0x730 [ 237.205752] __should_failslab+0x124/0x180 [ 237.209974] should_failslab+0x9/0x14 [ 237.213782] kmem_cache_alloc_node_trace+0x26f/0x770 [ 237.218868] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 237.224397] ? rcu_note_context_switch+0x730/0x730 [ 237.229309] __kmalloc_node+0x33/0x70 [ 237.233089] kvmalloc_node+0x65/0xf0 [ 237.236793] seq_read+0x99b/0x1150 [ 237.240319] ? check_same_owner+0x340/0x340 [ 237.244627] ? fsnotify_first_mark+0x350/0x350 [ 237.249198] ? seq_dentry+0x2c0/0x2c0 [ 237.252979] proc_reg_read+0x2a3/0x3d0 [ 237.256857] ? proc_reg_unlocked_ioctl+0x3c0/0x3c0 [ 237.261769] ? security_file_permission+0x1c2/0x230 [ 237.266766] ? rw_verify_area+0x118/0x360 [ 237.270893] do_iter_read+0x49e/0x650 [ 237.274677] vfs_readv+0x175/0x1c0 [ 237.278197] ? __fget_light+0x2f7/0x440 [ 237.282150] ? compat_rw_copy_check_uvector+0x440/0x440 [ 237.287503] ? fsnotify+0xbac/0x14e0 [ 237.291196] ? vfs_write+0x2f3/0x560 [ 237.294891] ? wait_for_completion+0x8d0/0x8d0 [ 237.299457] ? lock_release+0xa30/0xa30 [ 237.303414] ? fsnotify_first_mark+0x350/0x350 [ 237.307976] ? __fsnotify_parent+0xcc/0x420 [ 237.312289] ? mutex_lock_nested+0x16/0x20 [ 237.316505] ? mutex_lock_nested+0x16/0x20 [ 237.320723] ? __fdget_pos+0xde/0x200 [ 237.324506] ? __fdget_raw+0x20/0x20 [ 237.328200] ? __sb_end_write+0xac/0xe0 [ 237.332173] do_readv+0x11a/0x310 [ 237.335617] ? vfs_readv+0x1c0/0x1c0 [ 237.339320] ? syscall_slow_exit_work+0x500/0x500 [ 237.344176] __x64_sys_readv+0x75/0xb0 [ 237.348047] do_syscall_64+0x1b9/0x820 [ 237.351917] ? finish_task_switch+0x1d3/0x870 [ 237.356397] ? syscall_return_slowpath+0x5e0/0x5e0 [ 237.361307] ? syscall_return_slowpath+0x31d/0x5e0 [ 237.366224] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 237.371224] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 237.376056] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 237.381226] RIP: 0033:0x456a09 [ 237.384413] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 237.403478] RSP: 002b:00007f7c094aec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 237.411177] RAX: ffffffffffffffda RBX: 00007f7c094af6d4 RCX: 0000000000456a09 [ 237.418459] RDX: 0000000000000002 RSI: 0000000020000800 RDI: 0000000000000014 [ 237.425719] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 237.432969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 237.440228] R13: 00000000004d26f8 R14: 00000000004c75cb R15: 0000000000000000 [ 237.447651] XFS (loop7): metadata I/O error in "xfs_trans_read_buf_map" at daddr 0x2 len 1 error 117 [ 237.457024] XFS (loop7): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0 [ 237.465580] XFS (loop7): Failed to read root inode 0x80, error 117 [ 237.497828] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 237.564075] FAULT_INJECTION: forcing a failure. [ 237.564075] name failslab, interval 1, probability 0, space 0, times 0 [ 237.575511] CPU: 1 PID: 18079 Comm: syz-executor0 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 237.584010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 237.593383] Call Trace: [ 237.593414] dump_stack+0x1c9/0x2b4 [ 237.599617] ? dump_stack_print_info.cold.2+0x52/0x52 [ 237.604828] ? perf_trace_lock+0xde/0x920 [ 237.609002] should_fail.cold.4+0xa/0x11 [ 237.613089] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 237.618224] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 237.623266] ? lock_acquire+0x1e4/0x540 [ 237.627248] ? is_bpf_text_address+0xae/0x170 [ 237.631760] ? lock_downgrade+0x8f0/0x8f0 [ 237.635926] ? lock_release+0xa30/0xa30 [ 237.639927] ? lock_acquire+0x1e4/0x540 [ 237.643936] ? fs_reclaim_acquire+0x20/0x20 [ 237.648279] ? lock_downgrade+0x8f0/0x8f0 [ 237.652432] ? is_bpf_text_address+0xd7/0x170 [ 237.656935] ? check_same_owner+0x340/0x340 [ 237.661274] ? __kernel_text_address+0xd/0x40 [ 237.665782] ? rcu_note_context_switch+0x730/0x730 [ 237.670728] __should_failslab+0x124/0x180 [ 237.674980] should_failslab+0x9/0x14 [ 237.678797] __kmalloc_track_caller+0x2c4/0x760 [ 237.683480] ? save_stack+0xa9/0xd0 [ 237.687119] ? parse_opts+0x176/0x500 [ 237.690928] kstrdup+0x39/0x70 [ 237.694131] parse_opts+0x176/0x500 [ 237.697769] ? do_raw_spin_unlock+0xa7/0x2f0 [ 237.702184] ? p9_fd_poll+0x2b0/0x2b0 [ 237.705994] ? kasan_check_write+0x14/0x20 [ 237.710239] ? do_raw_spin_lock+0xc1/0x200 05:58:47 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x1, 0x80) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f00000001c0)=0x1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_TSC_KHZ(r3, 0xaea2, 0x1f) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000000)="0f00141e2665410fc718260f221166baf80cb838c53b8cef66bafc0c66b8a8c366ef470f01de460f017c8803c4e19812e7c441f161fb450f01cb66ba200066b8060066ef", 0x44}], 0x1, 0x0, &(0x7f0000000100), 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x63, &(0x7f0000000100)={'icmp6\x00'}, &(0x7f0000000140)=0x1e) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) [ 237.714486] ? trace_hardirqs_off+0xd/0x10 [ 237.718387] attempt to access beyond end of device [ 237.718724] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 237.718741] ? debug_check_no_obj_freed+0x30b/0x595 [ 237.718763] p9_fd_create+0x8b/0x3f0 [ 237.718777] ? p9_fd_show_options+0x1c0/0x1c0 [ 237.718796] ? trace_hardirqs_on+0xd/0x10 [ 237.718810] p9_client_create+0xb2b/0x1631 [ 237.718829] ? p9_client_read+0xbb0/0xbb0 [ 237.723778] loop4: rw=12288, want=8200, limit=20 [ 237.728852] ? lock_acquire+0x1e4/0x540 [ 237.728867] ? fs_reclaim_acquire+0x20/0x20 [ 237.728879] ? lock_downgrade+0x8f0/0x8f0 [ 237.728897] ? lock_release+0xa30/0xa30 [ 237.775680] ? __lockdep_init_map+0x105/0x590 [ 237.780175] ? lockdep_init_map+0x9/0x10 [ 237.784237] ? kasan_check_write+0x14/0x20 [ 237.789173] ? __init_rwsem+0x1cc/0x2a0 [ 237.793137] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 237.798144] ? __kmalloc_track_caller+0x311/0x760 [ 237.802972] ? save_stack+0xa9/0xd0 [ 237.806597] ? save_stack+0x43/0xd0 [ 237.810206] ? kasan_kmalloc+0xc4/0xe0 [ 237.814082] ? memcpy+0x45/0x50 [ 237.817348] v9fs_session_init+0x21a/0x1a80 [ 237.821762] ? legacy_parse_monolithic+0xde/0x1e0 [ 237.826594] ? v9fs_show_options+0x7e0/0x7e0 [ 237.830989] ? lock_release+0xa30/0xa30 [ 237.834967] ? check_same_owner+0x340/0x340 [ 237.839273] ? lock_downgrade+0x8f0/0x8f0 [ 237.843406] ? kasan_unpoison_shadow+0x35/0x50 [ 237.847983] ? kasan_kmalloc+0xc4/0xe0 [ 237.851859] ? kmem_cache_alloc_trace+0x318/0x780 [ 237.856695] ? kasan_unpoison_shadow+0x35/0x50 [ 237.861270] ? kasan_kmalloc+0xc4/0xe0 [ 237.865148] v9fs_mount+0x7c/0x900 [ 237.868676] ? v9fs_drop_inode+0x150/0x150 [ 237.872897] legacy_get_tree+0x131/0x460 [ 237.876963] vfs_get_tree+0x1cb/0x5c0 [ 237.880762] do_mount+0x6f2/0x1e20 [ 237.884286] ? do_raw_spin_unlock+0xa7/0x2f0 [ 237.888690] ? copy_mount_string+0x40/0x40 [ 237.892924] ? kasan_kmalloc+0xc4/0xe0 [ 237.896802] ? kmem_cache_alloc_trace+0x318/0x780 [ 237.901635] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 237.907156] ? copy_mount_options+0x285/0x380 [ 237.911641] ksys_mount+0x12d/0x140 [ 237.915252] __x64_sys_mount+0xbe/0x150 [ 237.919224] do_syscall_64+0x1b9/0x820 [ 237.923098] ? syscall_return_slowpath+0x5e0/0x5e0 [ 237.928013] ? syscall_return_slowpath+0x31d/0x5e0 [ 237.932938] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 237.937952] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 237.942783] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 237.947967] RIP: 0033:0x456a09 [ 237.951158] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 237.970074] RSP: 002b:00007f3ecbe13c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 237.977776] RAX: ffffffffffffffda RBX: 00007f3ecbe146d4 RCX: 0000000000456a09 [ 237.985028] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 237.992296] RBP: 00000000009300a0 R08: 00000000200004c0 R09: 0000000000000000 [ 237.999636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 238.006889] R13: 00000000004d1750 R14: 00000000004c6e7f R15: 000000000000000d 05:58:47 executing program 6 (fault-call:3 fault-nth:1): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x4d5) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') readv(r1, &(0x7f0000000800)=[{&(0x7f0000000700)=""/84, 0x54}, {&(0x7f00000008c0)=""/27, 0x1b}], 0x2) 05:58:47 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x48, @tick=0x8, 0x7ff, {0x9, 0xfffffffffffffffa}, 0x5a9, 0x0, 0xf7}) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000200)) r2 = msgget$private(0x0, 0x0) msgsnd(r2, &(0x7f0000000480)={0x3}, 0x2000, 0x0) msgrcv(r2, &(0x7f00000000c0)={0x0, ""/84}, 0x5c, 0x2, 0x3800) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000140)={{0x7fff, 0x100}, 'port1\x00', 0x0, 0x80000, 0x7, 0x1f, 0x9, 0x5, 0x6, 0x0, 0x1, 0x9dc0}) [ 238.014227] 9pnet: Insufficient options for proto=fd [ 238.023716] attempt to access beyond end of device [ 238.029067] loop4: rw=12288, want=12296, limit=20 [ 238.034501] attempt to access beyond end of device [ 238.039635] loop4: rw=12288, want=8200, limit=20 [ 238.045054] attempt to access beyond end of device [ 238.050040] loop4: rw=12288, want=12296, limit=20 [ 238.162563] *** Guest State *** [ 238.166039] CR0: actual=0x0000000000000031, shadow=0x0000000060000031, gh_mask=fffffffffffffff7 [ 238.174909] CR4: actual=0x0000000000002060, shadow=0x0000000000000020, gh_mask=ffffffffffffe871 [ 238.183777] CR3 = 0x0000000000002000 [ 238.187535] PDPTR0 = 0x00000000000000a7 PDPTR1 = 0x0000000000000000 [ 238.194047] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 238.200568] RSP = 0x000000000001bfb0 RIP = 0x0000000000000003 [ 238.206563] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 238.212564] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 238.219262] CS: sel=0x0050, attr=0x0209b, limit=0x0000ffff, base=0x0000000000000000 [ 238.227392] DS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 238.235531] SS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 238.243599] ES: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 238.251607] FS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 238.259606] GS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 238.267604] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 238.275602] LDTR: sel=0x000f, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 238.283614] IDTR: limit=0x000001ff, base=0x0000000000003800 [ 238.291628] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 238.299616] EFER = 0x0000000000000001 PAT = 0x0007040600070406 [ 238.306056] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 238.313514] Interruptibility = 00000000 ActivityState = 00000000 [ 238.319762] *** Host State *** [ 238.322963] RIP = 0xffffffff811f4764 RSP = 0xffff88018e7e7350 [ 238.328952] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 238.335384] FSBase=00007f0ad0aaf700 GSBase=ffff8801db000000 TRBase=fffffe0000003000 [ 238.343211] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 238.349119] CR0=0000000080050033 CR3=000000015803c000 CR4=00000000001426f0 [ 238.349133] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff86c01380 [ 238.362834] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 238.368918] *** Control State *** [ 238.372391] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 238.379080] EntryControls=0000d1ff ExitControls=0023efff [ 238.384550] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 238.391493] VMEntry: intr_info=00000b08 errcode=00000000 ilen=00000000 [ 238.398158] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 238.404740] reason=80000021 qualification=0000000000000000 [ 238.411410] IDTVectoring: info=00000000 errcode=00000000 [ 238.416863] TSC Offset = 0xffffff7edd7c9f35 [ 238.421183] EPT pointer = 0x00000001d6dbc01e 05:58:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000380)="0a5cc80700315f85714070") r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r5, r5, &(0x7f0000000100), 0x2008000004) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x18, &(0x7f0000000040)={0x0, 'veth1_to_bond\x00'}, 0x18) close(r3) dup3(r1, r2, 0x0) 05:58:47 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)) 05:58:47 executing program 0 (fault-call:8 fault-nth:14): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_client='access=client'}, {@cache_loose='cache=loose'}]}}) 05:58:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000080)={0x2, 0xf000000, @ioapic={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x9}]}}) 05:58:47 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x100) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000100)={0x3, 0x1, 0xd4d}) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x8000) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x100, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000340)=[{r1}], 0x1, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x7) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r2, &(0x7f0000005000)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}}, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f00000000c0)={0xd0, 0xc863, 0x100000001, 0x8000}) 05:58:47 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x4d5) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') readv(r1, &(0x7f0000000800)=[{&(0x7f0000000700)=""/84, 0x54}, {&(0x7f00000008c0)=""/27, 0x1b}], 0x2) 05:58:47 executing program 7: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000040)={0x8, 0xff, 0x1}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) name_to_handle_at(r1, &(0x7f0000000300)='\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="81000000aacf882ca684405d6d555cb163a08e5e667c56e7fe548757c7fbaa71613db2ae0c31ca6373d891d235c367fc54c3b85f1ccc0ee73ea144d2ec903a000000007fffffff629018776211079b0ca2f48c168d6db0915994dce34788f287ce0e5300000000"], &(0x7f0000000100), 0x1000) 05:58:47 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"00ac720000000000ec973f820f7c4000", 0x102}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="c2e4110a855c009eac019fa6028d760eebf1667a36321e4e042d35cda5cc38780d62c9aa3d7a8453988651fdbba91c740846fb0b5caa1b1422a4f9d956497407088075687387123907e06cc4e54510253e5f4074728514cbc87276e0bed1aa", 0x5f}], 0x1, 0x0) close(r0) [ 238.595266] FAULT_INJECTION: forcing a failure. [ 238.595266] name failslab, interval 1, probability 0, space 0, times 0 [ 238.606592] CPU: 1 PID: 18136 Comm: syz-executor0 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 238.615090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 238.622312] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 238.624440] Call Trace: [ 238.624464] dump_stack+0x1c9/0x2b4 [ 238.624485] ? dump_stack_print_info.cold.2+0x52/0x52 [ 238.624499] ? is_bpf_text_address+0xd7/0x170 [ 238.624513] ? perf_trace_lock+0xde/0x920 [ 238.624533] should_fail.cold.4+0xa/0x11 [ 238.655007] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 238.660099] ? save_stack+0xa9/0xd0 [ 238.663709] ? kasan_kmalloc+0xc4/0xe0 [ 238.667601] ? kmem_cache_alloc_trace+0x152/0x780 [ 238.672429] ? v9fs_session_init+0x21a/0x1a80 [ 238.676908] ? v9fs_mount+0x7c/0x900 [ 238.680604] ? legacy_get_tree+0x131/0x460 [ 238.684822] ? vfs_get_tree+0x1cb/0x5c0 [ 238.688778] ? do_mount+0x6f2/0x1e20 [ 238.692474] ? ksys_mount+0x12d/0x140 [ 238.696257] ? __x64_sys_mount+0xbe/0x150 [ 238.700393] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 238.705743] ? lock_release+0xa30/0xa30 [ 238.709709] ? lock_acquire+0x1e4/0x540 [ 238.713668] ? fs_reclaim_acquire+0x20/0x20 [ 238.717974] ? lock_downgrade+0x8f0/0x8f0 [ 238.722108] ? lock_acquire+0x1e4/0x540 [ 238.726069] ? check_same_owner+0x340/0x340 [ 238.730376] ? __kernel_text_address+0xd/0x40 [ 238.734867] ? rcu_note_context_switch+0x730/0x730 [ 238.739783] ? __save_stack_trace+0x8d/0xf0 [ 238.744089] __should_failslab+0x124/0x180 [ 238.748309] should_failslab+0x9/0x14 [ 238.752095] __kmalloc_track_caller+0x2c4/0x760 [ 238.756750] ? kmem_cache_alloc_trace+0x318/0x780 [ 238.761577] ? kasan_kmalloc+0xc4/0xe0 [ 238.765447] ? p9_client_create+0x445/0x1631 [ 238.769838] kstrdup+0x39/0x70 [ 238.773015] p9_client_create+0x445/0x1631 [ 238.777239] ? __sched_text_start+0x8/0x8 [ 238.781375] ? p9_client_read+0xbb0/0xbb0 [ 238.785506] ? lock_acquire+0x1e4/0x540 [ 238.789466] ? fs_reclaim_acquire+0x20/0x20 [ 238.793786] ? lock_downgrade+0x8f0/0x8f0 [ 238.797921] ? lock_release+0xa30/0xa30 [ 238.801879] ? __lockdep_init_map+0x105/0x590 [ 238.806359] ? lockdep_init_map+0x9/0x10 [ 238.810405] ? kasan_check_write+0x14/0x20 [ 238.814625] ? __init_rwsem+0x1cc/0x2a0 [ 238.818586] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 238.823591] ? __kmalloc_track_caller+0x311/0x760 [ 238.828415] ? save_stack+0xa9/0xd0 [ 238.832028] ? save_stack+0x43/0xd0 [ 238.835636] ? kasan_kmalloc+0xc4/0xe0 [ 238.839506] ? memcpy+0x45/0x50 [ 238.842773] v9fs_session_init+0x21a/0x1a80 [ 238.847092] ? legacy_parse_monolithic+0xde/0x1e0 [ 238.851924] ? v9fs_show_options+0x7e0/0x7e0 [ 238.856322] ? lock_release+0xa30/0xa30 [ 238.860280] ? lock_downgrade+0x8f0/0x8f0 [ 238.864414] ? check_same_owner+0x340/0x340 [ 238.868721] ? kasan_unpoison_shadow+0x35/0x50 [ 238.873296] ? kasan_kmalloc+0xc4/0xe0 [ 238.877169] ? kmem_cache_alloc_trace+0x318/0x780 [ 238.881996] ? kasan_unpoison_shadow+0x35/0x50 [ 238.886560] ? kasan_kmalloc+0xc4/0xe0 [ 238.890446] v9fs_mount+0x7c/0x900 [ 238.893985] ? v9fs_drop_inode+0x150/0x150 [ 238.898202] legacy_get_tree+0x131/0x460 [ 238.902262] vfs_get_tree+0x1cb/0x5c0 [ 238.906050] do_mount+0x6f2/0x1e20 [ 238.909578] ? copy_mount_string+0x40/0x40 [ 238.913800] ? retint_kernel+0x10/0x10 [ 238.917676] ? copy_mount_options+0x1a1/0x380 [ 238.922155] ? copy_mount_options+0x1b2/0x380 [ 238.926635] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 238.932164] ? copy_mount_options+0x285/0x380 [ 238.936647] ksys_mount+0x12d/0x140 [ 238.940261] __x64_sys_mount+0xbe/0x150 [ 238.944232] do_syscall_64+0x1b9/0x820 [ 238.948103] ? finish_task_switch+0x1d3/0x870 [ 238.952582] ? syscall_return_slowpath+0x5e0/0x5e0 [ 238.957499] ? syscall_return_slowpath+0x31d/0x5e0 [ 238.962597] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 238.967601] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 238.972430] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 238.977602] RIP: 0033:0x456a09 [ 238.980781] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 238.999665] RSP: 002b:00007f3ecbe13c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 239.007359] RAX: ffffffffffffffda RBX: 00007f3ecbe146d4 RCX: 0000000000456a09 [ 239.014610] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 239.021862] RBP: 00000000009300a0 R08: 00000000200004c0 R09: 0000000000000000 [ 239.029113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 239.036366] R13: 00000000004d1750 R14: 00000000004c6e7f R15: 000000000000000e 05:58:48 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x102d}, 0xfffffffffffffe7c) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf5, 0x400400) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'bridge_slave_1\x00', 0x1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x10, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x3f1}]}, &(0x7f0000f6bffb)='GPL\x00', 0x800000001, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) socket$inet6_udp(0xa, 0x2, 0x0) 05:58:48 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x4d5) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') readv(r1, &(0x7f0000000800)=[{&(0x7f0000000700)=""/84, 0x7ffff000}, {&(0x7f00000008c0)=""/27, 0x1b}], 0x2) [ 239.047344] attempt to access beyond end of device [ 239.052433] loop4: rw=12288, want=8200, limit=20 [ 239.062779] attempt to access beyond end of device [ 239.067829] loop4: rw=12288, want=12296, limit=20 [ 239.076173] attempt to access beyond end of device [ 239.081241] loop4: rw=12288, want=8200, limit=20 [ 239.086368] attempt to access beyond end of device [ 239.091414] loop4: rw=12288, want=12296, limit=20 05:58:48 executing program 0 (fault-call:8 fault-nth:15): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_client='access=client'}, {@cache_loose='cache=loose'}]}}) [ 239.191392] FAULT_INJECTION: forcing a failure. [ 239.191392] name failslab, interval 1, probability 0, space 0, times 0 [ 239.202898] CPU: 0 PID: 18162 Comm: syz-executor0 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 239.211407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 239.220777] Call Trace: [ 239.223388] dump_stack+0x1c9/0x2b4 [ 239.227034] ? dump_stack_print_info.cold.2+0x52/0x52 [ 239.232245] ? perf_trace_lock+0x49d/0x920 [ 239.236515] should_fail.cold.4+0xa/0x11 [ 239.240601] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 239.245719] ? __kernel_text_address+0xd/0x40 [ 239.250229] ? unwind_get_return_address+0x61/0xa0 [ 239.255176] ? __save_stack_trace+0x8d/0xf0 [ 239.259535] ? save_stack+0xa9/0xd0 [ 239.263172] ? save_stack+0x43/0xd0 [ 239.266802] ? kasan_kmalloc+0xc4/0xe0 [ 239.270697] ? kstrdup+0x39/0x70 [ 239.274088] ? lock_acquire+0x1e4/0x540 [ 239.278072] ? fs_reclaim_acquire+0x20/0x20 [ 239.282408] ? lock_downgrade+0x8f0/0x8f0 [ 239.286585] ? check_same_owner+0x340/0x340 05:58:48 executing program 7: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x400, 0x0) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000100)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000000)=0x0) sched_setattr(r1, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x20}, 0x0) msgrcv(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c8000000000000000000000000000000000000000000000000000000000000000000000000000093000000000000"], 0x70, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000040)={0x3}, 0x8, 0x0) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f00000001c0)={0x7, 0x33}) [ 239.290922] ? rcu_note_context_switch+0x730/0x730 [ 239.295878] __should_failslab+0x124/0x180 [ 239.300130] should_failslab+0x9/0x14 [ 239.303946] __kmalloc+0x2c8/0x760 [ 239.307510] ? match_number.isra.0+0xbf/0x280 [ 239.312024] match_number.isra.0+0xbf/0x280 [ 239.316363] ? match_strdup+0xa0/0xa0 [ 239.320176] ? match_wildcard+0x3c0/0x3c0 [ 239.324344] match_int+0x23/0x30 [ 239.327727] parse_opts+0x32c/0x500 [ 239.331373] ? p9_fd_poll+0x2b0/0x2b0 [ 239.335192] ? kasan_check_write+0x14/0x20 [ 239.339444] ? do_raw_spin_lock+0xc1/0x200 [ 239.343711] ? trace_hardirqs_off+0xd/0x10 [ 239.347970] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 239.353089] p9_fd_create+0x8b/0x3f0 [ 239.356814] ? p9_fd_show_options+0x1c0/0x1c0 [ 239.361319] ? trace_hardirqs_on+0xd/0x10 [ 239.365477] p9_client_create+0xb2b/0x1631 [ 239.369733] ? p9_client_read+0xbb0/0xbb0 [ 239.373879] ? lock_acquire+0x1e4/0x540 [ 239.377847] ? fs_reclaim_acquire+0x20/0x20 [ 239.382163] ? lock_downgrade+0x8f0/0x8f0 [ 239.386320] ? lock_release+0xa30/0xa30 [ 239.390290] ? __lockdep_init_map+0x105/0x590 [ 239.394784] ? lockdep_init_map+0x9/0x10 [ 239.398840] ? kasan_check_write+0x14/0x20 [ 239.403065] ? __init_rwsem+0x1cc/0x2a0 [ 239.407033] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 239.412055] ? __kmalloc_track_caller+0x311/0x760 [ 239.416902] ? save_stack+0xa9/0xd0 [ 239.420523] ? save_stack+0x43/0xd0 [ 239.424140] ? kasan_kmalloc+0xc4/0xe0 [ 239.428020] ? memcpy+0x45/0x50 [ 239.431312] v9fs_session_init+0x21a/0x1a80 [ 239.435629] ? legacy_parse_monolithic+0xde/0x1e0 [ 239.440482] ? v9fs_show_options+0x7e0/0x7e0 [ 239.444889] ? lock_release+0xa30/0xa30 [ 239.448860] ? check_same_owner+0x340/0x340 [ 239.453182] ? kasan_unpoison_shadow+0x35/0x50 [ 239.457755] ? kasan_kmalloc+0xc4/0xe0 [ 239.461653] ? kmem_cache_alloc_trace+0x318/0x780 [ 239.466488] ? kasan_unpoison_shadow+0x35/0x50 [ 239.471062] ? kasan_kmalloc+0xc4/0xe0 [ 239.474962] v9fs_mount+0x7c/0x900 [ 239.478512] ? v9fs_drop_inode+0x150/0x150 [ 239.482742] legacy_get_tree+0x131/0x460 [ 239.486805] vfs_get_tree+0x1cb/0x5c0 [ 239.490604] do_mount+0x6f2/0x1e20 [ 239.494137] ? check_same_owner+0x340/0x340 [ 239.498464] ? lock_release+0xa30/0xa30 [ 239.502448] ? copy_mount_string+0x40/0x40 [ 239.506678] ? kasan_kmalloc+0xc4/0xe0 [ 239.510565] ? kmem_cache_alloc_trace+0x318/0x780 [ 239.515409] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 239.520964] ? _copy_from_user+0xdf/0x150 [ 239.525109] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 239.530649] ? copy_mount_options+0x285/0x380 [ 239.535147] ksys_mount+0x12d/0x140 [ 239.538774] __x64_sys_mount+0xbe/0x150 [ 239.542755] do_syscall_64+0x1b9/0x820 [ 239.546638] ? finish_task_switch+0x1d3/0x870 [ 239.551133] ? syscall_return_slowpath+0x5e0/0x5e0 [ 239.556059] ? syscall_return_slowpath+0x31d/0x5e0 [ 239.561004] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 239.566023] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 239.570872] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 239.576062] RIP: 0033:0x456a09 [ 239.579247] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 239.598141] RSP: 002b:00007f3ecbe13c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 239.605844] RAX: ffffffffffffffda RBX: 00007f3ecbe146d4 RCX: 0000000000456a09 [ 239.613197] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 239.620461] RBP: 00000000009300a0 R08: 00000000200004c0 R09: 0000000000000000 [ 239.627723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 239.634985] R13: 00000000004d1750 R14: 00000000004c6e7f R15: 000000000000000f 05:58:48 executing program 3: socketpair$inet6(0xa, 0x80000, 0x3ff, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000740)=0x4f36, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010000106000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c000100626f6e64000000001e0002000800080000000000"], 0x3c}}, 0x0) [ 239.643568] 9pnet: Insufficient options for proto=fd 05:58:49 executing program 0 (fault-call:8 fault-nth:16): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_client='access=client'}, {@cache_loose='cache=loose'}]}}) 05:58:49 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)) 05:58:49 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x9, 0x20, 0xffffffffffffffdb, 0x1000}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000100)={r2, 0xb8, "28730b4104882464fd86f3c70c8c994dd8ab5afa6f0508df8bc70b5b05d18049c7aae44a4016787eb7bcf831949a3d063d5c11e1e1a2579c9bc4a22c8bfe72a588a6e3d101d71d5d852d76ef5561049a0debad1f92074e8e393e7fe962fe24c3c5a900f4506d5187660b21216379f94ebacee4fc5aecfbcf1766624f701d8ac3fbaa96775baac4543384ef63290997a923c596dc6a966845b3c3a898c9c8082dc9923eae984db85074e5797f9af683c5d24da8aaa0e0384f"}, &(0x7f0000000080)=0xc0) r3 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000001b80)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="213e7ff1f0980c9ed56b50b08e10a9b9f8942fb8b7ce66e729ac2b217f64da5a25", 0x24c}], 0x1000000000000383, &(0x7f0000001580)}], 0x1, 0x0) recvmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000500)=""/84, 0xf}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x2, &(0x7f00000000c0)=""/50, 0x32}, 0x0) 05:58:49 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x100) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000100)={0x3, 0x1, 0xd4d}) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x8000) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x100, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000340)=[{r1}], 0x1, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x7) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r2, &(0x7f0000005000)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}}, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f00000000c0)={0xd0, 0xc863, 0x100000001, 0x8000}) 05:58:49 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"00ac720000000000ec973f820f7c4000", 0x102}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) close(r0) 05:58:49 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x4d5) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') readv(r1, &(0x7f0000000800)=[{&(0x7f0000000700)=""/84, 0x20000754}, {&(0x7f00000008c0)=""/27, 0x1b}], 0x2) 05:58:49 executing program 7: name_to_handle_at(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='\b\x00\x00\x00\x00@\x00\x00'], &(0x7f0000000180), 0x653eff22c8c28ec2) 05:58:49 executing program 3: kexec_load(0x8, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)}], 0x1) r0 = socket$inet6(0xa, 0x8000f, 0x10001) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000040)=0x0) fcntl$setown(r0, 0x8, r1) clock_gettime(0x1, &(0x7f0000000000)) [ 239.770089] netlink: 12 bytes leftover after parsing attributes in process `syz-executor3'. 05:58:49 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x4d5) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') readv(r1, &(0x7f0000000800)=[{&(0x7f0000000700)=""/84, 0x5b}, {&(0x7f00000008c0)=""/27, 0x1b}], 0x2) 05:58:49 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a0000000000000000000000000000000000ffff00000000000000000000000005000900800000000a000000000000000000000000000000000068000000000000000000000000000200010000000000000007fd0000000005000500000000030a00000000000000ff0200000000000000000000000000010000000000000000"], 0x98}}, 0x0) 05:58:49 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r1, &(0x7f0000002380)=""/4096, 0x1000) fcntl$notify(r1, 0x402, 0x31) exit(0x0) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000000)={0x6, 0xb7, 0x1}) getdents64(r1, &(0x7f0000000040)=""/57, 0xfffffffffffffedd) socket$inet6(0xa, 0x4, 0x9) [ 239.880066] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 239.931484] FAULT_INJECTION: forcing a failure. [ 239.931484] name failslab, interval 1, probability 0, space 0, times 0 [ 239.943078] CPU: 0 PID: 18198 Comm: syz-executor0 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 239.951592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 239.961605] Call Trace: [ 239.964204] dump_stack+0x1c9/0x2b4 [ 239.967824] ? dump_stack_print_info.cold.2+0x52/0x52 [ 239.973028] ? perf_trace_lock+0x49d/0x920 [ 239.977270] should_fail.cold.4+0xa/0x11 05:58:49 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0x8000, &(0x7f0000000000)="12e69999cfadc6fd3fea44d89d4ecc178e93a8f20eec9d63f69b8ab11f2e0156b819634866c6711a5d6182d013b673af8b01c3777d3b9c8acccb6c5534c306556c91a557271a9116011f4b58ac5b5ffe735f1d888cdb0aebdfee920174351d2919cb968da8846440957b6dae85f599f53cb8b6fae7f503009f1b05720499") close(r0) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)="2f67726f3c23fb57e6c60f1f4b45b74d999a9a8c2ce15b26e518a4cb3a9cd12dcea440d899c22c652b3a471b4a7db7f3fef6e034d804e5f07302df5b540745df4b1dee483b157624c5bc719a099e6a357cd6abb4398c3408000000000000000000000000000000", 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x8004587d, 0x0) [ 239.981355] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 239.986481] ? __save_stack_trace+0x8d/0xf0 [ 239.990852] ? save_stack+0x43/0xd0 [ 239.994502] ? kasan_slab_free+0xe/0x10 [ 239.998497] ? kfree+0xd9/0x260 [ 240.001800] ? match_int+0x23/0x30 [ 240.005357] ? parse_opts+0x32c/0x500 [ 240.009166] ? p9_fd_create+0x8b/0x3f0 [ 240.013053] ? p9_client_create+0xb2b/0x1631 [ 240.017461] ? v9fs_mount+0x7c/0x900 [ 240.021182] ? lock_acquire+0x1e4/0x540 [ 240.025146] ? fs_reclaim_acquire+0x20/0x20 [ 240.029460] ? lock_downgrade+0x8f0/0x8f0 [ 240.033628] ? check_same_owner+0x340/0x340 [ 240.037953] ? rcu_note_context_switch+0x730/0x730 [ 240.042904] __should_failslab+0x124/0x180 [ 240.047148] should_failslab+0x9/0x14 [ 240.050949] __kmalloc+0x2c8/0x760 [ 240.054487] ? match_number.isra.0+0xbf/0x280 [ 240.058979] match_number.isra.0+0xbf/0x280 [ 240.063319] ? match_strdup+0xa0/0xa0 [ 240.067129] ? match_wildcard+0x3c0/0x3c0 [ 240.071280] match_int+0x23/0x30 [ 240.074643] parse_opts+0x32c/0x500 [ 240.078285] ? p9_fd_poll+0x2b0/0x2b0 [ 240.082098] ? kasan_check_write+0x14/0x20 [ 240.086329] ? do_raw_spin_lock+0xc1/0x200 [ 240.090573] ? trace_hardirqs_off+0xd/0x10 [ 240.094800] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 240.099917] p9_fd_create+0x8b/0x3f0 [ 240.103626] ? p9_fd_show_options+0x1c0/0x1c0 [ 240.108132] ? trace_hardirqs_on+0xd/0x10 [ 240.112286] p9_client_create+0xb2b/0x1631 [ 240.116524] ? p9_client_read+0xbb0/0xbb0 [ 240.120669] ? lock_acquire+0x1e4/0x540 [ 240.124637] ? fs_reclaim_acquire+0x20/0x20 [ 240.128952] ? lock_downgrade+0x8f0/0x8f0 [ 240.133100] ? lock_release+0xa30/0xa30 [ 240.137066] ? __lockdep_init_map+0x105/0x590 [ 240.141563] ? lockdep_init_map+0x9/0x10 [ 240.145627] ? kasan_check_write+0x14/0x20 [ 240.149863] ? __init_rwsem+0x1cc/0x2a0 [ 240.153842] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 240.158859] ? __kmalloc_track_caller+0x311/0x760 [ 240.163694] ? save_stack+0xa9/0xd0 [ 240.167324] ? save_stack+0x43/0xd0 [ 240.170949] ? kasan_kmalloc+0xc4/0xe0 [ 240.174830] ? memcpy+0x45/0x50 [ 240.178115] v9fs_session_init+0x21a/0x1a80 [ 240.182436] ? legacy_parse_monolithic+0xde/0x1e0 [ 240.187289] ? v9fs_show_options+0x7e0/0x7e0 [ 240.191706] ? lock_release+0xa30/0xa30 [ 240.195678] ? check_same_owner+0x340/0x340 [ 240.200009] ? kasan_unpoison_shadow+0x35/0x50 [ 240.204595] ? kasan_kmalloc+0xc4/0xe0 [ 240.208483] ? kmem_cache_alloc_trace+0x318/0x780 [ 240.213318] ? kasan_unpoison_shadow+0x35/0x50 [ 240.217902] ? kasan_kmalloc+0xc4/0xe0 [ 240.221795] v9fs_mount+0x7c/0x900 [ 240.225335] ? v9fs_drop_inode+0x150/0x150 [ 240.229573] legacy_get_tree+0x131/0x460 [ 240.233638] vfs_get_tree+0x1cb/0x5c0 [ 240.237441] do_mount+0x6f2/0x1e20 [ 240.240973] ? check_same_owner+0x340/0x340 [ 240.245297] ? lock_release+0xa30/0xa30 [ 240.249282] ? copy_mount_string+0x40/0x40 [ 240.253516] ? kasan_kmalloc+0xc4/0xe0 [ 240.257405] ? kmem_cache_alloc_trace+0x318/0x780 [ 240.262259] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 240.267790] ? _copy_from_user+0xdf/0x150 [ 240.271937] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 240.277466] ? copy_mount_options+0x285/0x380 [ 240.281961] ksys_mount+0x12d/0x140 [ 240.285588] __x64_sys_mount+0xbe/0x150 [ 240.289561] do_syscall_64+0x1b9/0x820 [ 240.293461] ? syscall_return_slowpath+0x5e0/0x5e0 [ 240.298400] ? syscall_return_slowpath+0x31d/0x5e0 [ 240.303328] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 240.309217] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 240.314071] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 240.319256] RIP: 0033:0x456a09 [ 240.322449] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 240.341352] RSP: 002b:00007f3ecbe13c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 240.349068] RAX: ffffffffffffffda RBX: 00007f3ecbe146d4 RCX: 0000000000456a09 [ 240.356337] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 240.363613] RBP: 00000000009300a0 R08: 00000000200004c0 R09: 0000000000000000 [ 240.370876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 05:58:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='Ddev/kvm\x00') r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup2(r1, r0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="25b50000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000080)=0x28) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4e32d7d0b02dff40f22e70f01d165660f3881ab00000000650f01591bc4c3715cd700c4e3314ca9897e0000ba3e0fc76ec88fc9d89ade", 0x37}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:58:49 executing program 0 (fault-call:8 fault-nth:17): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_client='access=client'}, {@cache_loose='cache=loose'}]}}) [ 240.378145] R13: 00000000004d1750 R14: 00000000004c6e7f R15: 0000000000000010 [ 240.385620] 9pnet: Insufficient options for proto=fd [ 240.396668] f2fs_msg: 50 callbacks suppressed [ 240.396684] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 240.408403] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 240.462343] attempt to access beyond end of device [ 240.467490] loop4: rw=12288, want=8200, limit=20 [ 240.476745] F2FS-fs (loop4): invalid crc value [ 240.481549] attempt to access beyond end of device [ 240.486537] loop4: rw=12288, want=12296, limit=20 [ 240.491828] F2FS-fs (loop4): invalid crc value [ 240.496602] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 240.503666] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 240.511355] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 240.525342] attempt to access beyond end of device [ 240.530355] loop4: rw=12288, want=8200, limit=20 [ 240.535445] F2FS-fs (loop4): invalid crc value [ 240.540956] attempt to access beyond end of device [ 240.545993] loop4: rw=12288, want=12296, limit=20 05:58:49 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x4d5) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') readv(r1, &(0x7f0000000800)=[{&(0x7f0000000700)=""/84, 0x54}, {&(0x7f00000008c0)=""/27, 0x200008db}], 0x2) [ 240.561334] F2FS-fs (loop4): invalid crc value [ 240.566132] F2FS-fs (loop4): Failed to get valid F2FS checkpoint 05:58:49 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x6, 0x4) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="24000000250007031dfffd946fa283df8fc4390009000000069effff069effff0d00ff7e280000001100ffffba16a0aa1c0009b3eb098753b1cc7e63975c0ac47a6268e3406c0f15a30aa914", 0x4c}], 0x1}, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f0000000080)=0x4) 05:58:49 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"00ac720000000000ec973f820f7c4000", 0x102}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) socket$nl_route(0x10, 0x3, 0x0) close(r0) [ 240.615648] attempt to access beyond end of device [ 240.620796] loop4: rw=12288, want=8200, limit=20 [ 240.669761] attempt to access beyond end of device [ 240.674870] loop4: rw=12288, want=12296, limit=20 [ 240.684821] FAULT_INJECTION: forcing a failure. [ 240.684821] name failslab, interval 1, probability 0, space 0, times 0 [ 240.696185] CPU: 1 PID: 18244 Comm: syz-executor0 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 240.704683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 240.714040] Call Trace: [ 240.716647] dump_stack+0x1c9/0x2b4 [ 240.720292] ? dump_stack_print_info.cold.2+0x52/0x52 [ 240.725500] ? kfree+0xd9/0x260 [ 240.728841] ? parse_opts+0x3b8/0x500 [ 240.732657] ? perf_trace_lock+0xde/0x920 [ 240.736821] should_fail.cold.4+0xa/0x11 [ 240.740898] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 240.746016] ? kasan_check_write+0x14/0x20 [ 240.750250] ? do_raw_spin_lock+0xc1/0x200 [ 240.754480] ? trace_hardirqs_off+0xd/0x10 [ 240.758708] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 240.763802] ? trace_hardirqs_off+0xd/0x10 [ 240.768024] ? quarantine_put+0x10d/0x1b0 [ 240.772162] ? lock_acquire+0x1e4/0x540 [ 240.776123] ? fs_reclaim_acquire+0x20/0x20 [ 240.780432] ? lock_downgrade+0x8f0/0x8f0 [ 240.784569] ? check_same_owner+0x340/0x340 [ 240.788874] ? p9_fd_poll+0x2b0/0x2b0 [ 240.792660] ? rcu_note_context_switch+0x730/0x730 [ 240.797575] ? kasan_check_write+0x14/0x20 [ 240.801806] __should_failslab+0x124/0x180 [ 240.806026] should_failslab+0x9/0x14 [ 240.809813] kmem_cache_alloc_trace+0x2cb/0x780 [ 240.814574] p9_fd_create+0x1a7/0x3f0 [ 240.818363] ? p9_fd_show_options+0x1c0/0x1c0 [ 240.822939] ? trace_hardirqs_on+0xd/0x10 [ 240.827073] p9_client_create+0xb2b/0x1631 [ 240.831298] ? p9_client_read+0xbb0/0xbb0 [ 240.835450] ? lock_acquire+0x1e4/0x540 [ 240.839409] ? fs_reclaim_acquire+0x20/0x20 [ 240.843716] ? lock_downgrade+0x8f0/0x8f0 [ 240.847862] ? lock_release+0xa30/0xa30 [ 240.851827] ? __lockdep_init_map+0x105/0x590 [ 240.856309] ? lockdep_init_map+0x9/0x10 [ 240.860453] ? kasan_check_write+0x14/0x20 [ 240.864682] ? __init_rwsem+0x1cc/0x2a0 [ 240.868727] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 240.873827] ? __kmalloc_track_caller+0x311/0x760 [ 240.878655] ? save_stack+0xa9/0xd0 [ 240.882278] ? save_stack+0x43/0xd0 [ 240.885897] ? kasan_kmalloc+0xc4/0xe0 [ 240.889767] ? memcpy+0x45/0x50 [ 240.893040] v9fs_session_init+0x21a/0x1a80 [ 240.897347] ? legacy_parse_monolithic+0xde/0x1e0 [ 240.902188] ? v9fs_show_options+0x7e0/0x7e0 [ 240.906581] ? lock_release+0xa30/0xa30 [ 240.910540] ? check_same_owner+0x340/0x340 [ 240.914844] ? lock_downgrade+0x8f0/0x8f0 [ 240.918974] ? kasan_unpoison_shadow+0x35/0x50 [ 240.923540] ? kasan_kmalloc+0xc4/0xe0 [ 240.927415] ? kmem_cache_alloc_trace+0x318/0x780 [ 240.932244] ? kasan_unpoison_shadow+0x35/0x50 [ 240.936809] ? kasan_kmalloc+0xc4/0xe0 [ 240.940684] v9fs_mount+0x7c/0x900 [ 240.944210] ? v9fs_drop_inode+0x150/0x150 [ 240.948431] legacy_get_tree+0x131/0x460 [ 240.952479] vfs_get_tree+0x1cb/0x5c0 [ 240.956265] do_mount+0x6f2/0x1e20 [ 240.959793] ? check_same_owner+0x340/0x340 [ 240.964098] ? lock_release+0xa30/0xa30 [ 240.968061] ? copy_mount_string+0x40/0x40 [ 240.972277] ? kasan_kmalloc+0xc4/0xe0 [ 240.976152] ? kmem_cache_alloc_trace+0x318/0x780 [ 240.980983] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 240.986505] ? _copy_from_user+0xdf/0x150 [ 240.990640] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 240.996161] ? copy_mount_options+0x285/0x380 [ 241.000656] ksys_mount+0x12d/0x140 [ 241.004267] __x64_sys_mount+0xbe/0x150 [ 241.008239] do_syscall_64+0x1b9/0x820 [ 241.012108] ? finish_task_switch+0x1d3/0x870 [ 241.016587] ? syscall_return_slowpath+0x5e0/0x5e0 [ 241.021505] ? syscall_return_slowpath+0x31d/0x5e0 [ 241.026418] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 241.031426] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 241.036257] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 241.041430] RIP: 0033:0x456a09 [ 241.044624] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 241.063511] RSP: 002b:00007f3ecbe13c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 241.071203] RAX: ffffffffffffffda RBX: 00007f3ecbe146d4 RCX: 0000000000456a09 [ 241.078467] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 241.085718] RBP: 00000000009300a0 R08: 00000000200004c0 R09: 0000000000000000 [ 241.092980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 241.100244] R13: 00000000004d1750 R14: 00000000004c6e7f R15: 0000000000000011 05:58:50 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)) 05:58:50 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x4d5) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') readv(r1, &(0x7f0000000800)=[{&(0x7f0000000700)=""/84, 0x54}, {&(0x7f00000008c0)=""/27, 0x7fffefac}], 0x2) 05:58:50 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"00ac720000000000ec973f820f7c4000", 0x102}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) socket$nl_route(0x10, 0x3, 0x0) close(r0) 05:58:50 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"00ac720000000000ec973f820f7c4000", 0x102}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) close(r0) 05:58:50 executing program 0 (fault-call:8 fault-nth:18): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_client='access=client'}, {@cache_loose='cache=loose'}]}}) [ 241.117392] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. [ 241.136211] attempt to access beyond end of device [ 241.141347] loop4: rw=12288, want=8200, limit=20 [ 241.150139] attempt to access beyond end of device [ 241.155182] loop4: rw=12288, want=12296, limit=20 [ 241.160948] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. 05:58:50 executing program 7: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="7a0ad8ff8e440161e1360e708e1e00000000000000000007010000f8ffffffb738980bcd790ca664e902000003020000bf130000000000008500000006000000b70000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000010000)={r0, 0x100000000000000, 0xe, 0x100, &(0x7f0000020000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000140)=""/256}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpu.stat\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000280)={0x73, ""/115}) 05:58:50 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"00ac720000000000ec973f820f7c4000", 0x102}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) socket$nl_route(0x10, 0x3, 0x0) close(r0) 05:58:50 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x1, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0xff) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)=0xff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x49, 0x25}}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x6}, 0x48) 05:58:50 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x4d5) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') readv(r1, &(0x7f0000000800)=[{&(0x7f0000000700)=""/84, 0x54}, {&(0x7f00000008c0)=""/27, 0x1b}], 0x6) 05:58:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) accept$packet(0xffffffffffffff9c, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40010000}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)=@getlink={0x1058, 0x12, 0x300, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x0, 0x40}, [@IFLA_PHYS_SWITCH_ID={0x18, 0x24, "d2c1e17b7d69fe3850aabf2017085d723669"}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}, @IFLA_AF_SPEC={0xc, 0x1a, [{0x4, 0x7}, {0x4, 0xa}]}, @IFLA_PORT_SELF={0x100c, 0x19, [@generic="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", @typed={0x8, 0x26, @str="a600"}]}]}, 0x1058}, 0x1, 0x0, 0x0, 0x2400c000}, 0x40000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000400)=0xc) sendmsg$nl_route(r0, &(0x7f0000000500)={&(0x7f0000000240), 0xc, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=r2], 0x44}}, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x6, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000340)='cgroup.subtree_control\x00', 0x2, 0x0) [ 241.315582] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 241.331106] FAULT_INJECTION: forcing a failure. [ 241.331106] name failslab, interval 1, probability 0, space 0, times 0 [ 241.342618] CPU: 0 PID: 18285 Comm: syz-executor0 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 241.351135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 241.359406] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 241.360497] Call Trace: [ 241.360525] dump_stack+0x1c9/0x2b4 [ 241.360549] ? dump_stack_print_info.cold.2+0x52/0x52 [ 241.375347] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 241.378431] ? perf_trace_lock+0x49d/0x920 [ 241.378461] should_fail.cold.4+0xa/0x11 [ 241.385332] IPv6: ADDRCONF(NETDEV_UP): bond1: link is not ready [ 241.388757] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 241.388778] ? __save_stack_trace+0x8d/0xf0 [ 241.392842] 8021q: adding VLAN 0 to HW filter on device bond1 05:58:50 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000240)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000300)=0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000080), 0xc, &(0x7f0000000040)={&(0x7f0000000340)={0x10a8, 0x2d, 0x119, 0x0, 0xfffffffffffffffd, {0x3}, [@nested={0x1094, 0x9, [@typed={0x8, 0x85, @pid=r1}, @typed={0x8, 0x75, @uid=r2}, @generic="cfcfd9db53eb1857373e2631dd4fe45d7cfb43bb51b90456e9def022f031fa1e42daf6ac1971b9226b4cdb210692c0273b9d6ba5df6a04ead6992a0dfe60761a5f2fc44d924389b3d23ea788e9b36288403d420e83c439937f9da75238783ee387c440e36c27761bd6b9f8b3f7a260c36b55109053caae5c700812349ca13fe787f30b637f3c66e5d4bfda9611f1887241f8edf5e0639adfbc62ffdb63985d37bc3abba0274e511452152972b78334973397fb221ecb20d7e173b271a258eb738bb3dff79dd196d44996a65c35f19321baf90e81a6f4ac2189ad1d3f14bc36662b663d645ac1f68410a77255b65f744bd6fdcd1a2175c36f8ae1e15241a63af6542419c76b74fd01c9da4f3571ec80fecb856f5e4ba045a96b828c050fdee4cf485831ec2ea2af985579f68b088fa1653d9548792b291db41c5e0fdcb20c6242f522c566e0b4ee2ce77a3979177926d371603b29645a835d0e410e9d7ce8a594b6201eb65dd63b0b1a80a30a016dc4f345452f39652392383bd13fe09f80e96d3b4e077837bc98fd6c4049e905aead7560411145ed78acafe105f6264250a67d9afcf085a51b5bc4be0aad8f26886545f9fb88a77cb750f3ece793785ebde37b1fbbe0c3681aa94fa24eff996000ab590d2c6a29c55b70c47e076b626cf5369349b7316be2e7deb90cb4f0e047f592f1bc5c2594a611b67f4182bf97517524707e9f5030848821a7f653643454376f5c1c46467de79dac1d980759943481dfed8ba22e2ce0aa337322e01a3c0450c9890e6976154b6215b2ed393dda39af90687ecb9d7c9613521e5f612f26f729a241139c55a1581404bcd5b803019de4b8f6a24a3b8e147cb2bb9b3572ebec61462190fadc6f70612c24ea0aa3943cfb8c06cd3bf149ab1e45fe8516f245735fa8240aa6f3e7e23ba66e97974e484a7cc90ca5248fa388762b7eed898ee0daa5d8e6bbdd0a7449dfafdb62665de608656bec0939def4cef3d227ade59a8b1bbe814fd1304c338d16771a58b5829c3ba0e7324d1990ea652b414483599d7c54f468788b36ac11cf7cc69a1c0b8f5479a52c4e2c77fc4ce2f72609956af4771a860d57077ac16ffca560031ba8c5068d3faafa0ffc3de34e7d72f5b43e638e85c8a399e79a23d5218dccbd203f1f2ff83ab6f4ef4ccdd0d741e6265a5f8ef439aefa66664be6bef25a83dd0040b471cd321ff6652d63c1155516cd9725ee74ed1ee3837b11a9872f5a261e3e273b82c9d1318f7ac1e60a1120fa819ee196ab24dd61c99c15b51d72c9d3625c94f3a552d6a29d47d00dd49bd1678ee9d11166c1714f3a6ce04df3fe0cd43ac0fb270ac97f398e06d994684a85eac95b05715e54cc58b13139734417612b0ef8ecc63a0b042cbd9dd8a883ef2514e35ba19f884be81548745f5e7d6312da234a7a7fdfccfa7202747cbc522d2a4085a5ca9ab6dcdeea264ab51e780332ea13f128e35234fe022d12e73d2a89a6f403521b4225073899b8277a25023fbe42f0fc1fa1d084bb5cec50180606bcff47d871111f67248a2c725015e074e18ec128a819f6e06a5d1e7905b77c6b4714017a31647508a83c8f3c3dacaa4a5ec173aed5f1b923f6cc0c6e25a93e8a3263cd48ff58643fd2935a40f8f0d6316d27d2e7badcbbd05ab446df9539924c31c5e732c38cbbeacff417b6399c7165e99f8d3d46ecd2af4b7a67f185a86f616fb0c76f7033e7136c0fa1c989e34804ca76a9d5d4ff99ad5ae0d226ec23821f625c5fb025eb31399ab429366491bf8bbf9694ab7baaeaea0415f4ba6c0302e6f48e90c8add85a5984a4e12ddf7ff00631dc05a2eb02b0a31c47caf46029a9ec6cd65997f88cb3fe11b64dd35d5f1bca4000c14cb9d4b87dc5ef6be6d1b7648b2d8003c5499a9bf5c5ec33e823fd2ad583829a63e30165980c51d859ea4d61c26b089856939d90116777b526f3c7267910a8171d22f76b034853369f397b90f9c8d0b727ed38803feb9965f309497f5f17fe20ee871e885c7989884a8cc6c0ad73534e2c4649d0f57f551bac2b7cf884a6b4a3e77278fd881defeb7de39d5d87baff6d25623461bfcd2efde3032f309ebc96cf0697abb6b1e59d9f1b8b6fed5a24c4f848b66baabe8bbbaa6f3ba241f4e835bfbb451891830f3c52700771655b5c27247d7c8d10ac5b544f619bb9f701f3c8c950c4d4e223d9be33e80773e73a8b1ca661a85d60046f74f8fc2dd36ec04e98e55284bfc6bf033d73ebac06e20bf055e41cee585d0365db37e0462f34c79d08a44d3fc97a67f037efa864df5058ffc4073f2d7eb84277f778230e08c665f4551b897f76efc50f69a4c80e30f1b01f04ab6938651c733ce10b5d195f7ecfb80ac0b4468e0904fa4886b60c0f503b5f5ed69200a786ade6a6fbd95f6c3aa23c347bf7463d293a539ece2063a7e74098a82ed54ce880a6c4ac2b282a8de8bc492dad42161c57578bd99d238d41b9630289dece5efbea88443fdd970c61a15b81f7abb224723b0572d29a40a9cdee72bacf6883480003607827f28c0d78d64ffbea656b694f3c5b26c245d5090b1b67b2bb373a84abe84f337a88bccb4f78b1b135f17a61420abae5429ae520aff2d01dad480a3eb5f860732c74d77d6c92a2a1840060c6d84262185996a4e4481629562ed151259a23ff0cd265cf2754e682340566f341de21d48941ebd84db8f5323b4eed14153375017b5d3d022729fb32b1e050643ef0e2e263a7c8dc147eeaab50bbcf0a4ee284cef12e30a9b437e4d3bef9c2ba93664093ffbf00e626c12ea5aad48b0e94d64e91b208c4c1e88920f8e9b0c651ccb7ebc8f9fb4c65a3ba87b08c00549a7b965b43f1f1cda66c0ca1d162227866ede7576412cc8a695dcc0f14aecf23f2fcf567ba5a8d7fc5bda25295275eb6dafb4589205063a4d6296a00914e680fc7a0cb0e098923a648043aaad7fd81c1cee53a5dcdecd296132cb9aa9d76a97da8e50b00967690b1d68861a4da06dc698e23cf39089dc59d7b48e3c8efc9c5017dedd7849db668bb315edb4a09f1207e952508bdfcbd3fbb6d430e8f719eda670f50a2e39049823d19acbb7844ca20a071d3dbf2793eee49e9090a34ec8795fd3fbd9cf448be9a880e0b494687b4f5090fd3c9497505e1d69489048fe497c638f0384ca8b78a77e20eefec2623fbc55d0a85849c5efa56d1d2f2da3a3ffc941afeb7e92b27aa045865c4218a3fbb4db59b29849b558b78a8dab5bc47002f39b4790d74943d0b0ea6e9d6986f4b492ac7692f2630ba5829aee26da4e2eb3e563302c37beb4dcd7b8ccf63112749befcab26e3f8239ae32746338abe9dac61db4f20cad0c2a20dc969a275cd142b95215ba21a2011726810d15aa477d35faa6e5fb18e2630b12f8f51aaf31f32c3d92f316bcc2a33aa60fb3ec53c7942fcc5295a02410d57f17745fc87bcbcc040a69055c8525b5dc8d3e4685dc99f8c96f1132bdf27cc3c66a5b2c5c6569bacd57088f6c41700fe0da2543f6c5722729cb585462ea9f7c856486bb0fde97086c4eafeb97ace5a2032f8765030c6e41f6172e9da723dfb8517bb3759f8fcee0ceb204df959ef9acb8ecf73e06de4aecddbfa8b57047dae528c84bc225c119a9005faf2f348df4d0793fc0bf4ccab043d1a1fd4385b407db7e2c21deb966c8d9ccb9c04a8ffbaaf44e44819e12f89eac2b34a139726bc3e3b148bb1cdb33f2c8fffceda413d072135d56f9733c76f84e2c3fbb813589881db6c00e8d68efdf60cfabd61495af718478015d4667b15f4b0802ce9f6d137da34bdcd064443ffe6513f7e86f8403c9edb44c30e592840665936e924383ad452f2d35884baf0bf6e7a92735ba14eaf60d4d92b432d0da91e8a769b7205e49b9b9db4765d859d47a22b64bc341b6c3767f3859503d9f30c78e1259f510d0a1cb1eb6ab43690fcec3f28e982135bad4d3074c3050521620330da94811d8cb7f5e4e289285782ecb72a3682d0039a2bcdc723586d5a50ac61a17f27cb32e22c948705920bdf1ae3b9d12839e07ddfbedfdcdbb13994f0dd70a6cd9960b6025fe8e5d6eee9a17fa551142a7d0000afc0aa5794c78d338b8370862dbf3983534fb19c5e40e31581095fdfd02bedc222427ec83b3495aeca4333dfe14a50f0630cd6e36515fca1a3c98d3c3e6f7cd70fdac95a7517e41439cf019d93b31bcda7c211ff40e80d2db1cef55592ee5845c7525be6c55be42adf5e6792cd2401d30c3075df1104697ded212cdbe164a5ccded10ecf46feafb422c2168a9ef18d17375c7a8f586bcb928a95afcdb888b5f41a5f65797abe4e1d94599b78d61afdadf2827a89961a76cacc77feb0064a1c77e1a3b7f3f185dd67c4d90e29c6ec0716324422951d6bc41e583a1ce865692585acb086b5b9fd095b10e1c8d8339a22baef1cb965f397e9928ceccb7d91eee75a10f2f9b473a662ca0e64541fef250858042c6efde41883af909c1d008c27b22ccc329db8305b4cd7e12c0e9df9f000251e63bf35aafe51804537d0cfab7d4ef9f01ebb1ac8ae2fded12db44fef898214fecc19056f00c8b1c779fb919d618e5d0bafe346d5af8041f52153d7188ea76b9d5fd33752c643bab8dc55748d8b854b2e0448bc6027d9cff80216dd5c0d4d9c9e15ac428c1405f4f722a968c91c78855774fb55d31c7a25bacbfc0903a2aded2feeb2584dd343080e53c8150b49759ffca1e24e63c25da4d875958926a1bd215c7d3f55a767e263050c7c3a8e832123826aab161bb36f9d1264b3fd0d05bb338fc962721f6e349957fc21f1c2b5ae7d673d4d2e29f99c0af58f1ca511120b731105d7dc3e9cfee4b7c58e8ba1c029a384d1f492555273d45bf13d9c275759945961baa24b3b3a67bb9afe37d6d96ddfe4fe409be7e492425eb6de9e690c345158d9049209b14faf832241dfcdf08931d4a924adccfc34543437002851d6e5e1acbc4c4287b8c5014a550023030551caae1b280f6be8750dfdebbc36bede7ce95704e7aed15dc87c99863e544cd9e55d76676f215a70283fc3f9bf3c1ce5ea1f4769743c3ee0492bf3b0208ff85ce774408bd478b331fd226776e6963a0d1c82d07181f453cc3f4bc6055177eecc6e9bf26b4c8553571c05261b961a2c1b9b597ffcf90382e745fa33c1326b86c3f9d693f543dc306d8bc8f3f375f70bbf63a0ffe1c7e3489fc46882f43f23f02d8aed17c8f8c9611c04c2bec5ef5578a9d65be7a66712fe1a70cb0e77d9a3064ddd0645df1673a054964a48837231d2f9935cfc9d633432d0771f2e2a33708c50664444528d78396c7b5e13d7413104d6498d5e43a609c64fabc5f052388c500302b11449747c9dd490a62e59f2f914032b6f2d6e51d20dbd69ba45cebb67b40dd76c08131faf5c013b99aa4dd52eddcfede32a906cdf222322f0b8bf8a5c9eaa42f5cf2bb049ecbe223e4c4687391da0c784d413c2273ef6ebb5ffbcea7421bf584a86192de21b2c9b384ddce3ae853c690db19eadd899594b1327cf846037a4a1f3ce7b52cc1ffc0c00c530cb350e33b029c5464d90af73769a1cbb098040815f5f41e2302aa5a6449dde177d66c5ad4ee76a571da030447f09ce3a007dd999cc59c693bd82c56db78230c275e7a8c2806ccfa75135e1d4eeee47697435e78076fb9a49cb8c2dcfdb6caf4bd0458398c4774a1b2ecb1537503224a162e3f12d79cd5e53d5fc5b392407b62eef5fe4a9985b12ceecc0b7d73b4b402c90c9d381e20f6d6e0938b7a000c77123", @typed={0x8, 0x12, @u32=0x401}, @typed={0x8, 0x57, @pid=r3}, @typed={0x4, 0x13}, @generic="8b3f6f6a76a0fc222e0fb304e8a0bbf3a9529ea9b04f6ec7ff40e4a934be8c312f876a99e07420bf0849c2980f0ce60ca04522c3e95c42b790ad692700b0e6bfc392f5a7f1b49abe01c1ac96dd100252438d5d042fd1c3d784f6e5f10aa3308f6b3333494152b7dc70f8"]}]}, 0x10a8}}, 0x0) [ 241.398909] ? save_stack+0x43/0xd0 [ 241.417809] ? __kasan_slab_free+0x11a/0x170 [ 241.422253] ? kasan_slab_free+0xe/0x10 [ 241.426243] ? kfree+0xd9/0x260 [ 241.429543] ? match_int+0x23/0x30 [ 241.433095] ? parse_opts+0x32c/0x500 [ 241.436906] ? p9_fd_create+0x8b/0x3f0 [ 241.440798] ? p9_client_create+0xb2b/0x1631 [ 241.445205] ? v9fs_session_init+0x21a/0x1a80 [ 241.449710] ? v9fs_mount+0x7c/0x900 [ 241.453455] ? lock_acquire+0x1e4/0x540 [ 241.457452] ? fs_reclaim_acquire+0x20/0x20 [ 241.461791] ? lock_downgrade+0x8f0/0x8f0 05:58:50 executing program 2: r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000140)=ANY=[]) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000540000/0x2000)=nil, &(0x7f0000479000/0x4000)=nil, 0x2000}) syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x4, 0x20100) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) sigaltstack(&(0x7f00000e8000/0x2000)=nil, &(0x7f0000000080)) open_by_handle_at(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x84100) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getpeername$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14) ioctl(r0, 0x1, &(0x7f0000000000)) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000040)) shutdown(r1, 0x1) [ 241.465955] ? check_same_owner+0x340/0x340 [ 241.470296] ? rcu_note_context_switch+0x730/0x730 [ 241.475251] __should_failslab+0x124/0x180 [ 241.479505] should_failslab+0x9/0x14 [ 241.483318] __kmalloc+0x2c8/0x760 [ 241.486887] ? match_number.isra.0+0xbf/0x280 [ 241.491410] match_number.isra.0+0xbf/0x280 [ 241.495750] ? match_strdup+0xa0/0xa0 [ 241.499551] ? match_wildcard+0x3c0/0x3c0 [ 241.503693] match_int+0x23/0x30 [ 241.507052] parse_opts+0x32c/0x500 [ 241.510687] ? p9_fd_poll+0x2b0/0x2b0 [ 241.514482] ? kasan_check_write+0x14/0x20 [ 241.518717] ? do_raw_spin_lock+0xc1/0x200 [ 241.522945] ? trace_hardirqs_off+0xd/0x10 [ 241.527186] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 241.532290] p9_fd_create+0x8b/0x3f0 [ 241.536090] ? p9_fd_show_options+0x1c0/0x1c0 [ 241.540618] ? trace_hardirqs_on+0xd/0x10 [ 241.544760] p9_client_create+0xb2b/0x1631 [ 241.549008] ? p9_client_read+0xbb0/0xbb0 [ 241.553150] ? lock_acquire+0x1e4/0x540 [ 241.557124] ? fs_reclaim_acquire+0x20/0x20 [ 241.561472] ? lock_downgrade+0x8f0/0x8f0 [ 241.565615] ? lock_release+0xa30/0xa30 [ 241.569577] ? __lockdep_init_map+0x105/0x590 [ 241.574071] ? lockdep_init_map+0x9/0x10 [ 241.578118] ? kasan_check_write+0x14/0x20 [ 241.582339] ? __init_rwsem+0x1cc/0x2a0 [ 241.586325] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 241.591345] ? __kmalloc_track_caller+0x311/0x760 [ 241.596181] ? save_stack+0xa9/0xd0 [ 241.599811] ? save_stack+0x43/0xd0 [ 241.603427] ? kasan_kmalloc+0xc4/0xe0 [ 241.607318] ? memcpy+0x45/0x50 [ 241.610620] v9fs_session_init+0x21a/0x1a80 [ 241.614945] ? legacy_parse_monolithic+0xde/0x1e0 [ 241.620159] ? v9fs_show_options+0x7e0/0x7e0 [ 241.624566] ? lock_release+0xa30/0xa30 [ 241.628528] ? lock_downgrade+0x8f0/0x8f0 [ 241.632680] ? check_same_owner+0x340/0x340 [ 241.637081] ? kasan_unpoison_shadow+0x35/0x50 [ 241.641655] ? kasan_kmalloc+0xc4/0xe0 [ 241.645553] ? kmem_cache_alloc_trace+0x318/0x780 [ 241.650391] ? kasan_unpoison_shadow+0x35/0x50 [ 241.654961] ? kasan_kmalloc+0xc4/0xe0 [ 241.658854] v9fs_mount+0x7c/0x900 [ 241.662398] ? v9fs_drop_inode+0x150/0x150 [ 241.666625] legacy_get_tree+0x131/0x460 [ 241.670691] vfs_get_tree+0x1cb/0x5c0 [ 241.674483] do_mount+0x6f2/0x1e20 [ 241.678027] ? copy_mount_string+0x40/0x40 [ 241.682268] ? kasan_kmalloc+0xc4/0xe0 [ 241.686150] ? kmem_cache_alloc_trace+0x318/0x780 [ 241.690984] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 241.696525] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 241.702054] ? copy_mount_options+0x285/0x380 [ 241.706542] ksys_mount+0x12d/0x140 [ 241.710164] __x64_sys_mount+0xbe/0x150 [ 241.714129] do_syscall_64+0x1b9/0x820 [ 241.718015] ? finish_task_switch+0x1d3/0x870 [ 241.722504] ? syscall_return_slowpath+0x5e0/0x5e0 [ 241.727428] ? syscall_return_slowpath+0x31d/0x5e0 [ 241.732380] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 241.737393] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 241.742233] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 241.747435] RIP: 0033:0x456a09 [ 241.750617] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 241.769521] RSP: 002b:00007f3ecbe13c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 241.777222] RAX: ffffffffffffffda RBX: 00007f3ecbe146d4 RCX: 0000000000456a09 [ 241.784488] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 241.791772] RBP: 00000000009300a0 R08: 00000000200004c0 R09: 0000000000000000 [ 241.799037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 241.806297] R13: 00000000004d1750 R14: 00000000004c6e7f R15: 0000000000000012 05:58:51 executing program 0 (fault-call:8 fault-nth:19): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_client='access=client'}, {@cache_loose='cache=loose'}]}}) [ 241.813869] 9pnet: Insufficient options for proto=fd [ 241.826201] attempt to access beyond end of device [ 241.831201] loop4: rw=12288, want=8200, limit=20 [ 241.836130] attempt to access beyond end of device [ 241.841158] loop4: rw=12288, want=12296, limit=20 [ 241.846478] attempt to access beyond end of device [ 241.851620] loop4: rw=12288, want=8200, limit=20 [ 241.867726] attempt to access beyond end of device [ 241.872752] loop4: rw=12288, want=12296, limit=20 [ 241.932009] netlink: 4224 bytes leftover after parsing attributes in process `syz-executor7'. [ 241.952728] FAULT_INJECTION: forcing a failure. [ 241.952728] name failslab, interval 1, probability 0, space 0, times 0 [ 241.964087] CPU: 1 PID: 18320 Comm: syz-executor0 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 241.972579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 05:58:51 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x6, 0x4000) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000340)) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='tra\a\x00=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000380)={0x0, 0xfffffffffffff801, 0x1, [0x60]}, &(0x7f0000000500)=0xa) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000540)={r3, 0xfffffffffffffffe}, 0x8) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, 'wfdno'}}]}}) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000005c0)='highspeed\x00', 0xa) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000580)=@assoc_value={r3, 0x400000}, 0x8) [ 241.981935] Call Trace: [ 241.984528] dump_stack+0x1c9/0x2b4 [ 241.988165] ? dump_stack_print_info.cold.2+0x52/0x52 [ 241.988363] netlink: 4224 bytes leftover after parsing attributes in process `syz-executor7'. [ 241.993358] ? kernel_text_address+0x79/0xf0 [ 241.993382] should_fail.cold.4+0xa/0x11 [ 241.993401] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 241.993420] ? save_stack+0xa9/0xd0 [ 241.993432] ? save_stack+0x43/0xd0 [ 241.993443] ? kasan_kmalloc+0xc4/0xe0 [ 241.993456] ? kmem_cache_alloc+0x12e/0x760 [ 241.993469] ? p9_client_prepare_req.part.8+0xbc/0xa00 [ 241.993488] ? p9_client_rpc+0x247/0x1420 [ 242.040579] ? p9_client_create+0xd76/0x1631 [ 242.045002] ? v9fs_session_init+0x21a/0x1a80 [ 242.049600] ? v9fs_mount+0x7c/0x900 [ 242.053323] ? legacy_get_tree+0x131/0x460 [ 242.057572] ? vfs_get_tree+0x1cb/0x5c0 [ 242.061558] ? do_mount+0x6f2/0x1e20 [ 242.065281] ? ksys_mount+0x12d/0x140 [ 242.069098] ? __x64_sys_mount+0xbe/0x150 [ 242.073256] ? do_syscall_64+0x1b9/0x820 05:58:51 executing program 7: r0 = socket$inet6(0xa, 0x21000000000002, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)={&(0x7f00000002c0)='./file0\x00', 0x0, 0x18}, 0x10) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$inet(0x10, 0x3, 0xc) socket$bt_bnep(0x1f, 0x3, 0x4) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000020607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) fgetxattr(r0, &(0x7f0000000040)=@known='system.posix_acl_default\x00', &(0x7f0000000180)=""/249, 0xf9) accept$nfc_llcp(0xffffffffffffff9c, 0x0, &(0x7f0000000380)) r2 = dup(r0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000340)=0x4320, 0x4) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)=0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x240, 0x1, 0x3, 0x2, 0xe00, 0x8, 0x5c}, 0x20) move_pages(r3, 0x8, &(0x7f00000003c0)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f0000000400)=[0x6c9800000000], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0x4) [ 242.076783] 9pnet_virtio: no channels available for device (null) [ 242.077319] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 242.077336] ? __debug_object_init+0x581/0x12e0 [ 242.093583] ? lock_downgrade+0x8f0/0x8f0 [ 242.097743] ? lock_downgrade+0x8f0/0x8f0 [ 242.101900] ? kasan_check_read+0x11/0x20 [ 242.106061] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 242.110656] ? check_same_owner+0x340/0x340 [ 242.114988] ? rcu_note_context_switch+0x730/0x730 [ 242.119949] ? lock_acquire+0x1e4/0x540 [ 242.123946] __should_failslab+0x124/0x180 [ 242.128185] should_failslab+0x9/0x14 [ 242.131985] __kmalloc+0x2c8/0x760 [ 242.135512] ? kasan_slab_alloc+0x12/0x20 [ 242.139648] ? kmem_cache_alloc+0x2fc/0x760 [ 242.143966] ? p9_fcall_alloc+0x1e/0x90 [ 242.147936] p9_fcall_alloc+0x1e/0x90 [ 242.151738] p9_client_prepare_req.part.8+0x107/0xa00 [ 242.156925] ? add_wait_queue+0x1b9/0x2b0 [ 242.157907] netlink: 'syz-executor7': attribute type 1 has an invalid length. [ 242.161084] ? trace_9p_protocol_dump+0x3a0/0x3a0 [ 242.161099] ? __wake_up_locked_key_bookmark+0x20/0x20 [ 242.161115] ? lock_acquire+0x1e4/0x540 [ 242.161129] ? __fget+0x4ac/0x740 [ 242.161148] ? p9_pollwait+0x83/0x230 [ 242.168698] netlink: 20 bytes leftover after parsing attributes in process `syz-executor7'. [ 242.173238] ? p9_conn_create+0x730/0x730 [ 242.173255] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 242.173274] p9_client_rpc+0x247/0x1420 [ 242.173286] ? p9_fd_poll+0x1e0/0x2b0 [ 242.173300] ? p9_conn_create+0x55b/0x730 [ 242.173316] ? p9_client_prepare_req.part.8+0xa00/0xa00 [ 242.173334] ? ksys_dup3+0x690/0x690 [ 242.228790] ? check_same_owner+0x340/0x340 [ 242.233105] ? p9_fd_poll+0x2b0/0x2b0 [ 242.236901] ? kasan_kmalloc+0xc4/0xe0 [ 242.240784] ? p9_fd_show_options+0x1c0/0x1c0 [ 242.245279] p9_client_create+0xd76/0x1631 [ 242.249507] ? p9_client_read+0xbb0/0xbb0 [ 242.253642] ? lock_acquire+0x1e4/0x540 [ 242.257603] ? fs_reclaim_acquire+0x20/0x20 [ 242.261909] ? lock_downgrade+0x8f0/0x8f0 [ 242.266045] ? lock_release+0xa30/0xa30 [ 242.270006] ? __lockdep_init_map+0x105/0x590 [ 242.274500] ? kasan_check_write+0x14/0x20 [ 242.278731] ? __init_rwsem+0x1cc/0x2a0 [ 242.282701] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 242.287711] ? __kmalloc_track_caller+0x311/0x760 [ 242.293243] ? save_stack+0xa9/0xd0 [ 242.296882] ? save_stack+0x43/0xd0 [ 242.300497] ? kasan_kmalloc+0xc4/0xe0 [ 242.304377] ? memcpy+0x45/0x50 [ 242.307653] v9fs_session_init+0x21a/0x1a80 [ 242.311973] ? legacy_parse_monolithic+0xde/0x1e0 [ 242.316826] ? v9fs_show_options+0x7e0/0x7e0 [ 242.321235] ? lock_release+0xa30/0xa30 [ 242.325207] ? check_same_owner+0x340/0x340 [ 242.329532] ? lock_downgrade+0x8f0/0x8f0 [ 242.333676] ? kasan_unpoison_shadow+0x35/0x50 [ 242.338243] ? kasan_kmalloc+0xc4/0xe0 [ 242.342133] ? kmem_cache_alloc_trace+0x318/0x780 [ 242.346966] ? kasan_unpoison_shadow+0x35/0x50 [ 242.351535] ? kasan_kmalloc+0xc4/0xe0 [ 242.355416] v9fs_mount+0x7c/0x900 [ 242.358950] ? v9fs_drop_inode+0x150/0x150 [ 242.363170] legacy_get_tree+0x131/0x460 [ 242.367221] vfs_get_tree+0x1cb/0x5c0 [ 242.371017] do_mount+0x6f2/0x1e20 [ 242.374551] ? check_same_owner+0x340/0x340 [ 242.378860] ? lock_release+0xa30/0xa30 [ 242.382822] ? copy_mount_string+0x40/0x40 [ 242.387043] ? kasan_kmalloc+0xc4/0xe0 [ 242.390924] ? kmem_cache_alloc_trace+0x318/0x780 [ 242.395762] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 242.401325] ? _copy_from_user+0xdf/0x150 [ 242.405469] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 242.410992] ? copy_mount_options+0x285/0x380 [ 242.415484] ksys_mount+0x12d/0x140 [ 242.419098] __x64_sys_mount+0xbe/0x150 [ 242.423059] do_syscall_64+0x1b9/0x820 [ 242.426949] ? finish_task_switch+0x1d3/0x870 [ 242.431441] ? syscall_return_slowpath+0x5e0/0x5e0 [ 242.436355] ? syscall_return_slowpath+0x31d/0x5e0 [ 242.441268] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 242.446275] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 242.451111] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 242.456283] RIP: 0033:0x456a09 [ 242.459469] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 242.478374] RSP: 002b:00007f3ecbe13c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 242.486085] RAX: ffffffffffffffda RBX: 00007f3ecbe146d4 RCX: 0000000000456a09 [ 242.493378] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 242.500641] RBP: 00000000009300a0 R08: 00000000200004c0 R09: 0000000000000000 [ 242.507923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 242.515186] R13: 00000000004d1750 R14: 00000000004c6e7f R15: 0000000000000013 05:58:51 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)) 05:58:51 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTAT(r1, &(0x7f0000000000)={0x50, 0x7d, 0x0, {0x0, 0x49, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '+', 0xd, 'trusted{self-', 0x8, "766d6e657431ad5e"}}, 0x50) mkdir(&(0x7f0000000180)='./file0\x00', 0xffffffffffffffff) r2 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x20, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="2af6d0685074f1832e1d24da1daad234937654e8800095a9959a982b"], 0x1) 05:58:51 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x4d5) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') readv(r1, &(0x7f0000000800)=[{&(0x7f0000000700)=""/84, 0x54}, {&(0x7f00000008c0)=""/27, 0x1b}], 0x8) 05:58:51 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"00ac720000000000ec973f820f7c4000", 0x102}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) close(r0) 05:58:51 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x4) bind$unix(r1, &(0x7f0000000040)=@abs={0x1}, 0x6e) connect$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000240)="480000001400197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0fe5f0028213ee20600d4ff5bffff00c7e5ed5e00000000c8550000000000000000", 0x48}], 0x1) 05:58:51 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"00ac720000000000ec973f820f7c4000", 0x102}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) close(r0) 05:58:51 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) r3 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x3e39, 0x101000) getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001500)=ANY=[@ANYBLOB="6700002000cb"], 0x6) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f126fd"], 0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) r5 = msgget$private(0x0, 0x54) msgctl$IPC_STAT(r5, 0x2, &(0x7f00000001c0)=""/177) ioctl(r4, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") [ 242.549733] netlink: 'syz-executor7': attribute type 1 has an invalid length. [ 242.573187] netlink: 20 bytes leftover after parsing attributes in process `syz-executor7'. 05:58:51 executing program 0 (fault-call:8 fault-nth:20): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200), 0xa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e0'], 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_client='access=client'}, {@cache_loose='cache=loose'}]}}) 05:58:52 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="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") bpf$MAP_CREATE(0x0, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000002000)={0xf, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000700000000000000000061150400000000000000000000000000950000000000000022e2bbaa232efc2f4ac23f4c60655fbef4b9c7a1c8a2070000000000000038c3320fc9be00000000003caba67d000000000000000000000000000000000000000d"], &(0x7f0000003ff6)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000008000)=""/4096}, 0x48) getsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/mcfilter6\x00') ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f0000000280)) [ 242.707608] attempt to access beyond end of device [ 242.712642] loop4: rw=12288, want=8200, limit=20 [ 242.737614] attempt to access beyond end of device [ 242.742770] loop4: rw=12288, want=12296, limit=20 [ 242.752156] attempt to access beyond end of device 05:58:52 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000006c0)=ANY=[]) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0xffffffffffffffff, 0x2, 0x80000001, 0x3, 0x4}) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0x0, 0x8001, 0x6}) 05:58:52 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x4d5) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') readv(r1, &(0x7f0000000800)=[{&(0x7f0000000700)=""/84, 0x54}, {&(0x7f00000008c0)=""/27, 0x1b}], 0xff8) [ 242.757317] loop4: rw=12288, want=8200, limit=20 [ 242.765616] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 242.767039] attempt to access beyond end of device [ 242.777244] loop4: rw=12288, want=12296, limit=20 05:58:52 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"00ac720000000000ec973f820f7c4000", 0x102}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) close(r0) [ 242.838101] attempt to access beyond end of device [ 242.843179] loop4: rw=12288, want=8200, limit=20 [ 242.866474] FAULT_INJECTION: forcing a failure. [ 242.866474] name failslab, interval 1, probability 0, space 0, times 0 [ 242.877783] CPU: 1 PID: 18380 Comm: syz-executor0 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 242.886291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 242.895650] Call Trace: [ 242.898256] dump_stack+0x1c9/0x2b4 [ 242.901902] ? dump_stack_print_info.cold.2+0x52/0x52 [ 242.907132] ? perf_trace_lock+0xde/0x920 [ 242.911306] should_fail.cold.4+0xa/0x11 [ 242.915380] ? bpf_prog_kallsyms_find+0xde/0x4c0 [ 242.920150] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 242.925265] ? perf_trace_lock+0xde/0x920 [ 242.929425] ? lock_acquire+0x1e4/0x540 [ 242.933410] ? is_bpf_text_address+0xae/0x170 [ 242.938090] ? zap_class+0x740/0x740 [ 242.941810] ? __debug_object_init+0x581/0x12e0 [ 242.946482] ? lock_downgrade+0x8f0/0x8f0 [ 242.950634] ? lock_downgrade+0x8f0/0x8f0 [ 242.954792] ? kasan_check_read+0x11/0x20 [ 242.958946] ? do_raw_spin_unlock+0xa7/0x2f0 [ 242.963358] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 242.967946] ? kasan_check_write+0x14/0x20 [ 242.972190] ? check_same_owner+0x340/0x340 [ 242.976513] ? lock_acquire+0x1e4/0x540 [ 242.980486] ? add_wait_queue+0x1b9/0x2b0 [ 242.984635] ? rcu_note_context_switch+0x730/0x730 [ 242.989576] __should_failslab+0x124/0x180 [ 242.993814] should_failslab+0x9/0x14 [ 242.997620] kmem_cache_alloc+0x2af/0x760 [ 243.001770] ? kasan_check_write+0x14/0x20 [ 243.006006] ? do_raw_spin_lock+0xc1/0x200 [ 243.010250] p9_client_prepare_req.part.8+0xbc/0xa00 [ 243.015357] ? add_wait_queue+0x1b9/0x2b0 [ 243.019510] ? trace_9p_protocol_dump+0x3a0/0x3a0 [ 243.024463] ? __wake_up_locked_key_bookmark+0x20/0x20 [ 243.029753] ? lock_acquire+0x1e4/0x540 [ 243.033728] ? __fget+0x4ac/0x740 [ 243.037198] ? p9_pollwait+0x83/0x230 [ 243.040983] ? p9_conn_create+0x730/0x730 [ 243.045131] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 243.050667] p9_client_rpc+0x247/0x1420 [ 243.054625] ? p9_fd_poll+0x1e0/0x2b0 [ 243.058413] ? p9_conn_create+0x55b/0x730 [ 243.062545] ? p9_client_prepare_req.part.8+0xa00/0xa00 [ 243.067902] ? ksys_dup3+0x690/0x690 [ 243.071612] ? check_same_owner+0x340/0x340 [ 243.075921] ? p9_fd_poll+0x2b0/0x2b0 [ 243.079727] ? kasan_kmalloc+0xc4/0xe0 [ 243.083605] ? p9_fd_show_options+0x1c0/0x1c0 [ 243.088087] p9_client_create+0xd76/0x1631 [ 243.092307] ? p9_client_read+0xbb0/0xbb0 [ 243.096441] ? lock_acquire+0x1e4/0x540 [ 243.100400] ? fs_reclaim_acquire+0x20/0x20 [ 243.104716] ? lock_downgrade+0x8f0/0x8f0 [ 243.108858] ? lock_release+0xa30/0xa30 [ 243.112829] ? __lockdep_init_map+0x105/0x590 [ 243.117320] ? kasan_check_write+0x14/0x20 [ 243.121552] ? __init_rwsem+0x1cc/0x2a0 [ 243.125521] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 243.130560] ? __kmalloc_track_caller+0x311/0x760 [ 243.135392] ? save_stack+0xa9/0xd0 [ 243.139010] ? save_stack+0x43/0xd0 [ 243.142621] ? kasan_kmalloc+0xc4/0xe0 [ 243.146491] ? memcpy+0x45/0x50 [ 243.149762] v9fs_session_init+0x21a/0x1a80 [ 243.154072] ? legacy_parse_monolithic+0xde/0x1e0 [ 243.158920] ? v9fs_show_options+0x7e0/0x7e0 [ 243.163313] ? lock_release+0xa30/0xa30 [ 243.167272] ? lock_downgrade+0x8f0/0x8f0 [ 243.171416] ? check_same_owner+0x340/0x340 [ 243.175728] ? kasan_unpoison_shadow+0x35/0x50 [ 243.180298] ? kasan_kmalloc+0xc4/0xe0 [ 243.184173] ? kmem_cache_alloc_trace+0x318/0x780 [ 243.189005] ? kasan_unpoison_shadow+0x35/0x50 [ 243.193582] ? kasan_kmalloc+0xc4/0xe0 [ 243.197469] v9fs_mount+0x7c/0x900 [ 243.201009] ? v9fs_drop_inode+0x150/0x150 [ 243.205240] legacy_get_tree+0x131/0x460 [ 243.209288] vfs_get_tree+0x1cb/0x5c0 [ 243.213083] do_mount+0x6f2/0x1e20 [ 243.216617] ? copy_mount_string+0x40/0x40 [ 243.220837] ? retint_kernel+0x10/0x10 [ 243.224723] ? copy_mount_options+0x1a1/0x380 [ 243.229210] ? __sanitizer_cov_trace_pc+0x38/0x50 [ 243.234073] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 243.239614] ? copy_mount_options+0x285/0x380 [ 243.244109] ksys_mount+0x12d/0x140 [ 243.247720] __x64_sys_mount+0xbe/0x150 [ 243.251692] do_syscall_64+0x1b9/0x820 [ 243.255570] ? finish_task_switch+0x1d3/0x870 [ 243.260075] ? syscall_return_slowpath+0x5e0/0x5e0 [ 243.264996] ? syscall_return_slowpath+0x31d/0x5e0 [ 243.269918] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 243.274928] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 243.279761] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 243.284945] RIP: 0033:0x456a09 [ 243.288146] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 243.307047] RSP: 002b:00007f3ecbe13c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 243.314749] RAX: ffffffffffffffda RBX: 00007f3ecbe146d4 RCX: 0000000000456a09 [ 243.322032] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 243.329303] RBP: 00000000009300a0 R08: 00000000200004c0 R09: 0000000000000000 [ 243.336583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 243.343947] R13: 00000000004d1750 R14: 00000000004c6e7f R15: 0000000000000014 [ 243.352301] kasan: CONFIG_KASAN_INLINE enabled [ 243.356928] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 243.364350] general protection fault: 0000 [#1] SMP KASAN [ 243.369908] CPU: 1 PID: 18380 Comm: syz-executor0 Not tainted 4.18.0-rc6-next-20180725+ #18 [ 243.378406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 243.387783] RIP: 0010:p9_client_prepare_req.part.8+0x392/0xa00 [ 243.393766] Code: ff 0f 87 6a 02 00 00 e8 6c 8b f4 fa 0f be 85 f4 fe ff ff 4c 89 f2 48 c1 ea 03 89 85 f4 fe ff ff 48 b8 00 00 00 00 00 fc ff df <80> 3c 02 00 0f 85 89 05 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b [ 243.403815] attempt to access beyond end of device [ 243.412675] RSP: 0018:ffff880190007248 EFLAGS: 00010206 [ 243.412688] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000220e000 [ 243.412697] RDX: 000000000000000a RSI: ffffffff86881c94 RDI: ffff8801d907a878 [ 243.412704] RBP: ffff880190007378 R08: ffff8801b4c746c0 R09: fffffbfff10057c6 [ 243.412713] R10: fffffbfff10057c6 R11: ffffffff8802be33 R12: ffff8801d907a840 [ 243.412721] R13: 0000000000002000 R14: 0000000000000050 R15: ffff8801d907a87c [ 243.412733] FS: 00007f3ecbe14700(0000) GS:ffff8801db100000(0000) knlGS:0000000000000000 [ 243.412742] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 243.412749] CR2: 000000000047bcd0 CR3: 00000001b3937000 CR4: 00000000001406e0 [ 243.412759] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 243.412766] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 243.412770] Call Trace: [ 243.412788] ? add_wait_queue+0x1b9/0x2b0 [ 243.412806] ? trace_9p_protocol_dump+0x3a0/0x3a0 [ 243.412818] ? __wake_up_locked_key_bookmark+0x20/0x20 [ 243.412832] ? lock_acquire+0x1e4/0x540 [ 243.412850] ? __fget+0x4ac/0x740 [ 243.417789] loop4: rw=12288, want=12296, limit=20 [ 243.423124] ? p9_pollwait+0x83/0x230 [ 243.423136] ? p9_conn_create+0x730/0x730 [ 243.423158] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 243.456183] attempt to access beyond end of device [ 243.459478] p9_client_rpc+0x247/0x1420 [ 243.459491] ? p9_fd_poll+0x1e0/0x2b0 [ 243.459505] ? p9_conn_create+0x55b/0x730 [ 243.459523] ? p9_client_prepare_req.part.8+0xa00/0xa00 [ 243.459541] ? ksys_dup3+0x690/0x690 [ 243.459556] ? check_same_owner+0x340/0x340 [ 243.459568] ? p9_fd_poll+0x2b0/0x2b0 [ 243.459585] ? kasan_kmalloc+0xc4/0xe0 [ 243.459610] ? p9_fd_show_options+0x1c0/0x1c0 [ 243.459628] p9_client_create+0xd76/0x1631 [ 243.467859] loop4: rw=12288, want=8200, limit=20 [ 243.473718] ? p9_client_read+0xbb0/0xbb0 [ 243.473739] ? lock_acquire+0x1e4/0x540 [ 243.482232] attempt to access beyond end of device [ 243.488773] ? fs_reclaim_acquire+0x20/0x20 [ 243.488791] ? lock_downgrade+0x8f0/0x8f0 [ 243.488808] ? lock_release+0xa30/0xa30 [ 243.488822] ? __lockdep_init_map+0x105/0x590 [ 243.488840] ? kasan_check_write+0x14/0x20 [ 243.488850] ? __init_rwsem+0x1cc/0x2a0 [ 243.488863] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 243.488882] ? __kmalloc_track_caller+0x311/0x760 [ 243.488894] ? save_stack+0xa9/0xd0 [ 243.488904] ? save_stack+0x43/0xd0 [ 243.488927] ? kasan_kmalloc+0xc4/0xe0 [ 243.488942] ? memcpy+0x45/0x50 [ 243.496216] loop4: rw=12288, want=12296, limit=20 [ 243.498775] v9fs_session_init+0x21a/0x1a80 [ 243.498796] ? legacy_parse_monolithic+0xde/0x1e0 [ 243.666012] ? v9fs_show_options+0x7e0/0x7e0 [ 243.670411] ? lock_release+0xa30/0xa30 [ 243.674371] ? lock_downgrade+0x8f0/0x8f0 [ 243.678506] ? check_same_owner+0x340/0x340 [ 243.682826] ? kasan_unpoison_shadow+0x35/0x50 [ 243.687391] ? kasan_kmalloc+0xc4/0xe0 [ 243.691265] ? kmem_cache_alloc_trace+0x318/0x780 [ 243.696098] ? kasan_unpoison_shadow+0x35/0x50 [ 243.700675] ? kasan_kmalloc+0xc4/0xe0 [ 243.704551] v9fs_mount+0x7c/0x900 [ 243.708091] ? v9fs_drop_inode+0x150/0x150 [ 243.712320] legacy_get_tree+0x131/0x460 [ 243.716371] vfs_get_tree+0x1cb/0x5c0 [ 243.720160] do_mount+0x6f2/0x1e20 [ 243.723701] ? copy_mount_string+0x40/0x40 [ 243.727928] ? retint_kernel+0x10/0x10 [ 243.731807] ? copy_mount_options+0x1a1/0x380 [ 243.736299] ? __sanitizer_cov_trace_pc+0x38/0x50 [ 243.741128] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 243.746651] ? copy_mount_options+0x285/0x380 [ 243.751150] ksys_mount+0x12d/0x140 [ 243.754762] __x64_sys_mount+0xbe/0x150 [ 243.758744] do_syscall_64+0x1b9/0x820 [ 243.762619] ? finish_task_switch+0x1d3/0x870 [ 243.767114] ? syscall_return_slowpath+0x5e0/0x5e0 [ 243.772040] ? syscall_return_slowpath+0x31d/0x5e0 [ 243.776956] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 243.781960] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 243.786794] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 243.792770] RIP: 0033:0x456a09 [ 243.795958] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 243.814849] RSP: 002b:00007f3ecbe13c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 243.822553] RAX: ffffffffffffffda RBX: 00007f3ecbe146d4 RCX: 0000000000456a09 [ 243.829809] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 243.837074] RBP: 00000000009300a0 R08: 00000000200004c0 R09: 0000000000000000 [ 243.844330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 243.851583] R13: 00000000004d1750 R14: 00000000004c6e7f R15: 0000000000000014 [ 243.858840] Modules linked in: [ 243.862022] Dumping ftrace buffer: [ 243.865544] (ftrace buffer empty) [ 243.869313] ---[ end trace a3b86334e7e9f4de ]--- [ 243.874115] RIP: 0010:p9_client_prepare_req.part.8+0x392/0xa00 [ 243.880139] Code: ff 0f 87 6a 02 00 00 e8 6c 8b f4 fa 0f be 85 f4 fe ff ff 4c 89 f2 48 c1 ea 03 89 85 f4 fe ff ff 48 b8 00 00 00 00 00 fc ff df <80> 3c 02 00 0f 85 89 05 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b [ 243.899078] RSP: 0018:ffff880190007248 EFLAGS: 00010206 [ 243.904487] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000220e000 [ 243.911787] RDX: 000000000000000a RSI: ffffffff86881c94 RDI: ffff8801d907a878 [ 243.919102] RBP: ffff880190007378 R08: ffff8801b4c746c0 R09: fffffbfff10057c6 [ 243.926413] R10: fffffbfff10057c6 R11: ffffffff8802be33 R12: ffff8801d907a840 [ 243.933723] R13: 0000000000002000 R14: 0000000000000050 R15: ffff8801d907a87c [ 243.941035] FS: 00007f3ecbe14700(0000) GS:ffff8801db100000(0000) knlGS:0000000000000000 [ 243.949322] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 243.955259] CR2: 000000000047bcd0 CR3: 00000001b3937000 CR4: 00000000001406e0 [ 243.962604] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 243.969926] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 243.977234] Kernel panic - not syncing: Fatal exception [ 243.983169] Dumping ftrace buffer: [ 243.986709] (ftrace buffer empty) [ 243.990409] Kernel Offset: disabled [ 243.994024] Rebooting in 86400 seconds..