57:55 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x1200}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1829.015370] attempt to access beyond end of device [ 1829.020546] loop4: rw=12288, want=12296, limit=20 [ 1829.044367] attempt to access beyond end of device [ 1829.049514] loop6: rw=12288, want=8200, limit=20 [ 1829.105872] attempt to access beyond end of device [ 1829.110945] loop6: rw=12288, want=12296, limit=20 00:57:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xc001000000000000}, 0x2c) 00:57:55 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020009000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1829.259379] attempt to access beyond end of device [ 1829.264572] loop4: rw=12288, want=8200, limit=20 [ 1829.300892] attempt to access beyond end of device [ 1829.305998] loop4: rw=12288, want=12296, limit=20 00:57:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xd6010000}, 0x2c) [ 1829.443351] attempt to access beyond end of device [ 1829.448523] loop4: rw=12288, want=8200, limit=20 00:57:55 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000204a8000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:57:55 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0xe00000000000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1829.485424] attempt to access beyond end of device [ 1829.490635] loop4: rw=12288, want=12296, limit=20 [ 1829.521242] attempt to access beyond end of device [ 1829.526335] loop4: rw=12288, want=8200, limit=20 00:57:55 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:57:55 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20000000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1829.612539] attempt to access beyond end of device [ 1829.617631] loop4: rw=12288, want=12296, limit=20 00:57:55 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:57:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x300}, 0x2c) 00:57:56 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020023000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:57:56 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200000000fffffff5300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:57:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x71}, 0x2c) [ 1829.976916] attempt to access beyond end of device [ 1829.982025] loop6: rw=12288, want=8200, limit=20 00:57:56 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020a00000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:57:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x5}, 0x2c) [ 1830.055741] attempt to access beyond end of device [ 1830.060880] loop6: rw=12288, want=12296, limit=20 [ 1830.141911] attempt to access beyond end of device [ 1830.146989] loop6: rw=12288, want=8200, limit=20 00:57:56 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000001000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1830.226106] attempt to access beyond end of device [ 1830.231170] loop6: rw=12288, want=12296, limit=20 00:57:56 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x38}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:57:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x5c00000000000000}, 0x2c) [ 1830.354629] attempt to access beyond end of device [ 1830.359783] loop6: rw=12288, want=8200, limit=20 [ 1830.440114] attempt to access beyond end of device [ 1830.445159] attempt to access beyond end of device [ 1830.445178] loop4: rw=12288, want=8200, limit=20 [ 1830.445286] attempt to access beyond end of device [ 1830.445299] loop4: rw=12288, want=12296, limit=20 [ 1830.446028] attempt to access beyond end of device [ 1830.450318] loop6: rw=12288, want=12296, limit=20 [ 1830.474885] loop4: rw=12288, want=8200, limit=20 00:57:56 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000006300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:57:56 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:57:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x8003000000000000}, 0x2c) 00:57:56 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x34000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:57:56 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:57:56 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1830.675988] attempt to access beyond end of device [ 1830.681078] loop4: rw=12288, want=12296, limit=20 [ 1830.744661] attempt to access beyond end of device [ 1830.749758] loop6: rw=12288, want=8200, limit=20 [ 1830.794599] attempt to access beyond end of device [ 1830.799699] loop4: rw=12288, want=8200, limit=20 [ 1830.832704] attempt to access beyond end of device [ 1830.837765] loop6: rw=12288, want=12296, limit=20 [ 1830.874740] attempt to access beyond end of device [ 1830.879884] loop4: rw=12288, want=12296, limit=20 [ 1830.896402] attempt to access beyond end of device [ 1830.901508] loop6: rw=12288, want=8200, limit=20 00:57:57 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x200000}, 0x2c) [ 1830.959961] attempt to access beyond end of device [ 1830.965096] loop4: rw=12288, want=8200, limit=20 [ 1830.978924] attempt to access beyond end of device [ 1830.984147] loop6: rw=12288, want=12296, limit=20 [ 1831.042038] attempt to access beyond end of device [ 1831.047145] loop4: rw=12288, want=12296, limit=20 [ 1831.080325] attempt to access beyond end of device [ 1831.085398] loop6: rw=12288, want=8200, limit=20 00:57:57 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x9803}, 0x2c) [ 1831.146982] attempt to access beyond end of device [ 1831.152080] loop6: rw=12288, want=12296, limit=20 00:57:57 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000300000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1831.224249] attempt to access beyond end of device [ 1831.229374] loop6: rw=12288, want=8200, limit=20 00:57:57 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x2b}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1831.310627] attempt to access beyond end of device [ 1831.315804] loop6: rw=12288, want=12296, limit=20 00:57:57 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x380}, 0x2c) [ 1831.355843] attempt to access beyond end of device [ 1831.360933] loop4: rw=12288, want=8200, limit=20 00:57:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002000000000000006c300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1831.416872] attempt to access beyond end of device [ 1831.421978] loop4: rw=12288, want=12296, limit=20 [ 1831.533075] attempt to access beyond end of device [ 1831.538181] loop4: rw=12288, want=8200, limit=20 00:57:57 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x80010000000000}, 0x2c) [ 1831.587392] attempt to access beyond end of device [ 1831.592556] loop6: rw=12288, want=8200, limit=20 [ 1831.646167] attempt to access beyond end of device [ 1831.651409] loop4: rw=12288, want=12296, limit=20 [ 1831.662834] attempt to access beyond end of device [ 1831.667947] loop6: rw=12288, want=12296, limit=20 00:57:57 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:57:57 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2600000000000000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:57:57 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:57:58 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x80ffffff}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1831.709848] f2fs_msg: 191 callbacks suppressed [ 1831.709864] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 1831.728736] F2FS-fs (loop6): Failed to get valid F2FS checkpoint [ 1831.781753] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1831.788959] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1831.834695] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1831.841954] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1831.872686] attempt to access beyond end of device [ 1831.877868] loop4: rw=12288, want=8200, limit=20 [ 1831.883828] attempt to access beyond end of device [ 1831.888901] loop6: rw=12288, want=8200, limit=20 00:57:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xf402000000000000}, 0x2c) [ 1831.941888] attempt to access beyond end of device [ 1831.942883] attempt to access beyond end of device [ 1831.947019] loop4: rw=12288, want=12296, limit=20 [ 1831.951940] loop6: rw=12288, want=12296, limit=20 [ 1832.017336] F2FS-fs (loop6): Failed to get valid F2FS checkpoint [ 1832.093037] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1832.100220] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1832.101366] F2FS-fs (loop4): Failed to get valid F2FS checkpoint 00:57:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x9001000000000000}, 0x2c) 00:57:58 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020009000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:57:58 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002000008f600000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:57:58 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x38000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:57:58 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000007400000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:57:58 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000003f00000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:57:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xfd010000}, 0x2c) [ 1832.610870] attempt to access beyond end of device [ 1832.616007] loop4: rw=12288, want=8200, limit=20 [ 1832.688698] attempt to access beyond end of device [ 1832.693862] loop4: rw=12288, want=12296, limit=20 [ 1832.699751] attempt to access beyond end of device [ 1832.704831] loop6: rw=12288, want=8200, limit=20 00:57:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x68000000}, 0x2c) [ 1832.767322] attempt to access beyond end of device [ 1832.772527] loop4: rw=12288, want=8200, limit=20 [ 1832.780110] attempt to access beyond end of device [ 1832.785373] loop6: rw=12288, want=12296, limit=20 00:57:59 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200000000000000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:57:59 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:57:59 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x2b00}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:57:59 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc0ecff7f}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1832.845162] attempt to access beyond end of device [ 1832.850272] loop6: rw=12288, want=8200, limit=20 [ 1832.883620] attempt to access beyond end of device [ 1832.888719] loop4: rw=12288, want=12296, limit=20 [ 1832.932988] attempt to access beyond end of device [ 1832.938098] loop6: rw=12288, want=12296, limit=20 [ 1832.982180] attempt to access beyond end of device [ 1832.987284] loop4: rw=12288, want=8200, limit=20 00:57:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x5c}, 0x2c) [ 1833.032671] attempt to access beyond end of device [ 1833.037831] loop6: rw=12288, want=8200, limit=20 [ 1833.051173] attempt to access beyond end of device [ 1833.056250] loop4: rw=12288, want=12296, limit=20 [ 1833.106834] attempt to access beyond end of device [ 1833.111949] loop6: rw=12288, want=12296, limit=20 [ 1833.122717] attempt to access beyond end of device [ 1833.127944] loop4: rw=12288, want=8200, limit=20 00:57:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x17000000}, 0x2c) [ 1833.172130] attempt to access beyond end of device [ 1833.177242] loop6: rw=12288, want=8200, limit=20 [ 1833.201344] attempt to access beyond end of device [ 1833.206488] loop4: rw=12288, want=12296, limit=20 [ 1833.252384] attempt to access beyond end of device [ 1833.257528] loop6: rw=12288, want=12296, limit=20 00:57:59 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000007400000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:57:59 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000021020f5f200000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:57:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x24}, 0x2c) 00:57:59 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x200000000000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1833.539576] attempt to access beyond end of device [ 1833.544684] loop6: rw=12288, want=8200, limit=20 00:57:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x600}, 0x2c) 00:57:59 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000005300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1833.651154] attempt to access beyond end of device [ 1833.656273] loop6: rw=12288, want=12296, limit=20 [ 1833.718560] attempt to access beyond end of device [ 1833.723681] loop4: rw=12288, want=8200, limit=20 [ 1833.734500] attempt to access beyond end of device [ 1833.739715] loop6: rw=12288, want=8200, limit=20 00:58:00 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x30000}, 0x2c) [ 1833.782741] attempt to access beyond end of device [ 1833.787876] loop4: rw=12288, want=12296, limit=20 [ 1833.819891] attempt to access beyond end of device [ 1833.824967] loop6: rw=12288, want=12296, limit=20 00:58:00 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:00 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x2b}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1833.859840] attempt to access beyond end of device [ 1833.864904] loop4: rw=12288, want=8200, limit=20 [ 1833.918687] attempt to access beyond end of device [ 1833.923830] loop6: rw=12288, want=8200, limit=20 [ 1833.935030] attempt to access beyond end of device [ 1833.940108] loop4: rw=12288, want=12296, limit=20 00:58:00 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:58:00 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b002000000000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1834.006387] attempt to access beyond end of device [ 1834.011518] loop6: rw=12288, want=12296, limit=20 00:58:00 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x8103000000000000}, 0x2c) [ 1834.067101] attempt to access beyond end of device [ 1834.072173] loop4: rw=12288, want=8200, limit=20 [ 1834.112621] attempt to access beyond end of device [ 1834.116783] attempt to access beyond end of device [ 1834.117714] loop4: rw=12288, want=12296, limit=20 [ 1834.122671] loop6: rw=12288, want=8200, limit=20 [ 1834.168928] attempt to access beyond end of device [ 1834.174038] loop6: rw=12288, want=12296, limit=20 00:58:00 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002ffffffffffff0700300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:00 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000048300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:00 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xa0000000000000}, 0x2c) [ 1834.402960] attempt to access beyond end of device [ 1834.408080] loop4: rw=12288, want=8200, limit=20 00:58:00 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000021400000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1834.471540] attempt to access beyond end of device [ 1834.476664] loop4: rw=12288, want=12296, limit=20 [ 1834.550915] attempt to access beyond end of device [ 1834.556060] loop4: rw=12288, want=8200, limit=20 00:58:00 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x29000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:00 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x1100000000000000}, 0x2c) [ 1834.627581] attempt to access beyond end of device [ 1834.632824] loop4: rw=12288, want=12296, limit=20 00:58:00 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000027a00000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1834.774319] attempt to access beyond end of device [ 1834.779434] loop4: rw=12288, want=8200, limit=20 [ 1834.825063] attempt to access beyond end of device [ 1834.830110] loop4: rw=12288, want=12296, limit=20 00:58:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x700}, 0x2c) 00:58:01 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200000000fffffff6300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:01 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:01 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:58:01 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0xa00000000000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:01 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002000026a100000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:01 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8b030000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:58:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x6402}, 0x2c) [ 1835.153178] attempt to access beyond end of device [ 1835.158263] loop4: rw=12288, want=8200, limit=20 [ 1835.231893] attempt to access beyond end of device [ 1835.236981] loop4: rw=12288, want=12296, limit=20 00:58:01 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000297ffffff00000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1835.295038] attempt to access beyond end of device [ 1835.300186] loop4: rw=12288, want=8200, limit=20 00:58:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x1300}, 0x2c) [ 1835.403803] attempt to access beyond end of device [ 1835.408942] loop4: rw=12288, want=12296, limit=20 [ 1835.520388] attempt to access beyond end of device [ 1835.525551] loop4: rw=12288, want=8200, limit=20 00:58:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xf02}, 0x2c) 00:58:01 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000014300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1835.588228] attempt to access beyond end of device [ 1835.593317] loop4: rw=12288, want=12296, limit=20 [ 1835.664025] attempt to access beyond end of device [ 1835.669167] loop4: rw=12288, want=8200, limit=20 00:58:01 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x1f000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1835.709595] attempt to access beyond end of device [ 1835.714650] loop6: rw=12288, want=8200, limit=20 00:58:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x34000}, 0x2c) [ 1835.761251] attempt to access beyond end of device [ 1835.766345] loop6: rw=12288, want=12296, limit=20 [ 1835.779604] attempt to access beyond end of device [ 1835.784744] loop4: rw=12288, want=12296, limit=20 [ 1835.853663] attempt to access beyond end of device [ 1835.858756] loop6: rw=12288, want=8200, limit=20 00:58:02 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002fffffff600000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1835.915697] attempt to access beyond end of device [ 1835.920855] loop6: rw=12288, want=12296, limit=20 00:58:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x60000000000000}, 0x2c) 00:58:02 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:02 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0xffffffff00000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1836.054044] attempt to access beyond end of device [ 1836.059140] loop6: rw=12288, want=8200, limit=20 00:58:02 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1836.133782] attempt to access beyond end of device [ 1836.138899] loop6: rw=12288, want=12296, limit=20 00:58:02 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002000004a900000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:02 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x700}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1836.243101] attempt to access beyond end of device [ 1836.248164] loop6: rw=12288, want=8200, limit=20 00:58:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xe000000000000000}, 0x2c) [ 1836.334138] attempt to access beyond end of device [ 1836.339243] loop6: rw=12288, want=12296, limit=20 00:58:02 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000081300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:02 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000001000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xa0010000000000}, 0x2c) [ 1836.635845] attempt to access beyond end of device [ 1836.640952] loop6: rw=12288, want=8200, limit=20 [ 1836.649257] attempt to access beyond end of device [ 1836.654392] loop4: rw=12288, want=8200, limit=20 [ 1836.686623] attempt to access beyond end of device [ 1836.691700] loop6: rw=12288, want=12296, limit=20 [ 1836.707130] attempt to access beyond end of device [ 1836.712267] loop4: rw=12288, want=12296, limit=20 00:58:03 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0xc000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1836.762179] f2fs_msg: 250 callbacks suppressed [ 1836.762195] F2FS-fs (loop6): Failed to get valid F2FS checkpoint [ 1836.787718] F2FS-fs (loop4): Failed to get valid F2FS checkpoint 00:58:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x1000000000000}, 0x2c) [ 1836.869969] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1836.877204] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1836.898599] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1836.905817] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1836.978078] attempt to access beyond end of device [ 1836.983277] loop6: rw=12288, want=8200, limit=20 00:58:03 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1837.025966] attempt to access beyond end of device [ 1837.031186] loop4: rw=12288, want=8200, limit=20 [ 1837.049811] attempt to access beyond end of device [ 1837.054896] loop6: rw=12288, want=12296, limit=20 [ 1837.111700] attempt to access beyond end of device [ 1837.116839] loop4: rw=12288, want=12296, limit=20 00:58:03 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x40000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1837.152790] F2FS-fs (loop6): Failed to get valid F2FS checkpoint 00:58:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xc00000000000000}, 0x2c) [ 1837.204618] F2FS-fs (loop4): Failed to get valid F2FS checkpoint 00:58:03 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe803000000000000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:58:03 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf401}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1837.250714] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1837.257882] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1837.288752] attempt to access beyond end of device [ 1837.293843] loop4: rw=12288, want=8200, limit=20 [ 1837.358097] attempt to access beyond end of device [ 1837.363200] loop6: rw=12288, want=8200, limit=20 [ 1837.369753] attempt to access beyond end of device [ 1837.374884] loop4: rw=12288, want=12296, limit=20 00:58:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x600200}, 0x2c) [ 1837.435951] attempt to access beyond end of device [ 1837.441058] loop6: rw=12288, want=12296, limit=20 [ 1837.463595] attempt to access beyond end of device [ 1837.468692] loop4: rw=12288, want=8200, limit=20 [ 1837.515495] attempt to access beyond end of device [ 1837.520595] loop6: rw=12288, want=8200, limit=20 [ 1837.531942] attempt to access beyond end of device [ 1837.537078] loop4: rw=12288, want=12296, limit=20 [ 1837.572702] attempt to access beyond end of device [ 1837.577838] loop6: rw=12288, want=12296, limit=20 00:58:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x2d8}, 0x2c) 00:58:03 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020020000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:03 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002000026b300000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:04 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x40000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xd800000000000000}, 0x2c) 00:58:04 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002f2f5201000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:04 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002ac04000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:04 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:04 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xe00100}, 0x2c) 00:58:04 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000021000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:04 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000001400000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:04 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:58:04 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1838.402157] attempt to access beyond end of device [ 1838.407234] loop6: rw=12288, want=8200, limit=20 [ 1838.454604] attempt to access beyond end of device [ 1838.459706] loop6: rw=12288, want=12296, limit=20 [ 1838.488078] attempt to access beyond end of device [ 1838.493097] loop6: rw=12288, want=8200, limit=20 00:58:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x20010000000000}, 0x2c) 00:58:04 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000400300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1838.559909] attempt to access beyond end of device [ 1838.565089] loop6: rw=12288, want=12296, limit=20 [ 1838.674714] attempt to access beyond end of device [ 1838.679825] loop6: rw=12288, want=8200, limit=20 [ 1838.684474] attempt to access beyond end of device [ 1838.689807] loop4: rw=12288, want=8200, limit=20 [ 1838.734559] attempt to access beyond end of device [ 1838.739713] loop6: rw=12288, want=12296, limit=20 [ 1838.754622] attempt to access beyond end of device [ 1838.759793] loop4: rw=12288, want=12296, limit=20 00:58:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x1700000000000000}, 0x2c) [ 1838.808196] attempt to access beyond end of device [ 1838.813360] loop6: rw=12288, want=8200, limit=20 [ 1838.868070] attempt to access beyond end of device [ 1838.873258] loop4: rw=12288, want=8200, limit=20 00:58:05 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x29}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1838.927712] attempt to access beyond end of device [ 1838.932904] loop6: rw=12288, want=12296, limit=20 [ 1838.951685] attempt to access beyond end of device [ 1838.956890] loop4: rw=12288, want=12296, limit=20 00:58:05 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020005000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:05 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1839.104786] attempt to access beyond end of device [ 1839.109961] loop4: rw=12288, want=8200, limit=20 00:58:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xe00300}, 0x2c) 00:58:05 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1839.195541] attempt to access beyond end of device [ 1839.200616] loop4: rw=12288, want=12296, limit=20 [ 1839.271280] attempt to access beyond end of device [ 1839.276369] loop4: rw=12288, want=8200, limit=20 00:58:05 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff7f0000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1839.347904] attempt to access beyond end of device [ 1839.352954] loop4: rw=12288, want=12296, limit=20 00:58:05 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020074000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:05 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20005b00}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:58:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x400200}, 0x2c) 00:58:05 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200000000000004a6300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1839.639170] attempt to access beyond end of device [ 1839.644414] loop4: rw=12288, want=8200, limit=20 00:58:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x42030000}, 0x2c) 00:58:05 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002000000000000000c300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:05 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdef}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1839.721806] attempt to access beyond end of device [ 1839.727097] loop4: rw=12288, want=12296, limit=20 [ 1839.816099] attempt to access beyond end of device [ 1839.821227] loop4: rw=12288, want=8200, limit=20 [ 1839.828925] attempt to access beyond end of device [ 1839.834118] loop6: rw=12288, want=8200, limit=20 [ 1839.864317] attempt to access beyond end of device [ 1839.869504] loop6: rw=12288, want=12296, limit=20 [ 1839.886810] attempt to access beyond end of device [ 1839.891974] loop4: rw=12288, want=12296, limit=20 [ 1839.905432] attempt to access beyond end of device [ 1839.910614] loop6: rw=12288, want=8200, limit=20 00:58:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xf000000}, 0x2c) [ 1839.938633] attempt to access beyond end of device [ 1839.943867] loop6: rw=12288, want=12296, limit=20 [ 1839.972897] attempt to access beyond end of device [ 1839.978118] loop4: rw=12288, want=8200, limit=20 [ 1840.018069] attempt to access beyond end of device [ 1840.023266] loop4: rw=12288, want=12296, limit=20 00:58:06 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x1100000000000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1840.090353] attempt to access beyond end of device [ 1840.095430] loop6: rw=12288, want=8200, limit=20 [ 1840.103987] attempt to access beyond end of device [ 1840.109151] loop4: rw=12288, want=8200, limit=20 00:58:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xc0010000}, 0x2c) [ 1840.166517] attempt to access beyond end of device [ 1840.171568] loop6: rw=12288, want=12296, limit=20 00:58:06 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:06 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1840.218444] attempt to access beyond end of device [ 1840.223681] loop4: rw=12288, want=12296, limit=20 [ 1840.243895] attempt to access beyond end of device [ 1840.248923] loop6: rw=12288, want=8200, limit=20 [ 1840.304226] attempt to access beyond end of device [ 1840.309273] loop6: rw=12288, want=12296, limit=20 00:58:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x800300}, 0x2c) 00:58:06 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200000000fffffff4300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:06 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000003f00000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:06 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc0ecff7f00000000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:58:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xea03}, 0x2c) [ 1840.557332] attempt to access beyond end of device [ 1840.562504] loop6: rw=12288, want=8200, limit=20 [ 1840.587628] attempt to access beyond end of device [ 1840.592698] loop4: rw=12288, want=8200, limit=20 [ 1840.635437] attempt to access beyond end of device [ 1840.640556] loop6: rw=12288, want=12296, limit=20 00:58:06 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffecc0}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1840.682968] attempt to access beyond end of device [ 1840.688670] loop4: rw=12288, want=12296, limit=20 [ 1840.700271] attempt to access beyond end of device [ 1840.705365] loop6: rw=12288, want=8200, limit=20 00:58:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x2}, 0x2c) [ 1840.755149] attempt to access beyond end of device [ 1840.760252] loop6: rw=12288, want=12296, limit=20 [ 1840.782910] attempt to access beyond end of device [ 1840.788135] loop4: rw=12288, want=8200, limit=20 [ 1840.832324] attempt to access beyond end of device [ 1840.837603] loop4: rw=12288, want=12296, limit=20 [ 1840.855845] attempt to access beyond end of device [ 1840.860992] loop6: rw=12288, want=8200, limit=20 00:58:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x40010000000000}, 0x2c) [ 1840.936976] attempt to access beyond end of device [ 1840.942074] loop6: rw=12288, want=12296, limit=20 [ 1840.957928] attempt to access beyond end of device [ 1840.963080] loop4: rw=12288, want=8200, limit=20 [ 1840.987977] attempt to access beyond end of device [ 1840.993053] loop6: rw=12288, want=8200, limit=20 [ 1841.024661] attempt to access beyond end of device [ 1841.029825] loop4: rw=12288, want=12296, limit=20 [ 1841.063696] attempt to access beyond end of device [ 1841.068826] loop6: rw=12288, want=12296, limit=20 00:58:07 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x25000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:07 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000267f00000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:07 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002000000000000001f300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x6402000000000000}, 0x2c) 00:58:07 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:07 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1841.466170] attempt to access beyond end of device [ 1841.471248] loop6: rw=12288, want=8200, limit=20 00:58:07 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000204ac000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x8003}, 0x2c) [ 1841.533747] attempt to access beyond end of device [ 1841.538829] loop6: rw=12288, want=12296, limit=20 00:58:07 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc0ecff7f}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1841.601126] attempt to access beyond end of device [ 1841.606283] loop6: rw=12288, want=8200, limit=20 [ 1841.672428] attempt to access beyond end of device [ 1841.677529] loop6: rw=12288, want=12296, limit=20 00:58:08 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000024c00000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:08 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xeffdffff00000000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1841.825857] f2fs_msg: 223 callbacks suppressed [ 1841.825876] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1841.837781] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock 00:58:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x500}, 0x2c) [ 1841.910980] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1841.918120] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1841.974250] attempt to access beyond end of device [ 1841.979453] loop6: rw=12288, want=8200, limit=20 [ 1842.012499] F2FS-fs (loop4): Wrong secs_per_zone / total_sections (19458, 14) 00:58:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xf}, 0x2c) [ 1842.019906] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1842.039062] attempt to access beyond end of device [ 1842.044221] loop6: rw=12288, want=12296, limit=20 [ 1842.120017] F2FS-fs (loop6): Failed to get valid F2FS checkpoint [ 1842.130515] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1842.137738] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1842.162256] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) 00:58:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xffffffff00000000}, 0x2c) [ 1842.240637] attempt to access beyond end of device [ 1842.245686] loop6: rw=12288, want=8200, limit=20 00:58:08 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0xea01}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1842.308722] attempt to access beyond end of device [ 1842.313795] loop6: rw=12288, want=12296, limit=20 00:58:08 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002000000000000003f300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:08 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:08 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:08 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020060000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xa00000000000000}, 0x2c) [ 1842.566022] attempt to access beyond end of device [ 1842.571067] loop4: rw=12288, want=8200, limit=20 00:58:08 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0xda3f0000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1842.620696] attempt to access beyond end of device [ 1842.625838] loop4: rw=12288, want=12296, limit=20 [ 1842.694759] attempt to access beyond end of device [ 1842.699852] loop4: rw=12288, want=8200, limit=20 00:58:09 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000400000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1842.745009] attempt to access beyond end of device [ 1842.750095] loop4: rw=12288, want=12296, limit=20 [ 1842.837596] attempt to access beyond end of device [ 1842.842655] loop4: rw=12288, want=8200, limit=20 00:58:09 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x900}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1842.900717] attempt to access beyond end of device [ 1842.905815] loop4: rw=12288, want=12296, limit=20 [ 1842.930013] attempt to access beyond end of device [ 1842.935124] loop6: rw=12288, want=8200, limit=20 00:58:09 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xb1030000}, 0x2c) [ 1842.950244] attempt to access beyond end of device [ 1842.955310] loop4: rw=12288, want=8200, limit=20 [ 1843.008008] attempt to access beyond end of device [ 1843.013140] loop6: rw=12288, want=12296, limit=20 [ 1843.023621] attempt to access beyond end of device [ 1843.028684] loop4: rw=12288, want=12296, limit=20 00:58:09 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xf4020000}, 0x2c) [ 1843.086757] attempt to access beyond end of device [ 1843.091917] loop6: rw=12288, want=8200, limit=20 00:58:09 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200000000ffffffff300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1843.159350] attempt to access beyond end of device [ 1843.164520] loop6: rw=12288, want=12296, limit=20 00:58:09 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xc00300}, 0x2c) [ 1843.260091] attempt to access beyond end of device [ 1843.265247] loop4: rw=12288, want=8200, limit=20 [ 1843.285481] attempt to access beyond end of device [ 1843.290589] loop6: rw=12288, want=8200, limit=20 00:58:09 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x2b00}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1843.349809] attempt to access beyond end of device [ 1843.354913] loop4: rw=12288, want=12296, limit=20 [ 1843.371653] attempt to access beyond end of device [ 1843.376757] loop6: rw=12288, want=12296, limit=20 00:58:09 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1843.419813] attempt to access beyond end of device [ 1843.424942] loop4: rw=12288, want=8200, limit=20 [ 1843.432718] attempt to access beyond end of device [ 1843.437931] loop6: rw=12288, want=8200, limit=20 00:58:09 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:09 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xb00000000000000}, 0x2c) [ 1843.516770] attempt to access beyond end of device [ 1843.521944] loop4: rw=12288, want=12296, limit=20 [ 1843.534162] attempt to access beyond end of device [ 1843.539240] loop6: rw=12288, want=12296, limit=20 [ 1843.619782] attempt to access beyond end of device [ 1843.624913] loop4: rw=12288, want=8200, limit=20 00:58:09 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000800000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:09 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7000000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1843.682129] attempt to access beyond end of device [ 1843.687224] loop4: rw=12288, want=12296, limit=20 00:58:10 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xa00100}, 0x2c) [ 1843.790242] attempt to access beyond end of device [ 1843.795493] loop4: rw=12288, want=8200, limit=20 [ 1843.818904] attempt to access beyond end of device [ 1843.824063] loop6: rw=12288, want=8200, limit=20 [ 1843.878758] attempt to access beyond end of device [ 1843.883873] loop4: rw=12288, want=12296, limit=20 [ 1843.893020] attempt to access beyond end of device [ 1843.898160] loop6: rw=12288, want=12296, limit=20 00:58:10 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xda3f}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:58:10 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xa000000}, 0x2c) [ 1843.977003] attempt to access beyond end of device [ 1843.982136] loop6: rw=12288, want=8200, limit=20 00:58:10 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000004300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1844.082787] attempt to access beyond end of device [ 1844.087958] loop6: rw=12288, want=12296, limit=20 00:58:10 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x60}, 0x2c) [ 1844.213490] attempt to access beyond end of device [ 1844.216184] attempt to access beyond end of device [ 1844.218588] loop4: rw=12288, want=8200, limit=20 [ 1844.223544] loop6: rw=12288, want=8200, limit=20 [ 1844.261417] attempt to access beyond end of device [ 1844.266588] loop6: rw=12288, want=12296, limit=20 [ 1844.327554] attempt to access beyond end of device [ 1844.332669] loop6: rw=12288, want=8200, limit=20 [ 1844.366773] attempt to access beyond end of device [ 1844.371877] loop4: rw=12288, want=12296, limit=20 00:58:10 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xba02}, 0x2c) [ 1844.405626] attempt to access beyond end of device [ 1844.410741] loop6: rw=12288, want=12296, limit=20 [ 1844.439487] attempt to access beyond end of device [ 1844.444632] loop4: rw=12288, want=8200, limit=20 00:58:10 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:10 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x500}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:10 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1844.526867] attempt to access beyond end of device [ 1844.531955] loop4: rw=12288, want=12296, limit=20 00:58:10 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000600000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:10 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x1c0}, 0x2c) [ 1844.676211] attempt to access beyond end of device [ 1844.681333] loop4: rw=12288, want=8200, limit=20 00:58:11 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1844.727186] attempt to access beyond end of device [ 1844.732319] loop6: rw=12288, want=8200, limit=20 [ 1844.757295] attempt to access beyond end of device [ 1844.762446] loop4: rw=12288, want=12296, limit=20 [ 1844.788671] attempt to access beyond end of device [ 1844.793932] loop6: rw=12288, want=12296, limit=20 [ 1844.828208] attempt to access beyond end of device [ 1844.833420] loop4: rw=12288, want=8200, limit=20 00:58:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x7}, 0x2c) [ 1844.875893] attempt to access beyond end of device [ 1844.881026] loop6: rw=12288, want=8200, limit=20 [ 1844.930897] attempt to access beyond end of device [ 1844.936055] loop4: rw=12288, want=12296, limit=20 [ 1844.953315] attempt to access beyond end of device [ 1844.958446] loop6: rw=12288, want=12296, limit=20 00:58:11 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffff000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:58:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x2c000}, 0x2c) [ 1845.057643] attempt to access beyond end of device [ 1845.062829] loop6: rw=12288, want=8200, limit=20 00:58:11 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200000000000004a9300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1845.115313] attempt to access beyond end of device [ 1845.120428] loop6: rw=12288, want=12296, limit=20 [ 1845.194960] attempt to access beyond end of device [ 1845.200072] loop6: rw=12288, want=8200, limit=20 [ 1845.227769] attempt to access beyond end of device [ 1845.232894] loop4: rw=12288, want=8200, limit=20 00:58:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xc0000000000000}, 0x2c) [ 1845.281616] attempt to access beyond end of device [ 1845.286861] loop6: rw=12288, want=12296, limit=20 [ 1845.304126] attempt to access beyond end of device [ 1845.309262] loop4: rw=12288, want=12296, limit=20 00:58:11 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000007a00000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1845.385791] attempt to access beyond end of device [ 1845.390981] loop4: rw=12288, want=8200, limit=20 [ 1845.458284] attempt to access beyond end of device [ 1845.463431] loop4: rw=12288, want=12296, limit=20 00:58:11 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xd00}, 0x2c) 00:58:11 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1845.547655] attempt to access beyond end of device [ 1845.552806] loop6: rw=12288, want=8200, limit=20 00:58:11 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x2900}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1845.639683] attempt to access beyond end of device [ 1845.644815] loop4: rw=12288, want=8200, limit=20 [ 1845.673037] attempt to access beyond end of device [ 1845.678156] loop6: rw=12288, want=12296, limit=20 [ 1845.705958] attempt to access beyond end of device [ 1845.711135] loop4: rw=12288, want=12296, limit=20 [ 1845.746266] attempt to access beyond end of device [ 1845.751408] loop6: rw=12288, want=8200, limit=20 00:58:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x3a000}, 0x2c) [ 1845.794825] attempt to access beyond end of device [ 1845.799988] loop4: rw=12288, want=8200, limit=20 [ 1845.811171] attempt to access beyond end of device [ 1845.816232] loop6: rw=12288, want=12296, limit=20 00:58:12 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3e8}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1845.863186] attempt to access beyond end of device [ 1845.868328] loop4: rw=12288, want=12296, limit=20 [ 1845.945432] attempt to access beyond end of device [ 1845.950551] loop6: rw=12288, want=8200, limit=20 00:58:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x900000000000000}, 0x2c) 00:58:12 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000266e00000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1846.016925] attempt to access beyond end of device [ 1846.022014] loop6: rw=12288, want=12296, limit=20 00:58:12 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ff7f00000000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1846.085378] attempt to access beyond end of device [ 1846.090512] loop6: rw=12288, want=8200, limit=20 [ 1846.142493] attempt to access beyond end of device [ 1846.147590] loop6: rw=12288, want=12296, limit=20 00:58:12 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000009300000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x68020000}, 0x2c) 00:58:12 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002000d000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1846.370125] attempt to access beyond end of device [ 1846.375213] loop4: rw=12288, want=8200, limit=20 00:58:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x3f000000}, 0x2c) [ 1846.443880] attempt to access beyond end of device [ 1846.448977] loop4: rw=12288, want=12296, limit=20 00:58:12 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1846.526927] attempt to access beyond end of device [ 1846.532061] loop4: rw=12288, want=8200, limit=20 00:58:12 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002ffffffffffffff7f300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:12 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1846.621282] attempt to access beyond end of device [ 1846.626421] loop4: rw=12288, want=12296, limit=20 00:58:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xcd03000000000000}, 0x2c) 00:58:12 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x9}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1846.733072] attempt to access beyond end of device [ 1846.738217] loop4: rw=12288, want=8200, limit=20 00:58:13 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002b326000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1846.805987] attempt to access beyond end of device [ 1846.811148] loop4: rw=12288, want=12296, limit=20 [ 1846.887715] f2fs_msg: 180 callbacks suppressed [ 1846.887738] F2FS-fs (loop4): Failed to get valid F2FS checkpoint 00:58:13 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffff000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1846.951799] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1846.959023] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1846.982835] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1846.989987] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 00:58:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xea03000000000000}, 0x2c) [ 1847.070294] F2FS-fs (loop6): Wrong secs_per_zone / total_sections (2536194, 14) [ 1847.077958] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 1847.093223] attempt to access beyond end of device [ 1847.098310] loop4: rw=12288, want=8200, limit=20 00:58:13 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1847.162705] attempt to access beyond end of device [ 1847.167879] loop4: rw=12288, want=12296, limit=20 [ 1847.181940] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1847.189121] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1847.238332] F2FS-fs (loop4): Failed to get valid F2FS checkpoint 00:58:13 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000400000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x600000}, 0x2c) 00:58:13 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002000004a800000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xb6000000}, 0x2c) [ 1847.480319] attempt to access beyond end of device [ 1847.485416] loop4: rw=12288, want=8200, limit=20 00:58:13 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:13 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000024c00000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1847.591585] attempt to access beyond end of device [ 1847.596737] loop4: rw=12288, want=12296, limit=20 [ 1847.662999] attempt to access beyond end of device [ 1847.668184] loop4: rw=12288, want=8200, limit=20 00:58:13 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:14 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x64020000}, 0x2c) [ 1847.734912] attempt to access beyond end of device [ 1847.740047] loop4: rw=12288, want=12296, limit=20 00:58:14 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x2000000000000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:14 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000040000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1847.882046] attempt to access beyond end of device [ 1847.887205] loop4: rw=12288, want=8200, limit=20 00:58:14 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xce02}, 0x2c) [ 1847.961553] attempt to access beyond end of device [ 1847.966649] loop4: rw=12288, want=12296, limit=20 [ 1848.016975] attempt to access beyond end of device [ 1848.022121] loop4: rw=12288, want=8200, limit=20 00:58:14 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x700000000000000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1848.093084] attempt to access beyond end of device [ 1848.098224] loop4: rw=12288, want=12296, limit=20 00:58:14 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000026c00000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:14 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xc0020000000000}, 0x2c) 00:58:14 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000026c00000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:14 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:58:14 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002a904000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:14 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x200100}, 0x2c) 00:58:14 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000026d26000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:14 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:14 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xf020000}, 0x2c) 00:58:14 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002a126000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:15 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:15 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020200000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:15 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x300000000000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:15 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x90010000}, 0x2c) 00:58:15 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000004800000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1849.110883] attempt to access beyond end of device [ 1849.116090] loop6: rw=12288, want=8200, limit=20 [ 1849.161188] attempt to access beyond end of device [ 1849.166323] loop6: rw=12288, want=12296, limit=20 [ 1849.225198] attempt to access beyond end of device [ 1849.230296] loop6: rw=12288, want=8200, limit=20 00:58:15 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200000000000004a5300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:15 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xd800}, 0x2c) 00:58:15 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe00000000000000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1849.283917] attempt to access beyond end of device [ 1849.289008] loop6: rw=12288, want=12296, limit=20 00:58:15 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1849.367906] attempt to access beyond end of device [ 1849.373124] loop4: rw=12288, want=8200, limit=20 00:58:15 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xa00}, 0x2c) [ 1849.414834] attempt to access beyond end of device [ 1849.419963] loop6: rw=12288, want=8200, limit=20 [ 1849.446818] attempt to access beyond end of device [ 1849.451908] loop4: rw=12288, want=12296, limit=20 [ 1849.489580] attempt to access beyond end of device [ 1849.494685] loop6: rw=12288, want=12296, limit=20 [ 1849.508024] attempt to access beyond end of device [ 1849.513113] loop4: rw=12288, want=8200, limit=20 [ 1849.569672] attempt to access beyond end of device [ 1849.574786] loop4: rw=12288, want=12296, limit=20 [ 1849.584669] attempt to access beyond end of device [ 1849.589820] loop6: rw=12288, want=8200, limit=20 00:58:15 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1849.628271] attempt to access beyond end of device [ 1849.633401] loop6: rw=12288, want=12296, limit=20 00:58:15 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x2000}, 0x2c) [ 1849.691903] attempt to access beyond end of device [ 1849.696978] loop4: rw=12288, want=8200, limit=20 00:58:16 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002fffffffd00000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1849.771207] attempt to access beyond end of device [ 1849.776326] loop4: rw=12288, want=12296, limit=20 00:58:16 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:16 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x9}, 0x2c) [ 1849.869914] attempt to access beyond end of device [ 1849.875087] loop4: rw=12288, want=8200, limit=20 00:58:16 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0xc0ffffff}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1849.941618] attempt to access beyond end of device [ 1849.946813] loop4: rw=12288, want=12296, limit=20 00:58:16 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002000c000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:16 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x600000000000000}, 0x2c) 00:58:16 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000204ab000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:16 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000021020f5f200000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:16 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x600100}, 0x2c) 00:58:16 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4cb0ff7f00000000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:58:16 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020060000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:16 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:58:16 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002fcfdffff00000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:16 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xe2030000}, 0x2c) 00:58:16 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:16 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002266e000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:17 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xe}, 0x2c) 00:58:17 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:17 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000226a1000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:17 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x5000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:17 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200000000fffffffe300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:17 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x10000000000}, 0x2c) 00:58:17 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020600000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1851.114173] attempt to access beyond end of device [ 1851.119321] loop6: rw=12288, want=8200, limit=20 [ 1851.217708] attempt to access beyond end of device [ 1851.222832] loop6: rw=12288, want=12296, limit=20 00:58:17 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x80000000000000}, 0x2c) [ 1851.337966] attempt to access beyond end of device [ 1851.343204] loop6: rw=12288, want=8200, limit=20 00:58:17 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000002300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1851.428341] attempt to access beyond end of device [ 1851.433580] loop6: rw=12288, want=12296, limit=20 00:58:17 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6000000000000000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:58:17 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2600}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1851.528693] attempt to access beyond end of device [ 1851.533795] loop4: rw=12288, want=8200, limit=20 [ 1851.546343] attempt to access beyond end of device [ 1851.551499] loop6: rw=12288, want=8200, limit=20 [ 1851.606408] attempt to access beyond end of device [ 1851.611560] loop4: rw=12288, want=12296, limit=20 00:58:17 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x400300}, 0x2c) [ 1851.649645] attempt to access beyond end of device [ 1851.654775] loop6: rw=12288, want=12296, limit=20 00:58:17 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1851.696065] attempt to access beyond end of device [ 1851.701314] loop4: rw=12288, want=8200, limit=20 [ 1851.721963] attempt to access beyond end of device [ 1851.727048] loop6: rw=12288, want=8200, limit=20 [ 1851.790636] attempt to access beyond end of device [ 1851.791943] attempt to access beyond end of device [ 1851.795817] loop6: rw=12288, want=12296, limit=20 [ 1851.805744] loop4: rw=12288, want=12296, limit=20 00:58:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x80010000}, 0x2c) 00:58:18 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002fffffffe00000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:18 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1851.911807] f2fs_msg: 351 callbacks suppressed [ 1851.911823] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 1852.032775] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1852.039940] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 00:58:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x9803000000000000}, 0x2c) 00:58:18 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x2700}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1852.108903] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1852.116141] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1852.137185] attempt to access beyond end of device [ 1852.142235] loop4: rw=12288, want=8200, limit=20 [ 1852.216764] attempt to access beyond end of device [ 1852.221918] loop4: rw=12288, want=12296, limit=20 [ 1852.227629] F2FS-fs (loop6): Wrong secs_per_zone / total_sections (4294967042, 14) [ 1852.235511] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 1852.293725] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 1852.319622] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1852.326772] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1852.337612] attempt to access beyond end of device [ 1852.342637] loop4: rw=12288, want=8200, limit=20 [ 1852.392665] attempt to access beyond end of device [ 1852.397716] loop4: rw=12288, want=12296, limit=20 00:58:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xd200}, 0x2c) 00:58:18 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000900000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:18 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000027400000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1852.623099] attempt to access beyond end of device [ 1852.628187] loop4: rw=12288, want=8200, limit=20 00:58:18 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:18 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1f4}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:58:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x5c00}, 0x2c) 00:58:18 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0xeffdffff}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1852.678907] attempt to access beyond end of device [ 1852.684000] loop4: rw=12288, want=12296, limit=20 [ 1852.767400] attempt to access beyond end of device [ 1852.772497] loop4: rw=12288, want=8200, limit=20 [ 1852.830662] attempt to access beyond end of device [ 1852.835818] loop4: rw=12288, want=12296, limit=20 00:58:19 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000004300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:19 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xb600}, 0x2c) [ 1852.926639] attempt to access beyond end of device [ 1852.931687] loop4: rw=12288, want=8200, limit=20 [ 1852.957857] attempt to access beyond end of device [ 1852.962916] loop4: rw=12288, want=12296, limit=20 00:58:19 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1853.034877] attempt to access beyond end of device [ 1853.040022] loop6: rw=12288, want=8200, limit=20 [ 1853.050319] attempt to access beyond end of device [ 1853.055379] loop4: rw=12288, want=8200, limit=20 [ 1853.102168] attempt to access beyond end of device [ 1853.106539] attempt to access beyond end of device [ 1853.107253] loop6: rw=12288, want=12296, limit=20 [ 1853.112217] loop4: rw=12288, want=12296, limit=20 00:58:19 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x14000}, 0x2c) 00:58:19 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x2}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1853.205655] attempt to access beyond end of device [ 1853.210973] loop6: rw=12288, want=8200, limit=20 00:58:19 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002fffffffb00000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1853.281250] attempt to access beyond end of device [ 1853.286354] loop6: rw=12288, want=12296, limit=20 00:58:19 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x40000000000000}, 0x2c) [ 1853.410533] attempt to access beyond end of device [ 1853.415673] loop6: rw=12288, want=8200, limit=20 [ 1853.471923] attempt to access beyond end of device [ 1853.477186] loop6: rw=12288, want=12296, limit=20 00:58:19 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020093000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1853.550352] attempt to access beyond end of device [ 1853.555570] loop6: rw=12288, want=8200, limit=20 00:58:19 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xc0030000000000}, 0x2c) [ 1853.631820] attempt to access beyond end of device [ 1853.636929] loop6: rw=12288, want=12296, limit=20 00:58:19 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:20 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000021400000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:20 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe8030000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:58:20 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002fffffff600000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:20 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:58:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x2000000}, 0x2c) 00:58:20 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:20 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002ffffffffffffffff300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:20 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020500000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x71000000}, 0x2c) 00:58:20 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x10}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:20 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200000000fffffdfd300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:20 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200000000000026a1300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x9001}, 0x2c) [ 1854.472719] attempt to access beyond end of device [ 1854.477927] loop6: rw=12288, want=8200, limit=20 00:58:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xa0}, 0x2c) [ 1854.519926] attempt to access beyond end of device [ 1854.525060] loop4: rw=12288, want=8200, limit=20 [ 1854.559778] attempt to access beyond end of device [ 1854.565234] loop6: rw=12288, want=12296, limit=20 [ 1854.596402] attempt to access beyond end of device [ 1854.601543] loop4: rw=12288, want=12296, limit=20 [ 1854.639724] attempt to access beyond end of device [ 1854.644881] loop6: rw=12288, want=8200, limit=20 [ 1854.679295] attempt to access beyond end of device [ 1854.684429] loop4: rw=12288, want=8200, limit=20 00:58:20 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1854.709663] attempt to access beyond end of device [ 1854.714802] loop6: rw=12288, want=12296, limit=20 00:58:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xc000}, 0x2c) [ 1854.756411] attempt to access beyond end of device [ 1854.761536] loop4: rw=12288, want=12296, limit=20 [ 1854.827383] attempt to access beyond end of device [ 1854.832536] loop6: rw=12288, want=8200, limit=20 [ 1854.869132] attempt to access beyond end of device [ 1854.874229] loop4: rw=12288, want=8200, limit=20 00:58:21 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0x7fffecc0}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:58:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x38000}, 0x2c) 00:58:21 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffdef}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1854.918286] attempt to access beyond end of device [ 1854.923558] loop6: rw=12288, want=12296, limit=20 [ 1854.951843] attempt to access beyond end of device [ 1854.957138] loop4: rw=12288, want=12296, limit=20 00:58:21 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1855.003251] attempt to access beyond end of device [ 1855.008338] loop6: rw=12288, want=8200, limit=20 [ 1855.043202] attempt to access beyond end of device [ 1855.048311] loop4: rw=12288, want=8200, limit=20 [ 1855.073202] attempt to access beyond end of device [ 1855.078299] loop6: rw=12288, want=12296, limit=20 [ 1855.113062] attempt to access beyond end of device [ 1855.118164] loop4: rw=12288, want=12296, limit=20 00:58:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xa000}, 0x2c) 00:58:21 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000008100000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:21 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002000001fe00000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:21 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x1000000000000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x800000000000000}, 0x2c) [ 1855.399667] attempt to access beyond end of device [ 1855.404780] loop4: rw=12288, want=8200, limit=20 00:58:21 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000201fe000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1855.470190] attempt to access beyond end of device [ 1855.475294] loop4: rw=12288, want=12296, limit=20 [ 1855.558082] attempt to access beyond end of device [ 1855.563249] loop4: rw=12288, want=8200, limit=20 00:58:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x20000000000000}, 0x2c) [ 1855.627041] attempt to access beyond end of device [ 1855.632145] loop4: rw=12288, want=12296, limit=20 00:58:22 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1855.775444] attempt to access beyond end of device [ 1855.780626] loop4: rw=12288, want=8200, limit=20 00:58:22 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200000000000008f6300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1855.872999] attempt to access beyond end of device [ 1855.878182] loop4: rw=12288, want=12296, limit=20 00:58:22 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x200300}, 0x2c) [ 1855.954903] attempt to access beyond end of device [ 1855.960034] loop4: rw=12288, want=8200, limit=20 00:58:22 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff7f0000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:58:22 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1855.999152] attempt to access beyond end of device [ 1856.004306] loop6: rw=12288, want=8200, limit=20 [ 1856.019065] attempt to access beyond end of device [ 1856.024181] loop4: rw=12288, want=12296, limit=20 [ 1856.104785] attempt to access beyond end of device [ 1856.109884] loop6: rw=12288, want=12296, limit=20 [ 1856.192685] attempt to access beyond end of device [ 1856.197852] loop6: rw=12288, want=8200, limit=20 [ 1856.245271] attempt to access beyond end of device [ 1856.250518] loop6: rw=12288, want=12296, limit=20 00:58:22 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0xf0ff7f00000000}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:58:22 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020006000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:22 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xea030000}, 0x2c) [ 1856.366087] attempt to access beyond end of device [ 1856.371264] loop6: rw=12288, want=8200, limit=20 00:58:22 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0xb3ff0000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1856.431766] attempt to access beyond end of device [ 1856.436929] loop6: rw=12288, want=12296, limit=20 [ 1856.510931] attempt to access beyond end of device [ 1856.516060] loop6: rw=12288, want=8200, limit=20 00:58:22 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x60020000000000}, 0x2c) 00:58:22 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000027fffffffffffffff300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1856.623833] attempt to access beyond end of device [ 1856.628944] loop6: rw=12288, want=12296, limit=20 00:58:23 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000400300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:23 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:23 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000001020300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:23 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x6802000000000000}, 0x2c) [ 1856.972012] f2fs_msg: 253 callbacks suppressed [ 1856.972030] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1856.983885] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1856.998749] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1857.005923] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1857.066757] attempt to access beyond end of device [ 1857.071910] loop4: rw=12288, want=8200, limit=20 00:58:23 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9000000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:58:23 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1857.110599] attempt to access beyond end of device [ 1857.115773] loop6: rw=12288, want=8200, limit=20 00:58:23 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xb103000000000000}, 0x2c) [ 1857.185596] attempt to access beyond end of device [ 1857.190682] loop4: rw=12288, want=12296, limit=20 [ 1857.231719] attempt to access beyond end of device [ 1857.235499] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 1857.236839] loop6: rw=12288, want=12296, limit=20 [ 1857.264800] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1857.271969] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1857.337320] attempt to access beyond end of device [ 1857.342501] loop4: rw=12288, want=8200, limit=20 [ 1857.354539] F2FS-fs (loop6): Failed to get valid F2FS checkpoint 00:58:23 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x24000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1857.393431] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1857.400685] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1857.424224] attempt to access beyond end of device [ 1857.429388] loop4: rw=12288, want=12296, limit=20 00:58:23 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0x900000000000000}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1857.487742] attempt to access beyond end of device [ 1857.492936] loop6: rw=12288, want=8200, limit=20 00:58:23 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x6802}, 0x2c) [ 1857.540852] attempt to access beyond end of device [ 1857.545943] loop4: rw=12288, want=8200, limit=20 [ 1857.573647] attempt to access beyond end of device [ 1857.578751] loop6: rw=12288, want=12296, limit=20 [ 1857.616077] attempt to access beyond end of device [ 1857.621223] loop4: rw=12288, want=12296, limit=20 [ 1857.673906] attempt to access beyond end of device [ 1857.679002] loop6: rw=12288, want=8200, limit=20 [ 1857.701025] attempt to access beyond end of device [ 1857.706136] loop4: rw=12288, want=8200, limit=20 00:58:24 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x2ba}, 0x2c) [ 1857.751177] attempt to access beyond end of device [ 1857.756243] loop6: rw=12288, want=12296, limit=20 [ 1857.778817] attempt to access beyond end of device [ 1857.784053] loop4: rw=12288, want=12296, limit=20 [ 1857.808063] attempt to access beyond end of device [ 1857.813164] loop6: rw=12288, want=8200, limit=20 00:58:24 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1857.869838] attempt to access beyond end of device [ 1857.874934] loop6: rw=12288, want=12296, limit=20 00:58:24 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000600000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:24 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x200000000000000}, 0x2c) 00:58:24 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002000000000000004c300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:24 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1858.098665] attempt to access beyond end of device [ 1858.103796] loop4: rw=12288, want=8200, limit=20 00:58:24 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe8030000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1858.167838] attempt to access beyond end of device [ 1858.172929] loop4: rw=12288, want=12296, limit=20 [ 1858.189363] attempt to access beyond end of device [ 1858.194532] loop6: rw=12288, want=8200, limit=20 00:58:24 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x80030000000000}, 0x2c) [ 1858.266487] attempt to access beyond end of device [ 1858.271596] loop4: rw=12288, want=8200, limit=20 [ 1858.286577] attempt to access beyond end of device [ 1858.291647] loop6: rw=12288, want=12296, limit=20 [ 1858.336092] attempt to access beyond end of device [ 1858.341411] loop4: rw=12288, want=12296, limit=20 [ 1858.353219] attempt to access beyond end of device [ 1858.358347] loop6: rw=12288, want=8200, limit=20 [ 1858.415872] attempt to access beyond end of device [ 1858.420982] loop6: rw=12288, want=12296, limit=20 [ 1858.465080] attempt to access beyond end of device [ 1858.470277] loop4: rw=12288, want=8200, limit=20 00:58:24 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x13000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1858.514914] attempt to access beyond end of device [ 1858.520023] loop6: rw=12288, want=8200, limit=20 [ 1858.542657] attempt to access beyond end of device [ 1858.547790] loop4: rw=12288, want=12296, limit=20 00:58:24 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0x8b030000}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:58:24 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x398}, 0x2c) [ 1858.597319] attempt to access beyond end of device [ 1858.602410] loop6: rw=12288, want=12296, limit=20 [ 1858.627501] attempt to access beyond end of device [ 1858.632574] loop4: rw=12288, want=8200, limit=20 [ 1858.682050] attempt to access beyond end of device [ 1858.687173] loop4: rw=12288, want=12296, limit=20 [ 1858.705301] attempt to access beyond end of device [ 1858.710372] loop6: rw=12288, want=8200, limit=20 [ 1858.765119] attempt to access beyond end of device [ 1858.770240] loop6: rw=12288, want=12296, limit=20 00:58:25 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xd802000000000000}, 0x2c) 00:58:25 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002000004a500000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:25 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:25 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002fe01000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:25 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200fe010000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:25 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x3f00000000000000}, 0x2c) 00:58:25 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:25 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200000000c0ed0000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:25 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002000c000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1859.336376] attempt to access beyond end of device [ 1859.341526] loop6: rw=12288, want=8200, limit=20 00:58:25 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b0020}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:58:25 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x8601}, 0x2c) [ 1859.409234] attempt to access beyond end of device [ 1859.414409] loop6: rw=12288, want=12296, limit=20 [ 1859.481325] attempt to access beyond end of device [ 1859.486501] loop6: rw=12288, want=8200, limit=20 00:58:25 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200f2f52010000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:25 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x26000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1859.591995] attempt to access beyond end of device [ 1859.597144] loop6: rw=12288, want=12296, limit=20 00:58:25 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0x2000}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:58:25 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x2c8}, 0x2c) [ 1859.748948] attempt to access beyond end of device [ 1859.754090] loop6: rw=12288, want=8200, limit=20 00:58:26 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200000000000000001f0000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1859.827592] attempt to access beyond end of device [ 1859.832683] loop6: rw=12288, want=12296, limit=20 00:58:26 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x81030000}, 0x2c) 00:58:26 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1859.908755] attempt to access beyond end of device [ 1859.913870] loop6: rw=12288, want=8200, limit=20 [ 1859.981392] attempt to access beyond end of device [ 1859.986503] loop6: rw=12288, want=12296, limit=20 00:58:26 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xe00200}, 0x2c) 00:58:26 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000360000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:26 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000010000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:26 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1860.284799] attempt to access beyond end of device [ 1860.289935] loop4: rw=12288, want=8200, limit=20 00:58:26 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xc00000}, 0x2c) [ 1860.327151] attempt to access beyond end of device [ 1860.332245] loop6: rw=12288, want=8200, limit=20 [ 1860.374069] attempt to access beyond end of device [ 1860.379270] loop4: rw=12288, want=12296, limit=20 [ 1860.411848] attempt to access beyond end of device [ 1860.416932] loop6: rw=12288, want=12296, limit=20 [ 1860.434014] attempt to access beyond end of device [ 1860.439089] loop4: rw=12288, want=8200, limit=20 00:58:26 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1860.504901] attempt to access beyond end of device [ 1860.509511] attempt to access beyond end of device [ 1860.509943] loop4: rw=12288, want=12296, limit=20 [ 1860.514951] loop6: rw=12288, want=8200, limit=20 00:58:26 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xd802}, 0x2c) [ 1860.649380] attempt to access beyond end of device [ 1860.654493] loop6: rw=12288, want=12296, limit=20 [ 1860.665381] attempt to access beyond end of device [ 1860.670425] loop4: rw=12288, want=8200, limit=20 00:58:26 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x4000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:27 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0x900}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1860.718957] attempt to access beyond end of device [ 1860.724034] loop4: rw=12288, want=12296, limit=20 00:58:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x1e000}, 0x2c) [ 1860.780867] attempt to access beyond end of device [ 1860.785920] loop6: rw=12288, want=8200, limit=20 [ 1860.797526] attempt to access beyond end of device [ 1860.802617] loop4: rw=12288, want=8200, limit=20 [ 1860.837070] attempt to access beyond end of device [ 1860.842167] loop6: rw=12288, want=12296, limit=20 [ 1860.852917] attempt to access beyond end of device [ 1860.858021] loop4: rw=12288, want=12296, limit=20 [ 1860.896888] attempt to access beyond end of device [ 1860.901975] loop6: rw=12288, want=8200, limit=20 00:58:27 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x1d6}, 0x2c) 00:58:27 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200000000000000000f0000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1860.966335] attempt to access beyond end of device [ 1860.971636] loop6: rw=12288, want=12296, limit=20 00:58:27 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000008100000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x2f4}, 0x2c) 00:58:27 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:27 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200f5ffffff000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1861.266799] attempt to access beyond end of device [ 1861.271945] loop6: rw=12288, want=8200, limit=20 00:58:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x1000000}, 0x2c) [ 1861.345162] attempt to access beyond end of device [ 1861.350284] loop6: rw=12288, want=12296, limit=20 [ 1861.440405] attempt to access beyond end of device [ 1861.445565] loop6: rw=12288, want=8200, limit=20 00:58:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x80030000}, 0x2c) 00:58:27 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000530000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1861.536024] attempt to access beyond end of device [ 1861.541399] loop6: rw=12288, want=12296, limit=20 00:58:27 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60000000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:58:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x800200}, 0x2c) [ 1861.676280] attempt to access beyond end of device [ 1861.681374] loop4: rw=12288, want=8200, limit=20 00:58:28 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020023000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:28 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0xffffffc0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1861.766091] attempt to access beyond end of device [ 1861.771245] loop4: rw=12288, want=12296, limit=20 00:58:28 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0x7fffb04c}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1861.832911] attempt to access beyond end of device [ 1861.838068] loop4: rw=12288, want=8200, limit=20 00:58:28 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x1100}, 0x2c) [ 1861.925655] attempt to access beyond end of device [ 1861.930821] loop4: rw=12288, want=12296, limit=20 00:58:28 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1861.976851] f2fs_msg: 221 callbacks suppressed [ 1861.976867] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 1861.982394] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1861.995268] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock 00:58:28 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x4}, 0x2c) [ 1862.101988] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1862.109198] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1862.118856] F2FS-fs (loop6): Wrong secs_per_zone / total_sections (2293762, 14) [ 1862.126585] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 1862.209067] attempt to access beyond end of device [ 1862.214277] loop4: rw=12288, want=8200, limit=20 [ 1862.238884] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1862.246101] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock 00:58:28 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1862.278430] attempt to access beyond end of device [ 1862.283587] loop4: rw=12288, want=12296, limit=20 00:58:28 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x26000}, 0x2c) [ 1862.332142] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 1862.372218] attempt to access beyond end of device [ 1862.377372] loop4: rw=12288, want=8200, limit=20 00:58:28 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020900000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:28 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xa00300}, 0x2c) [ 1862.440655] attempt to access beyond end of device [ 1862.445816] loop4: rw=12288, want=12296, limit=20 00:58:28 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200f6ffffff000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:28 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x400000}, 0x2c) 00:58:28 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000029300000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:28 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2600}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:58:29 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x4000000000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:29 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200000026a1000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:29 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0xf4010000}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:58:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xfd01}, 0x2c) 00:58:29 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000edc000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:29 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1863.029981] attempt to access beyond end of device [ 1863.035131] loop4: rw=12288, want=8200, limit=20 [ 1863.051152] attempt to access beyond end of device [ 1863.056248] loop4: rw=12288, want=12296, limit=20 [ 1863.129780] attempt to access beyond end of device [ 1863.134903] loop4: rw=12288, want=8200, limit=20 00:58:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x2201}, 0x2c) [ 1863.203325] attempt to access beyond end of device [ 1863.208519] loop4: rw=12288, want=12296, limit=20 00:58:29 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020068000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:29 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1863.301213] attempt to access beyond end of device [ 1863.306312] loop4: rw=12288, want=8200, limit=20 [ 1863.362540] attempt to access beyond end of device [ 1863.367634] loop4: rw=12288, want=12296, limit=20 00:58:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x20f}, 0x2c) [ 1863.448985] attempt to access beyond end of device [ 1863.454099] loop4: rw=12288, want=8200, limit=20 [ 1863.521335] attempt to access beyond end of device [ 1863.526583] loop4: rw=12288, want=12296, limit=20 00:58:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x300000000000000}, 0x2c) 00:58:29 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002006c000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:29 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200007a0000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:30 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7ffffffff000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:58:30 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000023300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:30 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0xb00000000000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:30 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000001000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:30 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x1700}, 0x2c) [ 1864.026555] attempt to access beyond end of device [ 1864.031704] loop6: rw=12288, want=8200, limit=20 00:58:30 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0x1000000}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:58:30 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1864.073604] attempt to access beyond end of device [ 1864.078709] loop4: rw=12288, want=8200, limit=20 00:58:30 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xb}, 0x2c) [ 1864.120396] attempt to access beyond end of device [ 1864.125567] loop6: rw=12288, want=12296, limit=20 [ 1864.154821] attempt to access beyond end of device [ 1864.159953] loop4: rw=12288, want=12296, limit=20 [ 1864.209309] attempt to access beyond end of device [ 1864.214456] loop6: rw=12288, want=8200, limit=20 [ 1864.233666] attempt to access beyond end of device [ 1864.238799] loop4: rw=12288, want=8200, limit=20 00:58:30 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x24000000000000}, 0x2c) [ 1864.286127] attempt to access beyond end of device [ 1864.291367] loop6: rw=12288, want=12296, limit=20 [ 1864.304232] attempt to access beyond end of device [ 1864.309289] loop4: rw=12288, want=12296, limit=20 00:58:30 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1864.402407] attempt to access beyond end of device [ 1864.407636] loop6: rw=12288, want=8200, limit=20 [ 1864.414828] attempt to access beyond end of device [ 1864.419942] loop4: rw=12288, want=8200, limit=20 [ 1864.468551] attempt to access beyond end of device [ 1864.473760] loop4: rw=12288, want=12296, limit=20 [ 1864.493958] attempt to access beyond end of device [ 1864.499089] loop6: rw=12288, want=12296, limit=20 00:58:30 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000093000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:30 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xfe030000}, 0x2c) [ 1864.581594] attempt to access beyond end of device [ 1864.586702] loop6: rw=12288, want=8200, limit=20 [ 1864.674395] attempt to access beyond end of device [ 1864.679628] loop6: rw=12288, want=12296, limit=20 [ 1864.726981] attempt to access beyond end of device [ 1864.732202] loop4: rw=12288, want=8200, limit=20 00:58:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xe203}, 0x2c) [ 1864.820728] attempt to access beyond end of device [ 1864.825862] loop4: rw=12288, want=12296, limit=20 00:58:31 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000009300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:31 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffff00000000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1864.889150] attempt to access beyond end of device [ 1864.894236] loop4: rw=12288, want=8200, limit=20 00:58:31 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0xe803}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xd8}, 0x2c) [ 1864.979755] attempt to access beyond end of device [ 1864.984869] loop4: rw=12288, want=12296, limit=20 [ 1864.991049] attempt to access beyond end of device [ 1864.996198] loop6: rw=12288, want=8200, limit=20 [ 1865.045184] attempt to access beyond end of device [ 1865.050295] loop6: rw=12288, want=12296, limit=20 00:58:31 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:31 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0x700}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1865.117329] attempt to access beyond end of device [ 1865.122521] loop6: rw=12288, want=8200, limit=20 [ 1865.140696] attempt to access beyond end of device [ 1865.145821] loop4: rw=12288, want=8200, limit=20 00:58:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xc0010000000000}, 0x2c) [ 1865.199318] attempt to access beyond end of device [ 1865.204421] loop4: rw=12288, want=12296, limit=20 [ 1865.225600] attempt to access beyond end of device [ 1865.230691] loop6: rw=12288, want=12296, limit=20 [ 1865.264184] attempt to access beyond end of device [ 1865.269249] loop4: rw=12288, want=8200, limit=20 [ 1865.331687] attempt to access beyond end of device [ 1865.336815] loop4: rw=12288, want=12296, limit=20 00:58:31 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000100000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x1a03000000000000}, 0x2c) 00:58:31 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000170000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:31 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:31 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020006000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:32 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000330000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:32 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xe00000000000000}, 0x2c) [ 1865.963824] attempt to access beyond end of device [ 1865.969000] loop4: rw=12288, want=8200, limit=20 00:58:32 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000000000000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:58:32 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x2900000000000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1866.059792] attempt to access beyond end of device [ 1866.064957] loop4: rw=12288, want=12296, limit=20 00:58:32 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000021020000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:32 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x3201000000000000}, 0x2c) [ 1866.162190] attempt to access beyond end of device [ 1866.167397] loop4: rw=12288, want=8200, limit=20 00:58:32 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1866.216727] attempt to access beyond end of device [ 1866.221815] loop4: rw=12288, want=12296, limit=20 [ 1866.293764] attempt to access beyond end of device [ 1866.298872] loop4: rw=12288, want=8200, limit=20 [ 1866.332420] attempt to access beyond end of device [ 1866.337588] loop4: rw=12288, want=12296, limit=20 [ 1866.383326] attempt to access beyond end of device [ 1866.388578] loop4: rw=12288, want=8200, limit=20 [ 1866.431650] attempt to access beyond end of device [ 1866.436750] loop4: rw=12288, want=12296, limit=20 00:58:32 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020040000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:32 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000260000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:32 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0xe803}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:58:32 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:32 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xb103}, 0x2c) 00:58:33 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020300000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x1400}, 0x2c) 00:58:33 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020014000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x190}, 0x2c) [ 1866.992309] f2fs_msg: 282 callbacks suppressed [ 1866.992324] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1867.004108] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 00:58:33 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:58:33 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200000000ffffff97300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:33 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0xf401000000000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1867.127615] F2FS-fs (loop4): Wrong secs_per_zone / total_sections (1310722, 14) [ 1867.135212] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 00:58:33 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1867.215862] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1867.223020] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1867.243081] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1867.250358] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock 00:58:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x240000}, 0x2c) [ 1867.306279] F2FS-fs (loop4): Wrong secs_per_zone / total_sections (1310722, 14) [ 1867.313890] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1867.382777] attempt to access beyond end of device [ 1867.387926] loop6: rw=12288, want=8200, limit=20 00:58:33 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000280000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:33 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x26000000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1867.449326] attempt to access beyond end of device [ 1867.454429] loop6: rw=12288, want=12296, limit=20 00:58:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x13000000}, 0x2c) [ 1867.544560] attempt to access beyond end of device [ 1867.549622] loop6: rw=12288, want=8200, limit=20 00:58:33 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1867.598024] attempt to access beyond end of device [ 1867.603088] loop6: rw=12288, want=12296, limit=20 00:58:33 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0x20005b00}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:58:33 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020060000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:34 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x86010000}, 0x2c) [ 1867.719431] attempt to access beyond end of device [ 1867.724680] loop6: rw=12288, want=8200, limit=20 [ 1867.808732] attempt to access beyond end of device [ 1867.813902] loop6: rw=12288, want=12296, limit=20 [ 1867.881573] attempt to access beyond end of device [ 1867.886696] loop6: rw=12288, want=8200, limit=20 00:58:34 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xf00}, 0x2c) [ 1867.964593] attempt to access beyond end of device [ 1867.969755] loop6: rw=12288, want=12296, limit=20 00:58:34 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000740000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:34 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000700000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:34 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x18000}, 0x2c) 00:58:34 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020026750000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1868.242136] attempt to access beyond end of device [ 1868.247362] loop6: rw=12288, want=8200, limit=20 00:58:34 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x3000000000000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:34 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1868.342094] attempt to access beyond end of device [ 1868.347261] loop6: rw=12288, want=12296, limit=20 00:58:34 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x12}, 0x2c) [ 1868.437589] attempt to access beyond end of device [ 1868.442826] loop6: rw=12288, want=8200, limit=20 00:58:34 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020026a10000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1868.508028] attempt to access beyond end of device [ 1868.513160] loop6: rw=12288, want=12296, limit=20 00:58:34 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:58:34 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xe0020000000000}, 0x2c) [ 1868.639415] attempt to access beyond end of device [ 1868.644623] loop6: rw=12288, want=8200, limit=20 00:58:34 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1868.730572] attempt to access beyond end of device [ 1868.735707] loop6: rw=12288, want=12296, limit=20 00:58:35 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0x60000000}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:58:35 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200004c0000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:35 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000006800000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:35 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xb600000000000000}, 0x2c) 00:58:35 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200000000000000002d0000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1869.074380] attempt to access beyond end of device [ 1869.079526] loop6: rw=12288, want=8200, limit=20 [ 1869.144659] attempt to access beyond end of device [ 1869.149848] loop6: rw=12288, want=12296, limit=20 [ 1869.227301] attempt to access beyond end of device [ 1869.232505] loop6: rw=12288, want=8200, limit=20 [ 1869.265971] attempt to access beyond end of device [ 1869.271058] loop4: rw=12288, want=8200, limit=20 00:58:35 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:35 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xd8020000}, 0x2c) [ 1869.320636] attempt to access beyond end of device [ 1869.325781] loop4: rw=12288, want=12296, limit=20 [ 1869.326695] attempt to access beyond end of device [ 1869.335819] loop6: rw=12288, want=12296, limit=20 00:58:35 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x3800000000000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1869.401983] attempt to access beyond end of device [ 1869.407102] loop4: rw=12288, want=8200, limit=20 [ 1869.484045] attempt to access beyond end of device [ 1869.489147] loop4: rw=12288, want=12296, limit=20 [ 1869.517379] attempt to access beyond end of device [ 1869.522557] loop6: rw=12288, want=8200, limit=20 00:58:35 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x200200}, 0x2c) [ 1869.589656] attempt to access beyond end of device [ 1869.594805] loop4: rw=12288, want=8200, limit=20 [ 1869.606973] attempt to access beyond end of device [ 1869.612045] loop6: rw=12288, want=12296, limit=20 00:58:35 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1869.700107] attempt to access beyond end of device [ 1869.705205] loop4: rw=12288, want=12296, limit=20 [ 1869.714624] attempt to access beyond end of device [ 1869.719666] loop6: rw=12288, want=8200, limit=20 00:58:36 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xe00}, 0x2c) 00:58:36 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1869.784018] attempt to access beyond end of device [ 1869.789127] loop4: rw=12288, want=8200, limit=20 [ 1869.807274] attempt to access beyond end of device [ 1869.812342] loop6: rw=12288, want=12296, limit=20 [ 1869.858083] attempt to access beyond end of device [ 1869.863226] loop4: rw=12288, want=12296, limit=20 00:58:36 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0x8b03000000000000}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:58:36 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000027fffffff00000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:36 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x1800}, 0x2c) 00:58:36 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000020000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:36 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002004c000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:36 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xb6}, 0x2c) 00:58:36 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200ab040000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:36 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020d00000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:36 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x3}, 0x2c) 00:58:36 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:36 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x4000000000000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:36 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000020000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:36 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x6000}, 0x2c) 00:58:37 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x26}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:58:37 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000003300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1870.713974] attempt to access beyond end of device [ 1870.719207] loop4: rw=12288, want=8200, limit=20 [ 1870.818201] attempt to access beyond end of device [ 1870.823324] loop4: rw=12288, want=12296, limit=20 00:58:37 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1870.867952] attempt to access beyond end of device [ 1870.873059] loop6: rw=12288, want=8200, limit=20 [ 1870.901347] attempt to access beyond end of device [ 1870.906424] loop4: rw=12288, want=8200, limit=20 00:58:37 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0xda3f}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:58:37 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xe0}, 0x2c) [ 1870.960628] attempt to access beyond end of device [ 1870.965723] loop6: rw=12288, want=12296, limit=20 [ 1870.974444] attempt to access beyond end of device [ 1870.979616] loop4: rw=12288, want=12296, limit=20 [ 1871.029185] attempt to access beyond end of device [ 1871.034310] loop6: rw=12288, want=8200, limit=20 [ 1871.066081] attempt to access beyond end of device [ 1871.071194] loop4: rw=12288, want=8200, limit=20 00:58:37 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x22000}, 0x2c) [ 1871.099613] attempt to access beyond end of device [ 1871.104713] loop6: rw=12288, want=12296, limit=20 [ 1871.130362] attempt to access beyond end of device [ 1871.135437] loop4: rw=12288, want=12296, limit=20 [ 1871.199196] attempt to access beyond end of device [ 1871.204328] loop4: rw=12288, want=8200, limit=20 [ 1871.215193] attempt to access beyond end of device [ 1871.220353] loop6: rw=12288, want=8200, limit=20 00:58:37 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x4000000000000000}, 0x2c) [ 1871.267976] attempt to access beyond end of device [ 1871.273088] loop4: rw=12288, want=12296, limit=20 [ 1871.298986] attempt to access beyond end of device [ 1871.304101] loop6: rw=12288, want=12296, limit=20 00:58:37 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200ac040000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1871.371185] attempt to access beyond end of device [ 1871.376292] loop6: rw=12288, want=8200, limit=20 00:58:37 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1871.462844] attempt to access beyond end of device [ 1871.467979] loop6: rw=12288, want=12296, limit=20 00:58:37 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0xa00000000000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:37 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000100300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:37 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x40030000000000}, 0x2c) 00:58:37 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200a1260000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:38 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38b}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1871.790977] attempt to access beyond end of device [ 1871.796088] loop6: rw=12288, want=8200, limit=20 [ 1871.837653] attempt to access beyond end of device [ 1871.842874] loop6: rw=12288, want=12296, limit=20 00:58:38 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1871.928571] attempt to access beyond end of device [ 1871.933716] loop6: rw=12288, want=8200, limit=20 00:58:38 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002004c000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:38 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0x8b03}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:58:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xfa03}, 0x2c) [ 1872.042885] attempt to access beyond end of device [ 1872.048142] loop6: rw=12288, want=12296, limit=20 [ 1872.103048] f2fs_msg: 282 callbacks suppressed [ 1872.103065] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1872.114921] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1872.127839] F2FS-fs (loop6): Failed to get valid F2FS checkpoint 00:58:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x186}, 0x2c) [ 1872.204050] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1872.211302] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1872.221046] F2FS-fs (loop4): Wrong secs_per_zone / total_sections (4980738, 14) [ 1872.228734] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1872.305186] attempt to access beyond end of device [ 1872.310253] loop6: rw=12288, want=8200, limit=20 [ 1872.361007] attempt to access beyond end of device [ 1872.366117] loop6: rw=12288, want=12296, limit=20 [ 1872.380991] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1872.388259] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1872.408702] F2FS-fs (loop6): Failed to get valid F2FS checkpoint [ 1872.449623] attempt to access beyond end of device [ 1872.454675] loop6: rw=12288, want=8200, limit=20 00:58:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x2400}, 0x2c) [ 1872.498562] attempt to access beyond end of device [ 1872.503648] loop6: rw=12288, want=12296, limit=20 00:58:38 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:38 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000900000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:38 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0xffffffff00000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:38 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002007a000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x20000}, 0x2c) [ 1872.789872] attempt to access beyond end of device [ 1872.794985] loop6: rw=12288, want=8200, limit=20 [ 1872.877566] attempt to access beyond end of device [ 1872.882781] loop6: rw=12288, want=12296, limit=20 00:58:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x3b1}, 0x2c) 00:58:39 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0xda3f000000000000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:58:39 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1872.988434] attempt to access beyond end of device [ 1872.993525] loop6: rw=12288, want=8200, limit=20 00:58:39 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000310000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:39 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0xe}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1873.058907] attempt to access beyond end of device [ 1873.063981] loop6: rw=12288, want=12296, limit=20 [ 1873.156100] attempt to access beyond end of device [ 1873.161171] loop6: rw=12288, want=8200, limit=20 [ 1873.203424] attempt to access beyond end of device [ 1873.208629] loop4: rw=12288, want=8200, limit=20 [ 1873.233628] attempt to access beyond end of device [ 1873.238663] loop6: rw=12288, want=12296, limit=20 00:58:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xc802000000000000}, 0x2c) [ 1873.256881] attempt to access beyond end of device [ 1873.262009] loop4: rw=12288, want=12296, limit=20 [ 1873.292004] attempt to access beyond end of device [ 1873.297116] loop6: rw=12288, want=8200, limit=20 [ 1873.336379] attempt to access beyond end of device [ 1873.341527] loop6: rw=12288, want=12296, limit=20 [ 1873.348006] attempt to access beyond end of device [ 1873.353139] loop4: rw=12288, want=8200, limit=20 [ 1873.402352] attempt to access beyond end of device [ 1873.407549] loop4: rw=12288, want=12296, limit=20 00:58:39 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000226a1000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x8000000}, 0x2c) [ 1873.510973] attempt to access beyond end of device [ 1873.516150] loop4: rw=12288, want=8200, limit=20 [ 1873.587314] attempt to access beyond end of device [ 1873.592550] loop4: rw=12288, want=12296, limit=20 [ 1873.621521] attempt to access beyond end of device [ 1873.626780] loop4: rw=12288, want=8200, limit=20 00:58:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x1a03}, 0x2c) 00:58:39 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002a804000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1873.670126] attempt to access beyond end of device [ 1873.675243] loop4: rw=12288, want=12296, limit=20 00:58:39 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x1f00}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:40 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:40 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020002000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:40 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x3e000}, 0x2c) 00:58:40 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200000000ffffffff300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:40 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:40 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf401000000000000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:58:40 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0xe000000}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1874.173004] attempt to access beyond end of device [ 1874.178241] loop6: rw=12288, want=8200, limit=20 00:58:40 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x7100000000000000}, 0x2c) [ 1874.238787] attempt to access beyond end of device [ 1874.243922] loop6: rw=12288, want=12296, limit=20 00:58:40 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200a9040000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1874.320193] attempt to access beyond end of device [ 1874.325282] loop6: rw=12288, want=8200, limit=20 [ 1874.419050] attempt to access beyond end of device [ 1874.424235] loop6: rw=12288, want=12296, limit=20 00:58:40 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020093000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:40 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xe203000000000000}, 0x2c) 00:58:40 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000002000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:41 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x2300}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1874.788372] attempt to access beyond end of device [ 1874.793510] loop6: rw=12288, want=8200, limit=20 [ 1874.860164] attempt to access beyond end of device [ 1874.865218] loop6: rw=12288, want=12296, limit=20 00:58:41 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020010000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xc8020000}, 0x2c) [ 1874.934803] attempt to access beyond end of device [ 1874.939935] loop6: rw=12288, want=8200, limit=20 [ 1875.010306] attempt to access beyond end of device [ 1875.015352] loop6: rw=12288, want=12296, limit=20 00:58:41 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1875.123417] attempt to access beyond end of device [ 1875.128563] loop6: rw=12288, want=8200, limit=20 00:58:41 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0xda3f0000}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:58:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xc00}, 0x2c) 00:58:41 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000000000000000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:58:41 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002000000006c000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:41 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1875.216956] attempt to access beyond end of device [ 1875.221994] loop6: rw=12288, want=12296, limit=20 [ 1875.290996] attempt to access beyond end of device [ 1875.296184] loop4: rw=12288, want=8200, limit=20 [ 1875.304517] attempt to access beyond end of device [ 1875.309614] loop6: rw=12288, want=8200, limit=20 00:58:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x4000}, 0x2c) [ 1875.357271] attempt to access beyond end of device [ 1875.362385] loop4: rw=12288, want=12296, limit=20 [ 1875.372331] attempt to access beyond end of device [ 1875.377493] loop6: rw=12288, want=12296, limit=20 [ 1875.441753] attempt to access beyond end of device [ 1875.446836] loop4: rw=12288, want=8200, limit=20 00:58:41 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002000000000000003f300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1875.513634] attempt to access beyond end of device [ 1875.518712] loop4: rw=12288, want=12296, limit=20 00:58:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x342}, 0x2c) 00:58:41 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1875.616605] attempt to access beyond end of device [ 1875.621680] loop4: rw=12288, want=8200, limit=20 [ 1875.650913] attempt to access beyond end of device [ 1875.655976] loop4: rw=12288, want=12296, limit=20 [ 1875.690192] attempt to access beyond end of device [ 1875.695242] loop6: rw=12288, want=8200, limit=20 [ 1875.715083] attempt to access beyond end of device [ 1875.720196] loop4: rw=12288, want=8200, limit=20 [ 1875.751078] attempt to access beyond end of device [ 1875.756172] loop6: rw=12288, want=12296, limit=20 00:58:42 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x1c000}, 0x2c) [ 1875.806971] attempt to access beyond end of device [ 1875.812085] loop4: rw=12288, want=12296, limit=20 [ 1875.833587] attempt to access beyond end of device [ 1875.838643] loop6: rw=12288, want=8200, limit=20 [ 1875.883641] attempt to access beyond end of device [ 1875.888735] loop6: rw=12288, want=12296, limit=20 00:58:42 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000068000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:42 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0xe000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:42 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xa0030000000000}, 0x2c) [ 1876.030932] attempt to access beyond end of device [ 1876.036048] loop6: rw=12288, want=8200, limit=20 [ 1876.095791] attempt to access beyond end of device [ 1876.100904] loop4: rw=12288, want=8200, limit=20 [ 1876.127351] attempt to access beyond end of device [ 1876.132400] loop6: rw=12288, want=12296, limit=20 00:58:42 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1876.158388] attempt to access beyond end of device [ 1876.163495] loop4: rw=12288, want=12296, limit=20 00:58:42 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0x4000000}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:58:42 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1876.260882] attempt to access beyond end of device [ 1876.265993] loop4: rw=12288, want=8200, limit=20 00:58:42 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002007a000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:42 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x40000000000}, 0x2c) [ 1876.335320] attempt to access beyond end of device [ 1876.340399] loop4: rw=12288, want=12296, limit=20 [ 1876.464868] attempt to access beyond end of device [ 1876.470066] loop4: rw=12288, want=8200, limit=20 00:58:42 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000026800000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1876.510913] attempt to access beyond end of device [ 1876.516046] loop4: rw=12288, want=12296, limit=20 00:58:42 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x98030000}, 0x2c) [ 1876.603020] attempt to access beyond end of device [ 1876.608112] loop4: rw=12288, want=8200, limit=20 00:58:42 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffff}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1876.678532] attempt to access beyond end of device [ 1876.683645] loop4: rw=12288, want=12296, limit=20 00:58:43 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020200000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:43 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x22010000}, 0x2c) 00:58:43 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000230000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:43 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xd2}, 0x2c) 00:58:43 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000002300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:43 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0xea010000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:43 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020009000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:43 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xcd03}, 0x2c) [ 1877.154648] f2fs_msg: 266 callbacks suppressed [ 1877.154662] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1877.166577] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock 00:58:43 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1877.220568] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1877.227774] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 00:58:43 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0xf401}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:58:43 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1877.326717] attempt to access beyond end of device [ 1877.331865] loop6: rw=12288, want=8200, limit=20 [ 1877.354553] F2FS-fs (loop4): Wrong secs_per_zone / total_sections (589826, 14) [ 1877.362083] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 00:58:43 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xe000}, 0x2c) [ 1877.426283] attempt to access beyond end of device [ 1877.431423] loop6: rw=12288, want=12296, limit=20 [ 1877.476299] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1877.483507] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1877.505971] F2FS-fs (loop6): Failed to get valid F2FS checkpoint [ 1877.547774] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) 00:58:43 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x11}, 0x2c) [ 1877.613771] attempt to access beyond end of device [ 1877.618912] loop6: rw=12288, want=8200, limit=20 00:58:43 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002006b260000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:43 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1877.683093] attempt to access beyond end of device [ 1877.688704] loop6: rw=12288, want=12296, limit=20 00:58:44 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x1000000000000000}, 0x2c) [ 1877.831100] attempt to access beyond end of device [ 1877.836234] loop6: rw=12288, want=8200, limit=20 00:58:44 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002000000000a000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1877.914837] attempt to access beyond end of device [ 1877.919938] loop6: rw=12288, want=12296, limit=20 00:58:44 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200000000ffffff8c300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:44 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x40000000}, 0x2c) 00:58:44 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x60}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1878.097447] attempt to access beyond end of device [ 1878.102610] loop4: rw=12288, want=8200, limit=20 [ 1878.198200] attempt to access beyond end of device [ 1878.203292] loop4: rw=12288, want=12296, limit=20 [ 1878.234600] attempt to access beyond end of device [ 1878.239675] loop6: rw=12288, want=8200, limit=20 00:58:44 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1878.286724] attempt to access beyond end of device [ 1878.291864] loop4: rw=12288, want=8200, limit=20 [ 1878.321229] attempt to access beyond end of device [ 1878.326330] loop6: rw=12288, want=12296, limit=20 00:58:44 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xd8000000}, 0x2c) 00:58:44 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1878.353598] attempt to access beyond end of device [ 1878.358692] loop4: rw=12288, want=12296, limit=20 00:58:44 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0x2}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1878.404255] attempt to access beyond end of device [ 1878.409379] loop6: rw=12288, want=8200, limit=20 [ 1878.467413] attempt to access beyond end of device [ 1878.472513] loop4: rw=12288, want=8200, limit=20 [ 1878.499243] attempt to access beyond end of device [ 1878.504379] loop6: rw=12288, want=12296, limit=20 00:58:44 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xa00000}, 0x2c) [ 1878.529255] attempt to access beyond end of device [ 1878.534302] loop4: rw=12288, want=12296, limit=20 [ 1878.605128] attempt to access beyond end of device [ 1878.610171] loop4: rw=12288, want=8200, limit=20 [ 1878.639992] attempt to access beyond end of device [ 1878.645068] loop6: rw=12288, want=8200, limit=20 [ 1878.684120] attempt to access beyond end of device [ 1878.689861] loop4: rw=12288, want=12296, limit=20 [ 1878.693886] attempt to access beyond end of device [ 1878.699825] loop6: rw=12288, want=12296, limit=20 00:58:44 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x9400000000000000}, 0x2c) 00:58:45 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1878.778096] attempt to access beyond end of device [ 1878.783265] loop6: rw=12288, want=8200, limit=20 00:58:45 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000030000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1878.875071] attempt to access beyond end of device [ 1878.880190] loop6: rw=12288, want=12296, limit=20 00:58:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xf02000000000000}, 0x2c) 00:58:45 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200000000fffffffd300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:45 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200000000000000004e0000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1879.155930] attempt to access beyond end of device [ 1879.161033] loop6: rw=12288, want=8200, limit=20 00:58:45 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x6000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1879.271589] attempt to access beyond end of device [ 1879.276779] loop6: rw=12288, want=12296, limit=20 [ 1879.288665] attempt to access beyond end of device [ 1879.293774] loop4: rw=12288, want=8200, limit=20 00:58:45 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1879.330664] attempt to access beyond end of device [ 1879.335808] loop4: rw=12288, want=12296, limit=20 00:58:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x1800000000000000}, 0x2c) 00:58:45 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0x7}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1879.404090] attempt to access beyond end of device [ 1879.406693] attempt to access beyond end of device [ 1879.409220] loop4: rw=12288, want=8200, limit=20 [ 1879.414159] loop6: rw=12288, want=8200, limit=20 00:58:45 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1879.475962] attempt to access beyond end of device [ 1879.481097] loop6: rw=12288, want=12296, limit=20 [ 1879.536626] attempt to access beyond end of device [ 1879.541699] loop4: rw=12288, want=12296, limit=20 [ 1879.589844] attempt to access beyond end of device [ 1879.594913] loop6: rw=12288, want=8200, limit=20 [ 1879.639170] attempt to access beyond end of device [ 1879.643411] attempt to access beyond end of device [ 1879.644237] loop6: rw=12288, want=12296, limit=20 [ 1879.654158] loop4: rw=12288, want=8200, limit=20 [ 1879.659411] attempt to access beyond end of device [ 1879.664489] loop6: rw=12288, want=8200, limit=20 00:58:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x12000}, 0x2c) [ 1879.722509] attempt to access beyond end of device [ 1879.723855] attempt to access beyond end of device [ 1879.727577] loop6: rw=12288, want=12296, limit=20 [ 1879.737494] loop4: rw=12288, want=12296, limit=20 00:58:46 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000008300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1879.864315] attempt to access beyond end of device [ 1879.869449] loop4: rw=12288, want=8200, limit=20 00:58:46 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x1a000}, 0x2c) 00:58:46 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1879.947413] attempt to access beyond end of device [ 1879.952577] loop4: rw=12288, want=12296, limit=20 [ 1879.965766] attempt to access beyond end of device [ 1879.970816] loop6: rw=12288, want=8200, limit=20 [ 1880.020916] attempt to access beyond end of device [ 1880.026000] loop6: rw=12288, want=12296, limit=20 [ 1880.086092] attempt to access beyond end of device [ 1880.091241] loop6: rw=12288, want=8200, limit=20 00:58:46 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000240000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:46 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x3ea}, 0x2c) [ 1880.168267] attempt to access beyond end of device [ 1880.173411] loop6: rw=12288, want=12296, limit=20 00:58:46 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x13}, 0x2c) 00:58:46 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000100000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:46 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200000000000000002a0000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:46 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x11}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:46 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:46 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0x200000000000000}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:58:46 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1880.527250] attempt to access beyond end of device [ 1880.532298] loop6: rw=12288, want=8200, limit=20 00:58:46 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xf00000000000000}, 0x2c) [ 1880.599611] attempt to access beyond end of device [ 1880.604681] loop6: rw=12288, want=12296, limit=20 [ 1880.659274] attempt to access beyond end of device [ 1880.664344] loop6: rw=12288, want=8200, limit=20 00:58:46 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002007f260000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1880.715566] attempt to access beyond end of device [ 1880.720651] loop6: rw=12288, want=12296, limit=20 [ 1880.804026] attempt to access beyond end of device [ 1880.809110] loop6: rw=12288, want=8200, limit=20 [ 1880.881041] attempt to access beyond end of device [ 1880.886181] loop6: rw=12288, want=12296, limit=20 00:58:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xc00200}, 0x2c) 00:58:47 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200fffffff6000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:47 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffff000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1881.014231] attempt to access beyond end of device [ 1881.019375] loop6: rw=12288, want=8200, limit=20 [ 1881.108120] attempt to access beyond end of device [ 1881.113276] loop6: rw=12288, want=12296, limit=20 00:58:47 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000100000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xb000000}, 0x2c) 00:58:47 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020400000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xe000000}, 0x2c) 00:58:47 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x20000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:47 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000210000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:47 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:47 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0x20000000}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:58:47 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002fdffffff00000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:47 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x3c000}, 0x2c) 00:58:47 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002008cffffff000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:48 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x8000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x6}, 0x2c) 00:58:48 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002000000007fffffff300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1882.093880] attempt to access beyond end of device [ 1882.098996] loop6: rw=12288, want=8200, limit=20 00:58:48 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:58:48 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020070260000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x132}, 0x2c) [ 1882.155768] attempt to access beyond end of device [ 1882.160893] loop6: rw=12288, want=12296, limit=20 [ 1882.206359] f2fs_msg: 261 callbacks suppressed [ 1882.206375] F2FS-fs (loop6): Failed to get valid F2FS checkpoint [ 1882.275785] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1882.282978] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1882.314781] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) 00:58:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xa0020000000000}, 0x2c) [ 1882.321962] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1882.371875] F2FS-fs (loop4): Wrong secs_per_zone / total_sections (644874242, 14) [ 1882.379702] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1882.454026] attempt to access beyond end of device [ 1882.456834] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1882.459180] loop6: rw=12288, want=8200, limit=20 [ 1882.466249] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 00:58:48 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1882.564823] attempt to access beyond end of device [ 1882.569957] loop6: rw=12288, want=12296, limit=20 00:58:48 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xfe03000000000000}, 0x2c) [ 1882.615721] F2FS-fs (loop4): Wrong secs_per_zone / total_sections (644874242, 14) 00:58:48 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0x60}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1882.711895] attempt to access beyond end of device [ 1882.717003] loop6: rw=12288, want=8200, limit=20 00:58:49 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200000004a6000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1882.789207] attempt to access beyond end of device [ 1882.794327] loop6: rw=12288, want=12296, limit=20 00:58:49 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0xc00}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1882.873273] attempt to access beyond end of device [ 1882.878563] loop6: rw=12288, want=8200, limit=20 00:58:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xd2000000}, 0x2c) [ 1882.962971] attempt to access beyond end of device [ 1882.968113] loop4: rw=12288, want=8200, limit=20 [ 1882.973784] attempt to access beyond end of device [ 1882.978925] loop6: rw=12288, want=12296, limit=20 [ 1883.043597] attempt to access beyond end of device [ 1883.048670] loop4: rw=12288, want=12296, limit=20 00:58:49 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020026a10000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1883.115363] attempt to access beyond end of device [ 1883.120516] loop4: rw=12288, want=8200, limit=20 00:58:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xd000000}, 0x2c) [ 1883.191566] attempt to access beyond end of device [ 1883.196686] loop4: rw=12288, want=12296, limit=20 00:58:49 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffb04c}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1883.310348] attempt to access beyond end of device [ 1883.315513] loop4: rw=12288, want=8200, limit=20 00:58:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x600300}, 0x2c) 00:58:49 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000030000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1883.380129] attempt to access beyond end of device [ 1883.385259] loop4: rw=12288, want=12296, limit=20 [ 1883.460409] attempt to access beyond end of device [ 1883.465636] loop4: rw=12288, want=8200, limit=20 00:58:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x4203}, 0x2c) [ 1883.529379] attempt to access beyond end of device [ 1883.534543] loop4: rw=12288, want=12296, limit=20 00:58:49 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:49 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000250000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:49 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:49 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200000000000000002e0000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:49 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0x2600000000000000}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:58:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x3e2}, 0x2c) 00:58:50 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200fffffdfd000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1883.886539] attempt to access beyond end of device [ 1883.891715] loop4: rw=12288, want=8200, limit=20 00:58:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x94000000}, 0x2c) 00:58:50 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0xd00000000000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1883.971288] attempt to access beyond end of device [ 1883.976410] loop4: rw=12288, want=12296, limit=20 [ 1884.059779] attempt to access beyond end of device [ 1884.064932] loop4: rw=12288, want=8200, limit=20 00:58:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x14000000}, 0x2c) [ 1884.147700] attempt to access beyond end of device [ 1884.152844] loop4: rw=12288, want=12296, limit=20 00:58:50 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200fffffffb000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:50 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb0ff7f00000000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1884.285413] attempt to access beyond end of device [ 1884.290627] loop4: rw=12288, want=8200, limit=20 00:58:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xba020000}, 0x2c) [ 1884.374537] attempt to access beyond end of device [ 1884.379664] loop4: rw=12288, want=12296, limit=20 00:58:50 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000074000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1884.446116] attempt to access beyond end of device [ 1884.451278] loop4: rw=12288, want=8200, limit=20 00:58:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x94}, 0x2c) 00:58:50 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1884.537265] attempt to access beyond end of device [ 1884.542408] loop4: rw=12288, want=12296, limit=20 [ 1884.576057] attempt to access beyond end of device [ 1884.581236] loop6: rw=12288, want=8200, limit=20 00:58:50 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000220000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1884.669566] attempt to access beyond end of device [ 1884.674700] loop6: rw=12288, want=12296, limit=20 00:58:50 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:51 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x381}, 0x2c) [ 1884.745607] attempt to access beyond end of device [ 1884.750779] loop6: rw=12288, want=8200, limit=20 00:58:51 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0xffffff7f}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1884.825688] attempt to access beyond end of device [ 1884.830791] loop6: rw=12288, want=12296, limit=20 [ 1884.937954] attempt to access beyond end of device [ 1884.943132] loop6: rw=12288, want=8200, limit=20 00:58:51 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200a5040000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:51 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x16000}, 0x2c) 00:58:51 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x2500000000000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1885.025053] attempt to access beyond end of device [ 1885.030226] loop6: rw=12288, want=12296, limit=20 [ 1885.081839] attempt to access beyond end of device [ 1885.086954] loop6: rw=12288, want=8200, limit=20 [ 1885.171354] attempt to access beyond end of device [ 1885.176485] loop6: rw=12288, want=12296, limit=20 00:58:51 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x268}, 0x2c) 00:58:51 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200000004a8000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:51 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000023000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1885.349602] attempt to access beyond end of device [ 1885.354714] loop4: rw=12288, want=8200, limit=20 [ 1885.397926] attempt to access beyond end of device [ 1885.403113] loop4: rw=12288, want=12296, limit=20 [ 1885.421505] attempt to access beyond end of device [ 1885.426670] loop6: rw=12288, want=8200, limit=20 00:58:51 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xda3f0000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:58:51 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xc00100}, 0x2c) [ 1885.449650] attempt to access beyond end of device [ 1885.454786] loop4: rw=12288, want=8200, limit=20 [ 1885.465844] attempt to access beyond end of device [ 1885.470972] loop6: rw=12288, want=12296, limit=20 [ 1885.544182] attempt to access beyond end of device [ 1885.549522] loop4: rw=12288, want=12296, limit=20 [ 1885.568849] attempt to access beyond end of device [ 1885.573979] loop6: rw=12288, want=8200, limit=20 00:58:51 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1885.596659] attempt to access beyond end of device [ 1885.601962] loop6: rw=12288, want=12296, limit=20 [ 1885.636683] attempt to access beyond end of device [ 1885.641860] loop4: rw=12288, want=8200, limit=20 00:58:51 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x12000000}, 0x2c) [ 1885.700677] attempt to access beyond end of device [ 1885.705849] loop4: rw=12288, want=12296, limit=20 00:58:52 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1885.749369] attempt to access beyond end of device [ 1885.754487] loop6: rw=12288, want=8200, limit=20 [ 1885.786345] attempt to access beyond end of device [ 1885.791497] loop4: rw=12288, want=8200, limit=20 [ 1885.821906] attempt to access beyond end of device [ 1885.827052] loop6: rw=12288, want=12296, limit=20 00:58:52 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0xe8030000}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:58:52 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x3f00}, 0x2c) [ 1885.867851] attempt to access beyond end of device [ 1885.873033] loop4: rw=12288, want=12296, limit=20 [ 1885.899759] attempt to access beyond end of device [ 1885.904867] loop6: rw=12288, want=8200, limit=20 [ 1885.969193] attempt to access beyond end of device [ 1885.974367] loop6: rw=12288, want=12296, limit=20 00:58:52 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x27}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:52 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000400000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:52 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x6000000}, 0x2c) 00:58:52 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200000008f6000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:52 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xe00000}, 0x2c) [ 1886.323846] attempt to access beyond end of device [ 1886.328918] loop6: rw=12288, want=8200, limit=20 00:58:52 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000014000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1886.396248] attempt to access beyond end of device [ 1886.401328] loop6: rw=12288, want=12296, limit=20 [ 1886.463766] attempt to access beyond end of device [ 1886.468857] loop6: rw=12288, want=8200, limit=20 00:58:52 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x38b}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1886.527384] attempt to access beyond end of device [ 1886.532677] loop6: rw=12288, want=12296, limit=20 [ 1886.535504] attempt to access beyond end of device [ 1886.542608] loop4: rw=12288, want=8200, limit=20 00:58:52 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x7100}, 0x2c) [ 1886.615683] attempt to access beyond end of device [ 1886.620827] loop4: rw=12288, want=12296, limit=20 00:58:52 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1886.688690] attempt to access beyond end of device [ 1886.692409] attempt to access beyond end of device [ 1886.693868] loop6: rw=12288, want=8200, limit=20 [ 1886.698853] loop4: rw=12288, want=8200, limit=20 [ 1886.743123] attempt to access beyond end of device [ 1886.748219] loop4: rw=12288, want=12296, limit=20 00:58:53 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1886.843879] attempt to access beyond end of device [ 1886.848977] loop4: rw=12288, want=8200, limit=20 00:58:53 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xc}, 0x2c) [ 1886.898266] attempt to access beyond end of device [ 1886.903383] loop6: rw=12288, want=12296, limit=20 [ 1886.910380] attempt to access beyond end of device [ 1886.915503] loop4: rw=12288, want=12296, limit=20 00:58:53 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0xe00}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1886.995186] attempt to access beyond end of device [ 1887.000321] loop4: rw=12288, want=8200, limit=20 [ 1887.007077] attempt to access beyond end of device [ 1887.012137] loop6: rw=12288, want=8200, limit=20 00:58:53 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x14}, 0x2c) [ 1887.065001] attempt to access beyond end of device [ 1887.070166] loop4: rw=12288, want=12296, limit=20 [ 1887.076088] attempt to access beyond end of device [ 1887.081200] loop6: rw=12288, want=12296, limit=20 00:58:53 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x8}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:53 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000005000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:53 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000810000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:53 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x60010000000000}, 0x2c) [ 1887.352364] f2fs_msg: 228 callbacks suppressed [ 1887.352419] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1887.358852] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1887.364243] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1887.378839] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1887.415165] F2FS-fs (loop4): Wrong secs_per_zone / total_sections (2164260866, 14) [ 1887.423187] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1887.497597] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1887.504888] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 00:58:53 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xba02000000000000}, 0x2c) [ 1887.552578] attempt to access beyond end of device [ 1887.558161] loop6: rw=12288, want=8200, limit=20 [ 1887.581614] F2FS-fs (loop4): Wrong secs_per_zone / total_sections (2164260866, 14) [ 1887.589597] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 00:58:53 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdef}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1887.646759] attempt to access beyond end of device [ 1887.651865] loop6: rw=12288, want=12296, limit=20 00:58:54 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1887.765697] attempt to access beyond end of device [ 1887.770890] loop6: rw=12288, want=8200, limit=20 00:58:54 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000290000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:54 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x30000000000}, 0x2c) [ 1887.825116] attempt to access beyond end of device [ 1887.830243] loop6: rw=12288, want=12296, limit=20 00:58:54 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1887.939321] attempt to access beyond end of device [ 1887.944530] loop6: rw=12288, want=8200, limit=20 00:58:54 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0x1f4}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:58:54 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000110000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1888.013106] attempt to access beyond end of device [ 1888.018254] loop6: rw=12288, want=12296, limit=20 00:58:54 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xc802}, 0x2c) [ 1888.103712] attempt to access beyond end of device [ 1888.108877] loop6: rw=12288, want=8200, limit=20 00:58:54 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x23}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1888.181501] attempt to access beyond end of device [ 1888.186595] loop6: rw=12288, want=12296, limit=20 00:58:54 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000600000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:54 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000250000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:54 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x122}, 0x2c) 00:58:54 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200000000000000001d0000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:54 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x1400000000000000}, 0x2c) 00:58:54 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000290000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:54 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:58:55 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002006c000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:55 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:55 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200a1260000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x1200000000000000}, 0x2c) 00:58:55 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:55 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0x26}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:58:55 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200000004a9000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xcd030000}, 0x2c) 00:58:55 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x1f00000000000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:55 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000081000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1889.232312] attempt to access beyond end of device [ 1889.237449] loop4: rw=12288, want=8200, limit=20 [ 1889.271534] attempt to access beyond end of device [ 1889.276664] loop4: rw=12288, want=12296, limit=20 [ 1889.337541] attempt to access beyond end of device [ 1889.342660] loop4: rw=12288, want=8200, limit=20 [ 1889.376373] attempt to access beyond end of device [ 1889.381558] loop6: rw=12288, want=8200, limit=20 00:58:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xfa030000}, 0x2c) [ 1889.414257] attempt to access beyond end of device [ 1889.419364] loop4: rw=12288, want=12296, limit=20 [ 1889.453479] attempt to access beyond end of device [ 1889.458600] loop6: rw=12288, want=12296, limit=20 [ 1889.509304] attempt to access beyond end of device [ 1889.514446] loop4: rw=12288, want=8200, limit=20 [ 1889.546647] attempt to access beyond end of device [ 1889.551804] loop6: rw=12288, want=8200, limit=20 [ 1889.575501] attempt to access beyond end of device [ 1889.580676] loop4: rw=12288, want=12296, limit=20 00:58:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xb00}, 0x2c) [ 1889.619579] attempt to access beyond end of device [ 1889.624762] loop6: rw=12288, want=12296, limit=20 [ 1889.650922] attempt to access beyond end of device [ 1889.656076] loop4: rw=12288, want=8200, limit=20 [ 1889.718622] attempt to access beyond end of device [ 1889.724164] loop4: rw=12288, want=12296, limit=20 [ 1889.740033] attempt to access beyond end of device [ 1889.745115] loop6: rw=12288, want=8200, limit=20 00:58:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x3cd}, 0x2c) [ 1889.777130] attempt to access beyond end of device [ 1889.782251] loop6: rw=12288, want=12296, limit=20 00:58:56 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:58:56 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000180000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1889.851094] attempt to access beyond end of device [ 1889.856231] loop6: rw=12288, want=8200, limit=20 00:58:56 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1889.902338] attempt to access beyond end of device [ 1889.907524] loop6: rw=12288, want=12296, limit=20 00:58:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x1300000000000000}, 0x2c) 00:58:56 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:56 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002000000000c000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:56 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020075260000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:56 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0x4cb0ff7f00000000}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1890.204395] attempt to access beyond end of device [ 1890.209532] loop6: rw=12288, want=8200, limit=20 00:58:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x800100}, 0x2c) [ 1890.274939] attempt to access beyond end of device [ 1890.280034] loop6: rw=12288, want=12296, limit=20 00:58:56 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x60000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:56 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002000000edc0000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1890.359648] attempt to access beyond end of device [ 1890.364739] loop6: rw=12288, want=8200, limit=20 [ 1890.457826] attempt to access beyond end of device [ 1890.462915] loop6: rw=12288, want=12296, limit=20 00:58:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x9400}, 0x2c) [ 1890.551409] attempt to access beyond end of device [ 1890.556563] loop4: rw=12288, want=8200, limit=20 [ 1890.575335] attempt to access beyond end of device [ 1890.580430] loop6: rw=12288, want=8200, limit=20 [ 1890.619978] attempt to access beyond end of device [ 1890.625105] loop6: rw=12288, want=12296, limit=20 [ 1890.646143] attempt to access beyond end of device [ 1890.651256] loop4: rw=12288, want=12296, limit=20 00:58:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x6800}, 0x2c) [ 1890.676864] attempt to access beyond end of device [ 1890.682299] loop6: rw=12288, want=8200, limit=20 [ 1890.710843] attempt to access beyond end of device [ 1890.715951] loop4: rw=12288, want=8200, limit=20 [ 1890.769067] attempt to access beyond end of device [ 1890.774303] loop6: rw=12288, want=12296, limit=20 [ 1890.793180] attempt to access beyond end of device [ 1890.798308] loop4: rw=12288, want=12296, limit=20 00:58:57 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffff000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1890.885085] attempt to access beyond end of device [ 1890.890219] loop4: rw=12288, want=8200, limit=20 [ 1890.915191] attempt to access beyond end of device [ 1890.920332] loop4: rw=12288, want=12296, limit=20 00:58:57 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200fffffff5000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1890.955003] attempt to access beyond end of device [ 1890.960176] loop4: rw=12288, want=8200, limit=20 00:58:57 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x500000000000000}, 0x2c) [ 1891.031633] attempt to access beyond end of device [ 1891.036703] loop4: rw=12288, want=12296, limit=20 00:58:57 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:57 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020007000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:57 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0xeffdffff00000000}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:58:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002000fff0000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:57 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xe0000000000000}, 0x2c) 00:58:57 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0xd00}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:58:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200000000000000002f0000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:57 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200000000000000002f0000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1891.641045] attempt to access beyond end of device [ 1891.646158] loop6: rw=12288, want=8200, limit=20 00:58:57 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x18}, 0x2c) [ 1891.683919] attempt to access beyond end of device [ 1891.689571] loop4: rw=12288, want=8200, limit=20 [ 1891.719581] attempt to access beyond end of device [ 1891.725253] loop6: rw=12288, want=12296, limit=20 [ 1891.767548] attempt to access beyond end of device [ 1891.772633] loop4: rw=12288, want=12296, limit=20 [ 1891.776280] attempt to access beyond end of device [ 1891.782648] loop6: rw=12288, want=8200, limit=20 [ 1891.836912] attempt to access beyond end of device [ 1891.842157] loop4: rw=12288, want=8200, limit=20 [ 1891.857760] attempt to access beyond end of device [ 1891.862987] loop6: rw=12288, want=12296, limit=20 00:58:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x31a}, 0x2c) [ 1891.903674] attempt to access beyond end of device [ 1891.908728] loop4: rw=12288, want=12296, limit=20 00:58:58 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20005b00}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:58:58 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1892.006136] attempt to access beyond end of device [ 1892.011227] loop4: rw=12288, want=8200, limit=20 [ 1892.030548] attempt to access beyond end of device [ 1892.035562] loop6: rw=12288, want=8200, limit=20 [ 1892.082629] attempt to access beyond end of device [ 1892.087784] loop4: rw=12288, want=12296, limit=20 [ 1892.100584] attempt to access beyond end of device [ 1892.105665] loop6: rw=12288, want=12296, limit=20 00:58:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xd}, 0x2c) 00:58:58 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1892.130195] attempt to access beyond end of device [ 1892.135287] loop4: rw=12288, want=8200, limit=20 [ 1892.171126] attempt to access beyond end of device [ 1892.176198] loop6: rw=12288, want=8200, limit=20 [ 1892.225331] attempt to access beyond end of device [ 1892.230392] loop4: rw=12288, want=12296, limit=20 [ 1892.255554] attempt to access beyond end of device [ 1892.260617] loop6: rw=12288, want=12296, limit=20 00:58:58 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002001020f5f2000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:58 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002007a000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:58 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0x6000000000000000}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:58:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x2201000000000000}, 0x2c) 00:58:58 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x25}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1892.504046] f2fs_msg: 274 callbacks suppressed [ 1892.504060] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1892.515905] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1892.532422] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1892.539603] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1892.605577] F2FS-fs (loop6): Wrong secs_per_zone / total_sections (7995394, 14) [ 1892.613171] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 1892.643615] F2FS-fs (loop4): Wrong secs_per_zone / total_sections (537919490, 14) [ 1892.651715] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1892.692817] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1892.699954] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock 00:58:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xfa03000000000000}, 0x2c) 00:58:59 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000002000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:59 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002009c260000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:59 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1893.054033] attempt to access beyond end of device [ 1893.059116] loop6: rw=12288, want=8200, limit=20 00:58:59 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1893.126584] attempt to access beyond end of device [ 1893.131701] loop6: rw=12288, want=12296, limit=20 00:58:59 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000081000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:58:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xce02000000000000}, 0x2c) [ 1893.207390] attempt to access beyond end of device [ 1893.212597] loop6: rw=12288, want=8200, limit=20 00:58:59 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1893.312553] attempt to access beyond end of device [ 1893.317648] loop6: rw=12288, want=12296, limit=20 [ 1893.369783] attempt to access beyond end of device [ 1893.374859] loop4: rw=12288, want=8200, limit=20 00:58:59 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0x26000000}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1893.464243] attempt to access beyond end of device [ 1893.469306] loop4: rw=12288, want=12296, limit=20 [ 1893.476863] attempt to access beyond end of device [ 1893.481890] loop6: rw=12288, want=8200, limit=20 00:58:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x800000}, 0x2c) [ 1893.538102] attempt to access beyond end of device [ 1893.543215] loop6: rw=12288, want=12296, limit=20 [ 1893.548437] attempt to access beyond end of device [ 1893.553533] loop4: rw=12288, want=8200, limit=20 [ 1893.588787] attempt to access beyond end of device [ 1893.593834] loop6: rw=12288, want=8200, limit=20 [ 1893.598768] attempt to access beyond end of device [ 1893.603797] loop4: rw=12288, want=12296, limit=20 00:58:59 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0xe}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1893.646655] attempt to access beyond end of device [ 1893.651717] loop6: rw=12288, want=12296, limit=20 [ 1893.695865] attempt to access beyond end of device [ 1893.700996] loop4: rw=12288, want=8200, limit=20 00:59:00 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200ffffff8c000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:00 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x4203000000000000}, 0x2c) [ 1893.809641] attempt to access beyond end of device [ 1893.814820] loop4: rw=12288, want=12296, limit=20 [ 1893.911924] attempt to access beyond end of device [ 1893.917099] loop4: rw=12288, want=8200, limit=20 00:59:00 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000060000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:00 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf4010000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1894.006072] attempt to access beyond end of device [ 1894.011228] loop4: rw=12288, want=12296, limit=20 00:59:00 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200000000000000000c0000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:00 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:00 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x60030000000000}, 0x2c) [ 1894.184793] attempt to access beyond end of device [ 1894.189919] loop6: rw=12288, want=8200, limit=20 00:59:00 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1894.287872] attempt to access beyond end of device [ 1894.292982] loop6: rw=12288, want=12296, limit=20 00:59:00 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000080000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1894.385270] attempt to access beyond end of device [ 1894.390366] loop6: rw=12288, want=8200, limit=20 00:59:00 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x20020000000000}, 0x2c) 00:59:00 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0x7000000}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1894.492978] attempt to access beyond end of device [ 1894.498205] loop6: rw=12288, want=12296, limit=20 00:59:00 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:59:00 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000130000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1894.664839] attempt to access beyond end of device [ 1894.669959] loop6: rw=12288, want=8200, limit=20 00:59:01 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x2a00000000000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1894.723603] attempt to access beyond end of device [ 1894.728824] loop6: rw=12288, want=12296, limit=20 00:59:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xe0000000}, 0x2c) [ 1894.829489] attempt to access beyond end of device [ 1894.834577] loop6: rw=12288, want=8200, limit=20 00:59:01 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000350000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1894.890920] attempt to access beyond end of device [ 1894.896048] loop6: rw=12288, want=12296, limit=20 00:59:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x900}, 0x2c) 00:59:01 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000090000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1895.053822] attempt to access beyond end of device [ 1895.058967] loop4: rw=12288, want=8200, limit=20 [ 1895.116925] attempt to access beyond end of device [ 1895.122019] loop4: rw=12288, want=12296, limit=20 00:59:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x1200}, 0x2c) [ 1895.185135] attempt to access beyond end of device [ 1895.190243] loop4: rw=12288, want=8200, limit=20 00:59:01 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1895.264210] attempt to access beyond end of device [ 1895.269291] loop4: rw=12288, want=12296, limit=20 00:59:01 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000170000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:01 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xa}, 0x2c) [ 1895.393996] attempt to access beyond end of device [ 1895.399078] loop4: rw=12288, want=8200, limit=20 [ 1895.452635] attempt to access beyond end of device [ 1895.457705] loop4: rw=12288, want=12296, limit=20 [ 1895.522396] attempt to access beyond end of device [ 1895.527578] loop4: rw=12288, want=8200, limit=20 00:59:01 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0x3e8}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1895.568008] attempt to access beyond end of device [ 1895.573116] loop4: rw=12288, want=12296, limit=20 00:59:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x2ce}, 0x2c) 00:59:01 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000040000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:01 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:59:01 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000010000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x32000}, 0x2c) 00:59:02 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200000000000000002e0000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:02 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x11000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1895.890217] attempt to access beyond end of device [ 1895.895397] loop4: rw=12288, want=8200, limit=20 00:59:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x2a000}, 0x2c) [ 1895.956105] attempt to access beyond end of device [ 1895.961317] loop4: rw=12288, want=12296, limit=20 [ 1895.990330] attempt to access beyond end of device [ 1895.995376] loop6: rw=12288, want=8200, limit=20 [ 1896.037215] attempt to access beyond end of device [ 1896.042366] loop4: rw=12288, want=8200, limit=20 [ 1896.062734] attempt to access beyond end of device [ 1896.067786] loop6: rw=12288, want=12296, limit=20 [ 1896.099490] attempt to access beyond end of device [ 1896.104635] loop4: rw=12288, want=12296, limit=20 [ 1896.127954] attempt to access beyond end of device [ 1896.133043] loop6: rw=12288, want=8200, limit=20 00:59:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x100000000000000}, 0x2c) [ 1896.207743] attempt to access beyond end of device [ 1896.212950] loop6: rw=12288, want=12296, limit=20 [ 1896.222024] attempt to access beyond end of device [ 1896.227091] loop4: rw=12288, want=8200, limit=20 00:59:02 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1896.297144] attempt to access beyond end of device [ 1896.302326] loop4: rw=12288, want=12296, limit=20 00:59:02 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020048000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:02 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1896.378327] attempt to access beyond end of device [ 1896.383392] loop4: rw=12288, want=8200, limit=20 00:59:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x20000000000}, 0x2c) [ 1896.452361] attempt to access beyond end of device [ 1896.457497] loop4: rw=12288, want=12296, limit=20 00:59:02 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0x4000000000000}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:59:02 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000600000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:02 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200b3260000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x700000000000000}, 0x2c) 00:59:03 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:59:03 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000140000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:03 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x2700000000000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:03 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200a9040000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x1fd}, 0x2c) 00:59:03 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200266d0000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x3fe}, 0x2c) 00:59:03 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200000d0000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:03 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:03 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020026700000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:03 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x20030000000000}, 0x2c) [ 1897.581606] f2fs_msg: 320 callbacks suppressed [ 1897.581620] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1897.593496] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 00:59:03 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0xe00000000000000}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:59:03 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000260000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1897.708742] F2FS-fs (loop4): Wrong secs_per_zone / total_sections (1881538562, 14) [ 1897.716655] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 00:59:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xd601000000000000}, 0x2c) [ 1897.797823] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1897.805101] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1897.833502] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1897.840681] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock 00:59:04 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xda3f}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1897.926575] F2FS-fs (loop4): Wrong secs_per_zone / total_sections (1881538562, 14) [ 1897.934563] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 00:59:04 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0xc0ffffff00000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:04 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200000000000000001b0000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x400000000000000}, 0x2c) 00:59:04 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000230000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:04 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000070000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:04 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x28000}, 0x2c) 00:59:04 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200000000000000003f0000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:04 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:04 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200000000000000000d0000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x264}, 0x2c) [ 1898.689410] attempt to access beyond end of device [ 1898.694546] loop4: rw=12288, want=8200, limit=20 00:59:05 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0xf0ffffff7f0000}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1898.758371] attempt to access beyond end of device [ 1898.763511] loop4: rw=12288, want=12296, limit=20 00:59:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xa00200}, 0x2c) 00:59:05 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000400000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1898.853735] attempt to access beyond end of device [ 1898.858848] loop4: rw=12288, want=8200, limit=20 [ 1898.935187] attempt to access beyond end of device [ 1898.940259] loop4: rw=12288, want=12296, limit=20 00:59:05 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8b030000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:59:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xce020000}, 0x2c) [ 1899.036029] attempt to access beyond end of device [ 1899.041160] loop6: rw=12288, want=8200, limit=20 00:59:05 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x2b00000000000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:05 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000050000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1899.138881] attempt to access beyond end of device [ 1899.144034] loop6: rw=12288, want=12296, limit=20 [ 1899.207972] attempt to access beyond end of device [ 1899.213175] loop6: rw=12288, want=8200, limit=20 [ 1899.298960] attempt to access beyond end of device [ 1899.304091] loop6: rw=12288, want=12296, limit=20 00:59:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xc001}, 0x2c) 00:59:05 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002000fff0000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:05 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1899.412017] attempt to access beyond end of device [ 1899.417105] loop6: rw=12288, want=8200, limit=20 [ 1899.466981] attempt to access beyond end of device [ 1899.472103] loop6: rw=12288, want=12296, limit=20 [ 1899.531935] attempt to access beyond end of device [ 1899.537071] loop6: rw=12288, want=8200, limit=20 00:59:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x180}, 0x2c) 00:59:05 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:05 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000001020000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1899.607329] attempt to access beyond end of device [ 1899.612449] loop6: rw=12288, want=12296, limit=20 00:59:06 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200f6ffffff000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x4000000000000}, 0x2c) 00:59:06 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0x100000000000000}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1899.852156] attempt to access beyond end of device [ 1899.857255] loop4: rw=12288, want=8200, limit=20 [ 1899.924008] attempt to access beyond end of device [ 1899.929167] loop4: rw=12288, want=12296, limit=20 00:59:06 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xeffdffff}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1899.997893] attempt to access beyond end of device [ 1900.002983] loop4: rw=12288, want=8200, limit=20 00:59:06 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020004000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1900.077831] attempt to access beyond end of device [ 1900.082962] loop4: rw=12288, want=12296, limit=20 00:59:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x80020000000000}, 0x2c) [ 1900.170087] attempt to access beyond end of device [ 1900.175343] loop4: rw=12288, want=8200, limit=20 00:59:06 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x500000000000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:06 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200a8040000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1900.280643] attempt to access beyond end of device [ 1900.285827] loop4: rw=12288, want=12296, limit=20 00:59:06 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:06 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020001fe0000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x9000000}, 0x2c) 00:59:06 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020010200000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:06 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x5000000}, 0x2c) 00:59:07 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200000c0000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:07 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000810000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:07 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0x7ffff000}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:59:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xd601}, 0x2c) 00:59:07 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000360000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:07 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200003f0000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:07 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:59:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x36000}, 0x2c) [ 1901.225602] attempt to access beyond end of device [ 1901.230759] loop6: rw=12288, want=8200, limit=20 00:59:07 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x400300}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:07 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002006e260000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1901.300765] attempt to access beyond end of device [ 1901.305944] loop6: rw=12288, want=12296, limit=20 [ 1901.398174] attempt to access beyond end of device [ 1901.403316] loop6: rw=12288, want=8200, limit=20 [ 1901.468910] attempt to access beyond end of device [ 1901.474069] loop6: rw=12288, want=12296, limit=20 00:59:07 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x4000000}, 0x2c) 00:59:07 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200f4ffffff000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1901.599660] attempt to access beyond end of device [ 1901.604871] loop6: rw=12288, want=8200, limit=20 [ 1901.670060] attempt to access beyond end of device [ 1901.675129] loop6: rw=12288, want=12296, limit=20 00:59:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xe0030000000000}, 0x2c) 00:59:08 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1901.725362] attempt to access beyond end of device [ 1901.730501] loop6: rw=12288, want=8200, limit=20 00:59:08 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200a8040000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1901.878091] attempt to access beyond end of device [ 1901.883155] loop6: rw=12288, want=12296, limit=20 00:59:08 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0x7ffffffff000}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:59:08 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000080000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x18000000}, 0x2c) 00:59:08 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200ffffff8c000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:08 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:59:08 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200000000000000003f0000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x68}, 0x2c) 00:59:08 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200fffffffb000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1902.358397] attempt to access beyond end of device [ 1902.363575] loop6: rw=12288, want=8200, limit=20 00:59:08 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0xb000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x2e000}, 0x2c) [ 1902.437284] attempt to access beyond end of device [ 1902.442389] loop6: rw=12288, want=12296, limit=20 [ 1902.535596] attempt to access beyond end of device [ 1902.540805] loop6: rw=12288, want=8200, limit=20 00:59:08 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:08 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000480000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1902.609424] attempt to access beyond end of device [ 1902.614524] loop6: rw=12288, want=12296, limit=20 [ 1902.678833] f2fs_msg: 380 callbacks suppressed [ 1902.678848] F2FS-fs (loop6): Failed to get valid F2FS checkpoint [ 1902.688186] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1902.696955] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 00:59:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x40020000000000}, 0x2c) 00:59:09 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1902.797530] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1902.804768] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1902.827629] F2FS-fs (loop4): Wrong secs_per_zone / total_sections (1207959554, 14) [ 1902.835634] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1902.914855] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1902.922085] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1902.953454] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1903.005583] attempt to access beyond end of device [ 1903.010738] loop6: rw=12288, want=8200, limit=20 00:59:09 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000930000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:09 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0xc0ecff7f00000000}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:59:09 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x10000000}, 0x2c) [ 1903.072995] attempt to access beyond end of device [ 1903.078167] loop6: rw=12288, want=12296, limit=20 00:59:09 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000fff000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:09 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe803}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:59:09 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020004a50000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:09 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x11000000}, 0x2c) [ 1903.400266] attempt to access beyond end of device [ 1903.405384] loop6: rw=12288, want=8200, limit=20 00:59:09 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xc0}, 0x2c) 00:59:09 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x3800}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1903.473321] attempt to access beyond end of device [ 1903.478421] loop6: rw=12288, want=12296, limit=20 00:59:09 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200000000000000001a0000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1903.554841] attempt to access beyond end of device [ 1903.560123] loop6: rw=12288, want=8200, limit=20 [ 1903.638933] attempt to access beyond end of device [ 1903.644218] loop6: rw=12288, want=12296, limit=20 00:59:09 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x10}, 0x2c) 00:59:09 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:10 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020003000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:10 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000009000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:10 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:10 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xd200000000000000}, 0x2c) [ 1904.037300] attempt to access beyond end of device [ 1904.042366] loop6: rw=12288, want=8200, limit=20 00:59:10 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000005000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1904.103741] attempt to access beyond end of device [ 1904.108930] loop6: rw=12288, want=12296, limit=20 00:59:10 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0xda3f000000000000}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:59:10 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x8001000000000000}, 0x2c) [ 1904.210625] attempt to access beyond end of device [ 1904.215746] loop6: rw=12288, want=8200, limit=20 00:59:10 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff7f0000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1904.302968] attempt to access beyond end of device [ 1904.308113] loop6: rw=12288, want=12296, limit=20 [ 1904.310432] attempt to access beyond end of device [ 1904.318042] loop4: rw=12288, want=8200, limit=20 [ 1904.391304] attempt to access beyond end of device [ 1904.396421] loop6: rw=12288, want=8200, limit=20 [ 1904.408660] attempt to access beyond end of device [ 1904.413730] loop4: rw=12288, want=12296, limit=20 00:59:10 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xe0010000000000}, 0x2c) [ 1904.471913] attempt to access beyond end of device [ 1904.477109] loop6: rw=12288, want=12296, limit=20 [ 1904.496585] attempt to access beyond end of device [ 1904.501628] loop4: rw=12288, want=8200, limit=20 00:59:10 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x1ea}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1904.546106] attempt to access beyond end of device [ 1904.551279] loop6: rw=12288, want=8200, limit=20 [ 1904.565420] attempt to access beyond end of device [ 1904.570535] loop4: rw=12288, want=12296, limit=20 00:59:10 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000002675000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1904.676616] attempt to access beyond end of device [ 1904.681704] loop6: rw=12288, want=12296, limit=20 00:59:10 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x5c000000}, 0x2c) 00:59:11 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200c0ed0000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1904.843326] attempt to access beyond end of device [ 1904.848512] loop4: rw=12288, want=8200, limit=20 [ 1904.937693] attempt to access beyond end of device [ 1904.942971] loop4: rw=12288, want=12296, limit=20 00:59:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x8103}, 0x2c) 00:59:11 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1905.000284] attempt to access beyond end of device [ 1905.005436] loop4: rw=12288, want=8200, limit=20 [ 1905.083704] attempt to access beyond end of device [ 1905.088942] loop4: rw=12288, want=12296, limit=20 00:59:11 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000014000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0xf402}, 0x2c) [ 1905.192319] attempt to access beyond end of device [ 1905.197487] loop4: rw=12288, want=8200, limit=20 00:59:11 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0x5b0020}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1905.271245] attempt to access beyond end of device [ 1905.276378] loop4: rw=12288, want=12296, limit=20 [ 1905.291571] attempt to access beyond end of device [ 1905.296655] loop6: rw=12288, want=8200, limit=20 00:59:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x3fa}, 0x2c) [ 1905.356500] attempt to access beyond end of device [ 1905.358356] attempt to access beyond end of device [ 1905.361586] loop6: rw=12288, want=12296, limit=20 [ 1905.371502] loop4: rw=12288, want=8200, limit=20 [ 1905.391095] attempt to access beyond end of device [ 1905.396216] loop6: rw=12288, want=8200, limit=20 00:59:11 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf401000000000000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1905.483818] attempt to access beyond end of device [ 1905.488926] loop6: rw=12288, want=12296, limit=20 [ 1905.489830] attempt to access beyond end of device [ 1905.498851] loop4: rw=12288, want=12296, limit=20 00:59:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x8601000000000000}, 0x2c) [ 1905.589765] attempt to access beyond end of device [ 1905.594914] loop6: rw=12288, want=8200, limit=20 00:59:11 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200c0ed0000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:11 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x5}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1905.698884] attempt to access beyond end of device [ 1905.704076] loop6: rw=12288, want=12296, limit=20 00:59:12 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000480000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:12 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:12 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000074000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x3000000000000}, 0x2c) 00:59:12 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1906.024850] attempt to access beyond end of device [ 1906.029965] loop4: rw=12288, want=8200, limit=20 00:59:12 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000190000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1906.117809] attempt to access beyond end of device [ 1906.122929] loop4: rw=12288, want=12296, limit=20 [ 1906.204861] attempt to access beyond end of device [ 1906.210058] loop4: rw=12288, want=8200, limit=20 00:59:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x400100}, 0x2c) [ 1906.251691] attempt to access beyond end of device [ 1906.256822] loop4: rw=12288, want=12296, limit=20 00:59:12 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020003000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1906.329945] attempt to access beyond end of device [ 1906.335091] loop4: rw=12288, want=8200, limit=20 00:59:12 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0x9000000}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1906.378303] attempt to access beyond end of device [ 1906.383380] loop4: rw=12288, want=12296, limit=20 00:59:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0xe000}, 0x2c) [ 1906.454428] attempt to access beyond end of device [ 1906.459544] loop4: rw=12288, want=8200, limit=20 00:59:12 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:59:12 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000400000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1906.539979] attempt to access beyond end of device [ 1906.545087] loop4: rw=12288, want=12296, limit=20 00:59:12 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002000000269c000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:13 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x2a}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x2000}, 0x2c) 00:59:13 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000004000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1906.852589] attempt to access beyond end of device [ 1906.857697] loop4: rw=12288, want=8200, limit=20 00:59:13 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1906.925827] attempt to access beyond end of device [ 1906.930961] loop4: rw=12288, want=12296, limit=20 [ 1906.940913] attempt to access beyond end of device [ 1906.946048] loop6: rw=12288, want=8200, limit=20 [ 1907.020133] attempt to access beyond end of device [ 1907.025226] loop6: rw=12288, want=12296, limit=20 [ 1907.033896] attempt to access beyond end of device [ 1907.038948] loop4: rw=12288, want=8200, limit=20 00:59:13 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5b002000000000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:59:13 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x40030000000000}, 0x2c) [ 1907.099588] attempt to access beyond end of device [ 1907.104723] loop6: rw=12288, want=8200, limit=20 [ 1907.115256] attempt to access beyond end of device [ 1907.120329] loop4: rw=12288, want=12296, limit=20 [ 1907.172312] attempt to access beyond end of device [ 1907.177502] loop6: rw=12288, want=12296, limit=20 [ 1907.226132] attempt to access beyond end of device [ 1907.231273] loop4: rw=12288, want=8200, limit=20 [ 1907.282712] attempt to access beyond end of device [ 1907.287869] loop4: rw=12288, want=12296, limit=20 [ 1907.306239] attempt to access beyond end of device [ 1907.311292] loop6: rw=12288, want=8200, limit=20 00:59:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x20000000000000}, 0x2c) [ 1907.358109] attempt to access beyond end of device [ 1907.363239] loop4: rw=12288, want=8200, limit=20 [ 1907.380275] attempt to access beyond end of device [ 1907.385350] loop6: rw=12288, want=12296, limit=20 00:59:13 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0x4}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1907.443875] attempt to access beyond end of device [ 1907.445931] attempt to access beyond end of device [ 1907.449031] loop6: rw=12288, want=8200, limit=20 [ 1907.453987] loop4: rw=12288, want=12296, limit=20 [ 1907.529219] attempt to access beyond end of device [ 1907.534316] loop6: rw=12288, want=12296, limit=20 00:59:13 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200000004a8000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0xc00000}, 0x2c) 00:59:13 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000040000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:14 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0xffffffbf}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1907.838411] f2fs_msg: 255 callbacks suppressed [ 1907.838424] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1907.850255] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1907.862320] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1907.869497] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock 00:59:14 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1907.963926] attempt to access beyond end of device [ 1907.969058] loop6: rw=12288, want=8200, limit=20 [ 1907.984284] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 1024) [ 1907.991524] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 00:59:14 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x64020000}, 0x2c) [ 1908.054393] attempt to access beyond end of device [ 1908.059574] loop6: rw=12288, want=12296, limit=20 00:59:14 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:14 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1908.112553] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1908.119705] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1908.144725] F2FS-fs (loop6): Failed to get valid F2FS checkpoint [ 1908.210896] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1908.272995] attempt to access beyond end of device [ 1908.278186] loop6: rw=12288, want=8200, limit=20 00:59:14 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000070000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:14 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x8003}, 0x2c) [ 1908.353258] attempt to access beyond end of device [ 1908.358400] loop6: rw=12288, want=12296, limit=20 00:59:14 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0x2000000}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1908.479111] attempt to access beyond end of device [ 1908.484225] loop6: rw=12288, want=8200, limit=20 00:59:14 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1908.562123] attempt to access beyond end of device [ 1908.567234] loop6: rw=12288, want=12296, limit=20 00:59:14 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002000000004c000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:14 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0xa0}, 0x2c) [ 1908.660250] attempt to access beyond end of device [ 1908.665359] loop6: rw=12288, want=8200, limit=20 [ 1908.735194] attempt to access beyond end of device [ 1908.740423] loop4: rw=12288, want=8200, limit=20 [ 1908.761274] attempt to access beyond end of device [ 1908.766362] loop6: rw=12288, want=12296, limit=20 00:59:15 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x600000000000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1908.825927] attempt to access beyond end of device [ 1908.831069] loop4: rw=12288, want=12296, limit=20 00:59:15 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000093000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1908.926656] attempt to access beyond end of device [ 1908.931737] loop4: rw=12288, want=8200, limit=20 00:59:15 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:15 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x11}, 0x2c) [ 1909.012413] attempt to access beyond end of device [ 1909.017529] loop4: rw=12288, want=12296, limit=20 [ 1909.092034] attempt to access beyond end of device [ 1909.097190] loop6: rw=12288, want=8200, limit=20 [ 1909.133322] attempt to access beyond end of device [ 1909.138409] loop4: rw=12288, want=8200, limit=20 00:59:15 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1909.175233] attempt to access beyond end of device [ 1909.180374] loop6: rw=12288, want=12296, limit=20 [ 1909.188517] attempt to access beyond end of device [ 1909.193550] loop4: rw=12288, want=12296, limit=20 [ 1909.245902] attempt to access beyond end of device [ 1909.250981] loop4: rw=12288, want=8200, limit=20 [ 1909.290904] attempt to access beyond end of device [ 1909.296152] loop6: rw=12288, want=8200, limit=20 [ 1909.306151] attempt to access beyond end of device [ 1909.311258] loop4: rw=12288, want=12296, limit=20 [ 1909.374494] attempt to access beyond end of device [ 1909.379641] loop6: rw=12288, want=12296, limit=20 00:59:15 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x381}, 0x2c) 00:59:15 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000001000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:15 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0x3fda}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1909.540734] attempt to access beyond end of device [ 1909.545843] loop6: rw=12288, want=8200, limit=20 [ 1909.572040] attempt to access beyond end of device [ 1909.577112] loop6: rw=12288, want=12296, limit=20 00:59:15 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x30000}, 0x2c) [ 1909.620983] attempt to access beyond end of device [ 1909.626082] loop6: rw=12288, want=8200, limit=20 [ 1909.699423] attempt to access beyond end of device [ 1909.699786] attempt to access beyond end of device [ 1909.704489] loop6: rw=12288, want=12296, limit=20 [ 1909.714444] loop4: rw=12288, want=8200, limit=20 00:59:16 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200fbffffff000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1909.822896] attempt to access beyond end of device [ 1909.827987] loop4: rw=12288, want=12296, limit=20 00:59:16 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0xd601000000000000}, 0x2c) [ 1909.883054] attempt to access beyond end of device [ 1909.888139] loop4: rw=12288, want=8200, limit=20 00:59:16 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x10000000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1909.937621] attempt to access beyond end of device [ 1909.942698] loop4: rw=12288, want=12296, limit=20 00:59:16 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002000000004c000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1910.060700] attempt to access beyond end of device [ 1910.065860] loop4: rw=12288, want=8200, limit=20 [ 1910.174841] attempt to access beyond end of device [ 1910.179970] loop4: rw=12288, want=12296, limit=20 [ 1910.212649] attempt to access beyond end of device [ 1910.217774] loop6: rw=12288, want=8200, limit=20 00:59:16 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:59:16 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x80020000000000}, 0x2c) 00:59:16 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:16 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1910.251642] attempt to access beyond end of device [ 1910.256768] loop4: rw=12288, want=8200, limit=20 [ 1910.296284] attempt to access beyond end of device [ 1910.301506] loop6: rw=12288, want=12296, limit=20 [ 1910.372252] attempt to access beyond end of device [ 1910.377434] loop4: rw=12288, want=12296, limit=20 [ 1910.396164] attempt to access beyond end of device [ 1910.401255] loop6: rw=12288, want=8200, limit=20 [ 1910.463402] attempt to access beyond end of device [ 1910.468544] loop6: rw=12288, want=12296, limit=20 00:59:16 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0xcd03}, 0x2c) 00:59:16 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020004a60000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1910.588733] attempt to access beyond end of device [ 1910.593862] loop6: rw=12288, want=8200, limit=20 00:59:16 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0xffffff7f00000000}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1910.647037] attempt to access beyond end of device [ 1910.652268] loop6: rw=12288, want=12296, limit=20 00:59:17 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000320000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:17 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000270000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:17 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x268}, 0x2c) [ 1910.955611] attempt to access beyond end of device [ 1910.960773] loop4: rw=12288, want=8200, limit=20 00:59:17 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x2a000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1911.018366] attempt to access beyond end of device [ 1911.023506] loop4: rw=12288, want=12296, limit=20 00:59:17 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000130000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1911.100991] attempt to access beyond end of device [ 1911.106092] loop4: rw=12288, want=8200, limit=20 [ 1911.178334] attempt to access beyond end of device [ 1911.183427] loop4: rw=12288, want=12296, limit=20 00:59:17 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:17 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x2e000}, 0x2c) 00:59:17 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1911.275732] attempt to access beyond end of device [ 1911.280861] loop4: rw=12288, want=8200, limit=20 00:59:17 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1f4}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1911.336925] attempt to access beyond end of device [ 1911.342103] loop4: rw=12288, want=12296, limit=20 00:59:17 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200000000000000002d0000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1911.442310] attempt to access beyond end of device [ 1911.447411] loop4: rw=12288, want=8200, limit=20 [ 1911.496815] attempt to access beyond end of device [ 1911.501941] loop4: rw=12288, want=12296, limit=20 [ 1911.531193] attempt to access beyond end of device [ 1911.536297] loop6: rw=12288, want=8200, limit=20 [ 1911.596589] attempt to access beyond end of device [ 1911.601698] loop6: rw=12288, want=12296, limit=20 00:59:17 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0xf02000000000000}, 0x2c) 00:59:17 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020068000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1911.670089] attempt to access beyond end of device [ 1911.675221] loop6: rw=12288, want=8200, limit=20 00:59:17 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0x2000000000000000}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1911.748836] attempt to access beyond end of device [ 1911.753951] loop6: rw=12288, want=12296, limit=20 [ 1911.876199] attempt to access beyond end of device [ 1911.881317] loop6: rw=12288, want=8200, limit=20 00:59:18 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200000001fe000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x9001}, 0x2c) [ 1911.964101] attempt to access beyond end of device [ 1911.969249] loop6: rw=12288, want=12296, limit=20 [ 1912.058855] attempt to access beyond end of device [ 1912.064002] loop6: rw=12288, want=8200, limit=20 00:59:18 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x1100}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1912.136835] attempt to access beyond end of device [ 1912.141987] loop4: rw=12288, want=8200, limit=20 [ 1912.164898] attempt to access beyond end of device [ 1912.169970] loop6: rw=12288, want=12296, limit=20 [ 1912.208785] attempt to access beyond end of device [ 1912.213953] loop4: rw=12288, want=12296, limit=20 00:59:18 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:18 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000160000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0xfd01}, 0x2c) [ 1912.309980] attempt to access beyond end of device [ 1912.315066] loop4: rw=12288, want=8200, limit=20 00:59:18 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:18 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3e8}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1912.408841] attempt to access beyond end of device [ 1912.414079] loop4: rw=12288, want=12296, limit=20 [ 1912.531769] attempt to access beyond end of device [ 1912.536928] loop4: rw=12288, want=8200, limit=20 00:59:18 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000050000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x68}, 0x2c) [ 1912.622627] attempt to access beyond end of device [ 1912.627778] loop4: rw=12288, want=12296, limit=20 [ 1912.689273] attempt to access beyond end of device [ 1912.694409] loop4: rw=12288, want=8200, limit=20 00:59:19 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0xe803000000000000}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1912.759567] attempt to access beyond end of device [ 1912.764677] loop4: rw=12288, want=12296, limit=20 00:59:19 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200000000000000001f0000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1912.847650] f2fs_msg: 220 callbacks suppressed [ 1912.847664] F2FS-fs (loop4): Failed to get valid F2FS checkpoint 00:59:19 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x2ce}, 0x2c) [ 1912.982627] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1912.989899] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock 00:59:19 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002000000266e000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1913.070885] F2FS-fs (loop6): Wrong segment_count / block_count (22 > 7936) [ 1913.078146] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock 00:59:19 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0xe0}, 0x2c) 00:59:19 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x3}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1913.185413] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1913.192607] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1913.206088] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1913.213281] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock 00:59:19 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1913.327102] attempt to access beyond end of device [ 1913.332251] loop4: rw=12288, want=8200, limit=20 [ 1913.359743] F2FS-fs (loop6): Wrong segment_count / block_count (22 > 7936) 00:59:19 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1913.426036] attempt to access beyond end of device [ 1913.431143] loop4: rw=12288, want=12296, limit=20 00:59:19 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200001f0000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:19 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:59:19 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0xa0000000000000}, 0x2c) [ 1913.521379] attempt to access beyond end of device [ 1913.526500] loop4: rw=12288, want=8200, limit=20 [ 1913.586037] attempt to access beyond end of device [ 1913.591100] loop4: rw=12288, want=12296, limit=20 00:59:20 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200000000000000001e0000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:20 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0x4cb0ff7f}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:59:20 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000350000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x1200000000000000}, 0x2c) [ 1913.959110] attempt to access beyond end of device [ 1913.964248] loop6: rw=12288, want=8200, limit=20 00:59:20 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020004a80000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1914.014861] attempt to access beyond end of device [ 1914.020051] loop6: rw=12288, want=12296, limit=20 00:59:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x600000}, 0x2c) [ 1914.121613] attempt to access beyond end of device [ 1914.126729] loop6: rw=12288, want=8200, limit=20 00:59:20 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200000000000000001c0000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1914.198035] attempt to access beyond end of device [ 1914.203128] loop6: rw=12288, want=12296, limit=20 00:59:20 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x7}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1914.309414] attempt to access beyond end of device [ 1914.314538] loop6: rw=12288, want=8200, limit=20 00:59:20 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1914.382036] attempt to access beyond end of device [ 1914.387226] loop6: rw=12288, want=12296, limit=20 00:59:20 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020004000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0xd200}, 0x2c) 00:59:20 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:20 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000150000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:20 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2600000000000000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:59:21 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002006d260000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:21 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0xeffdffff}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:59:21 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000320000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x2201}, 0x2c) [ 1915.000831] attempt to access beyond end of device [ 1915.005957] loop6: rw=12288, want=8200, limit=20 00:59:21 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000002000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1915.118900] attempt to access beyond end of device [ 1915.124037] loop6: rw=12288, want=12296, limit=20 00:59:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x12000}, 0x2c) [ 1915.200138] attempt to access beyond end of device [ 1915.205321] loop6: rw=12288, want=8200, limit=20 [ 1915.226000] attempt to access beyond end of device [ 1915.231213] loop4: rw=12288, want=8200, limit=20 00:59:21 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x600}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1915.309620] attempt to access beyond end of device [ 1915.314883] loop6: rw=12288, want=12296, limit=20 [ 1915.336392] attempt to access beyond end of device [ 1915.341524] loop4: rw=12288, want=12296, limit=20 00:59:21 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1915.447353] attempt to access beyond end of device [ 1915.452525] loop4: rw=12288, want=8200, limit=20 [ 1915.560637] attempt to access beyond end of device [ 1915.565778] loop4: rw=12288, want=12296, limit=20 00:59:21 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000001020000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:21 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x20000}, 0x2c) [ 1915.731324] attempt to access beyond end of device [ 1915.736453] loop4: rw=12288, want=8200, limit=20 00:59:22 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1915.786974] attempt to access beyond end of device [ 1915.792144] loop6: rw=12288, want=8200, limit=20 [ 1915.834599] attempt to access beyond end of device [ 1915.839707] loop4: rw=12288, want=12296, limit=20 [ 1915.862742] attempt to access beyond end of device [ 1915.867893] loop6: rw=12288, want=12296, limit=20 00:59:22 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0x2600}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1915.930070] attempt to access beyond end of device [ 1915.935178] loop4: rw=12288, want=8200, limit=20 [ 1915.958636] attempt to access beyond end of device [ 1915.963743] loop6: rw=12288, want=8200, limit=20 00:59:22 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0xc00000000000000}, 0x2c) [ 1916.035702] attempt to access beyond end of device [ 1916.040844] loop4: rw=12288, want=12296, limit=20 [ 1916.066666] attempt to access beyond end of device [ 1916.071866] loop6: rw=12288, want=12296, limit=20 00:59:22 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000090000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1916.226994] attempt to access beyond end of device [ 1916.232133] loop6: rw=12288, want=8200, limit=20 [ 1916.317569] attempt to access beyond end of device [ 1916.322682] loop6: rw=12288, want=12296, limit=20 00:59:22 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x3fa}, 0x2c) [ 1916.412227] attempt to access beyond end of device [ 1916.417337] loop6: rw=12288, want=8200, limit=20 00:59:22 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x100000000000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:22 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020020100000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:22 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1916.490071] attempt to access beyond end of device [ 1916.495200] loop6: rw=12288, want=12296, limit=20 00:59:22 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000140000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:22 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:23 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x16000}, 0x2c) 00:59:23 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000009000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:23 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3fda}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:59:23 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200000000000000001c0000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1916.988185] attempt to access beyond end of device [ 1916.993394] loop4: rw=12288, want=8200, limit=20 [ 1917.083881] attempt to access beyond end of device [ 1917.089042] loop4: rw=12288, want=12296, limit=20 00:59:23 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x6}, 0x2c) 00:59:23 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0x38b}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1917.177066] attempt to access beyond end of device [ 1917.182227] loop4: rw=12288, want=8200, limit=20 00:59:23 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020008000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1917.252364] attempt to access beyond end of device [ 1917.257495] loop4: rw=12288, want=12296, limit=20 00:59:23 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000023000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:23 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:23 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x14000}, 0x2c) 00:59:23 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200006c0000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:23 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x9000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1917.616330] attempt to access beyond end of device [ 1917.621414] loop4: rw=12288, want=8200, limit=20 [ 1917.709156] attempt to access beyond end of device [ 1917.714227] loop4: rw=12288, want=12296, limit=20 00:59:24 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1917.811320] attempt to access beyond end of device [ 1917.816578] loop4: rw=12288, want=8200, limit=20 [ 1917.891944] attempt to access beyond end of device [ 1917.897077] loop4: rw=12288, want=12296, limit=20 00:59:24 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020004a80000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:24 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x60000000000000}, 0x2c) 00:59:24 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1917.992630] f2fs_msg: 241 callbacks suppressed [ 1917.992643] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 1918.113304] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1918.120577] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock 00:59:24 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200000004aa000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1918.251570] F2FS-fs (loop6): Wrong secs_per_zone / total_sections (2818834434, 14) [ 1918.259443] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock 00:59:24 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0x40000}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:59:24 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x8003000000000000}, 0x2c) [ 1918.363965] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1918.368393] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1918.371178] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1918.378213] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1918.451306] attempt to access beyond end of device [ 1918.456444] loop4: rw=12288, want=8200, limit=20 [ 1918.542352] attempt to access beyond end of device [ 1918.547536] loop4: rw=12288, want=12296, limit=20 [ 1918.587623] F2FS-fs (loop4): Failed to get valid F2FS checkpoint 00:59:24 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1918.644118] attempt to access beyond end of device [ 1918.649261] loop4: rw=12288, want=8200, limit=20 00:59:24 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0xb600000000000000}, 0x2c) 00:59:24 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000030000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:25 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x10000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1918.753190] attempt to access beyond end of device [ 1918.758307] loop4: rw=12288, want=12296, limit=20 [ 1918.859353] attempt to access beyond end of device [ 1918.864425] loop4: rw=12288, want=8200, limit=20 00:59:25 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1918.921523] attempt to access beyond end of device [ 1918.926620] loop4: rw=12288, want=12296, limit=20 [ 1918.994599] attempt to access beyond end of device [ 1918.999670] loop4: rw=12288, want=8200, limit=20 00:59:25 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200000000000000002c0000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:25 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xeffdffff00000000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1919.077090] attempt to access beyond end of device [ 1919.082238] loop4: rw=12288, want=12296, limit=20 00:59:25 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0xe00000}, 0x2c) [ 1919.242305] attempt to access beyond end of device [ 1919.247371] loop6: rw=12288, want=8200, limit=20 00:59:25 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0x9}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:59:25 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002000000267f000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1919.303087] attempt to access beyond end of device [ 1919.308199] loop6: rw=12288, want=12296, limit=20 [ 1919.357230] attempt to access beyond end of device [ 1919.362558] loop6: rw=12288, want=8200, limit=20 [ 1919.411366] attempt to access beyond end of device [ 1919.416599] loop6: rw=12288, want=12296, limit=20 00:59:25 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x1fd}, 0x2c) [ 1919.497303] attempt to access beyond end of device [ 1919.502561] loop4: rw=12288, want=8200, limit=20 [ 1919.538162] attempt to access beyond end of device [ 1919.543390] loop6: rw=12288, want=8200, limit=20 [ 1919.571221] attempt to access beyond end of device [ 1919.576318] loop4: rw=12288, want=12296, limit=20 [ 1919.606916] attempt to access beyond end of device [ 1919.612115] loop6: rw=12288, want=12296, limit=20 [ 1919.628294] attempt to access beyond end of device [ 1919.633379] loop4: rw=12288, want=8200, limit=20 00:59:25 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1919.667698] attempt to access beyond end of device [ 1919.672865] loop6: rw=12288, want=8200, limit=20 [ 1919.705931] attempt to access beyond end of device [ 1919.711118] loop4: rw=12288, want=12296, limit=20 [ 1919.757254] attempt to access beyond end of device [ 1919.762512] loop6: rw=12288, want=12296, limit=20 00:59:26 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x700}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:26 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x500000000000000}, 0x2c) [ 1919.839682] attempt to access beyond end of device [ 1919.844830] loop4: rw=12288, want=8200, limit=20 [ 1919.904583] attempt to access beyond end of device [ 1919.909648] loop4: rw=12288, want=12296, limit=20 00:59:26 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:26 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000310000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1919.968964] attempt to access beyond end of device [ 1919.974063] loop4: rw=12288, want=8200, limit=20 [ 1920.071664] attempt to access beyond end of device [ 1920.076751] loop4: rw=12288, want=12296, limit=20 00:59:26 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe803000000000000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:59:26 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0xc0000000000000}, 0x2c) [ 1920.160906] attempt to access beyond end of device [ 1920.166076] loop6: rw=12288, want=8200, limit=20 00:59:26 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000040000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1920.224264] attempt to access beyond end of device [ 1920.229348] loop6: rw=12288, want=12296, limit=20 [ 1920.257732] attempt to access beyond end of device [ 1920.262827] loop6: rw=12288, want=8200, limit=20 [ 1920.327111] attempt to access beyond end of device [ 1920.332344] loop6: rw=12288, want=12296, limit=20 00:59:26 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0x400000000000000}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:59:26 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x14}, 0x2c) [ 1920.449240] attempt to access beyond end of device [ 1920.454421] loop4: rw=12288, want=8200, limit=20 [ 1920.472895] attempt to access beyond end of device [ 1920.478036] loop6: rw=12288, want=8200, limit=20 [ 1920.509425] attempt to access beyond end of device [ 1920.514664] loop4: rw=12288, want=12296, limit=20 [ 1920.563591] attempt to access beyond end of device [ 1920.568796] loop6: rw=12288, want=12296, limit=20 [ 1920.589773] attempt to access beyond end of device [ 1920.594949] loop4: rw=12288, want=8200, limit=20 [ 1920.631735] attempt to access beyond end of device [ 1920.637014] loop6: rw=12288, want=8200, limit=20 [ 1920.670355] attempt to access beyond end of device [ 1920.675601] loop4: rw=12288, want=12296, limit=20 00:59:27 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1920.722833] attempt to access beyond end of device [ 1920.728055] loop6: rw=12288, want=12296, limit=20 00:59:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x200300}, 0x2c) [ 1920.806925] attempt to access beyond end of device [ 1920.812055] loop4: rw=12288, want=8200, limit=20 00:59:27 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020014000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1920.908093] attempt to access beyond end of device [ 1920.913354] loop4: rw=12288, want=12296, limit=20 00:59:27 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x300}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1920.975222] attempt to access beyond end of device [ 1920.980297] loop4: rw=12288, want=8200, limit=20 00:59:27 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1921.058063] attempt to access beyond end of device [ 1921.063255] loop4: rw=12288, want=12296, limit=20 00:59:27 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200fffffffd000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x12000000}, 0x2c) 00:59:27 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200fffffff5000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:27 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:59:27 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0xfffffdef}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:59:27 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200003f0000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:27 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000010000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x700}, 0x2c) 00:59:28 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000930000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:28 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000270000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:28 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:28 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0xd601}, 0x2c) 00:59:28 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000200000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:28 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200000000000000000b0000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:28 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x3e8}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:28 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:28 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0xc802}, 0x2c) 00:59:28 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200000004a9000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:28 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:59:28 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000060000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1922.473224] attempt to access beyond end of device [ 1922.478346] loop6: rw=12288, want=8200, limit=20 00:59:28 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0x700000000000000}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:59:28 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0xffb3}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:28 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0xc000}, 0x2c) [ 1922.533977] attempt to access beyond end of device [ 1922.539071] loop6: rw=12288, want=12296, limit=20 00:59:28 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000680000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1922.612281] attempt to access beyond end of device [ 1922.617362] loop6: rw=12288, want=8200, limit=20 00:59:28 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff00000000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1922.669107] attempt to access beyond end of device [ 1922.674220] loop6: rw=12288, want=12296, limit=20 [ 1922.784303] attempt to access beyond end of device [ 1922.789409] loop6: rw=12288, want=8200, limit=20 00:59:29 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1922.846594] attempt to access beyond end of device [ 1922.851663] loop6: rw=12288, want=12296, limit=20 00:59:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x8}, 0x2c) 00:59:29 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000060000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1922.912690] attempt to access beyond end of device [ 1922.917868] loop6: rw=12288, want=8200, limit=20 [ 1922.971785] attempt to access beyond end of device [ 1922.976875] loop6: rw=12288, want=12296, limit=20 [ 1923.027046] f2fs_msg: 254 callbacks suppressed [ 1923.027060] F2FS-fs (loop6): Failed to get valid F2FS checkpoint [ 1923.066848] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1923.074068] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 00:59:29 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:29 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000070000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1923.163100] F2FS-fs (loop4): Wrong secs_per_zone / total_sections (100663298, 14) [ 1923.170921] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 00:59:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x2ba}, 0x2c) [ 1923.263512] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1923.270724] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1923.340403] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1923.347621] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1923.349346] F2FS-fs (loop4): Wrong secs_per_zone / total_sections (100663298, 14) 00:59:29 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0xa000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:29 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200269b0000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0xd200000000000000}, 0x2c) 00:59:29 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0x5b002000000000}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:59:29 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200000000000000001a0000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:30 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2600}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:59:30 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x2201000000000000}, 0x2c) 00:59:30 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020005000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:30 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200fdffffff000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:30 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:30 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0xe00200}, 0x2c) 00:59:30 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200feffffff000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:30 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200feffffff000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:30 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:30 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000006000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:30 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002008cffffff000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1924.572550] attempt to access beyond end of device [ 1924.577680] loop4: rw=12288, want=8200, limit=20 00:59:30 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x27000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:30 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x9000000}, 0x2c) 00:59:30 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0xf401000000000000}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1924.632509] attempt to access beyond end of device [ 1924.637685] loop4: rw=12288, want=12296, limit=20 [ 1924.662207] attempt to access beyond end of device [ 1924.667359] loop4: rw=12288, want=8200, limit=20 00:59:30 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020001fe0000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1924.737607] attempt to access beyond end of device [ 1924.742742] loop4: rw=12288, want=12296, limit=20 [ 1924.849581] attempt to access beyond end of device [ 1924.854675] loop4: rw=12288, want=8200, limit=20 00:59:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0xe2030000}, 0x2c) 00:59:31 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x26}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1924.932641] attempt to access beyond end of device [ 1924.937770] loop4: rw=12288, want=12296, limit=20 00:59:31 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200000000000000000e0000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:31 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1925.020172] attempt to access beyond end of device [ 1925.025334] loop4: rw=12288, want=8200, limit=20 [ 1925.115043] attempt to access beyond end of device [ 1925.120188] loop4: rw=12288, want=12296, limit=20 00:59:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x28000}, 0x2c) 00:59:31 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:31 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002000d000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:31 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000004000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1925.429634] attempt to access beyond end of device [ 1925.434733] loop4: rw=12288, want=8200, limit=20 00:59:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x20f}, 0x2c) [ 1925.483698] attempt to access beyond end of device [ 1925.488840] loop4: rw=12288, want=12296, limit=20 00:59:31 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200fcfdffff000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1925.545145] attempt to access beyond end of device [ 1925.550237] loop4: rw=12288, want=8200, limit=20 [ 1925.631715] attempt to access beyond end of device [ 1925.636884] loop4: rw=12288, want=12296, limit=20 00:59:31 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x40030000000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:32 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020068000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1925.749178] attempt to access beyond end of device [ 1925.754375] loop4: rw=12288, want=8200, limit=20 00:59:32 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0xc0ecff7f}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:59:32 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x24000}, 0x2c) [ 1925.835295] attempt to access beyond end of device [ 1925.840510] loop4: rw=12288, want=12296, limit=20 [ 1925.901545] attempt to access beyond end of device [ 1925.906644] loop4: rw=12288, want=8200, limit=20 00:59:32 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002000000001f000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:32 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8b03000000000000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1925.988815] attempt to access beyond end of device [ 1925.994017] loop4: rw=12288, want=12296, limit=20 00:59:32 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:32 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0xc0010000000000}, 0x2c) 00:59:32 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000004000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1926.147095] attempt to access beyond end of device [ 1926.152280] loop6: rw=12288, want=8200, limit=20 [ 1926.232503] attempt to access beyond end of device [ 1926.237614] loop6: rw=12288, want=12296, limit=20 00:59:32 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1926.327216] attempt to access beyond end of device [ 1926.327235] attempt to access beyond end of device [ 1926.327272] loop4: rw=12288, want=8200, limit=20 [ 1926.332269] loop6: rw=12288, want=8200, limit=20 [ 1926.342977] attempt to access beyond end of device [ 1926.352095] loop6: rw=12288, want=12296, limit=20 00:59:32 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0xe0030000000000}, 0x2c) [ 1926.479605] attempt to access beyond end of device [ 1926.484825] loop6: rw=12288, want=8200, limit=20 [ 1926.494713] attempt to access beyond end of device [ 1926.499869] loop4: rw=12288, want=12296, limit=20 [ 1926.553218] attempt to access beyond end of device [ 1926.558593] loop6: rw=12288, want=12296, limit=20 [ 1926.576962] attempt to access beyond end of device [ 1926.582065] loop4: rw=12288, want=8200, limit=20 [ 1926.646879] attempt to access beyond end of device [ 1926.651985] loop4: rw=12288, want=12296, limit=20 00:59:32 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x4000000000000}, 0x2c) [ 1926.694585] attempt to access beyond end of device [ 1926.699786] loop6: rw=12288, want=8200, limit=20 [ 1926.747321] attempt to access beyond end of device [ 1926.752425] loop6: rw=12288, want=12296, limit=20 00:59:33 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0xf0ff7f}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:59:33 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0xbfffffff00000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:33 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200266e0000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:33 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020004a90000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0xce020000}, 0x2c) 00:59:33 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200269c0000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:33 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:33 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200fffffffe000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:33 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:59:33 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200000000000000002c0000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0xf000000}, 0x2c) 00:59:33 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:33 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020006000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1927.511624] attempt to access beyond end of device [ 1927.516777] loop4: rw=12288, want=8200, limit=20 [ 1927.573890] attempt to access beyond end of device [ 1927.579052] loop4: rw=12288, want=12296, limit=20 00:59:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x32010000}, 0x2c) [ 1927.665885] attempt to access beyond end of device [ 1927.671223] loop4: rw=12288, want=8200, limit=20 00:59:34 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000010000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1927.759084] attempt to access beyond end of device [ 1927.764216] loop4: rw=12288, want=12296, limit=20 00:59:34 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0x6000}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:59:34 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0xb3ff000000000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1927.879191] attempt to access beyond end of device [ 1927.884324] loop6: rw=12288, want=8200, limit=20 [ 1927.946297] attempt to access beyond end of device [ 1927.951397] loop6: rw=12288, want=12296, limit=20 00:59:34 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000140000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1928.009369] attempt to access beyond end of device [ 1928.014557] loop6: rw=12288, want=8200, limit=20 00:59:34 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0xc000000}, 0x2c) [ 1928.118017] attempt to access beyond end of device [ 1928.123159] loop6: rw=12288, want=12296, limit=20 [ 1928.156412] f2fs_msg: 336 callbacks suppressed [ 1928.156427] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 00:59:34 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1928.168372] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1928.181279] F2FS-fs (loop6): Failed to get valid F2FS checkpoint 00:59:34 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ff7f}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1928.286730] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1928.293966] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1928.349850] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 5120) [ 1928.357316] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 00:59:34 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:34 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x86010000}, 0x2c) [ 1928.417916] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1928.425271] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1928.438700] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1928.549164] attempt to access beyond end of device [ 1928.554702] loop6: rw=12288, want=8200, limit=20 00:59:34 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020074000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1928.631398] attempt to access beyond end of device [ 1928.636528] loop6: rw=12288, want=12296, limit=20 00:59:34 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x9400}, 0x2c) 00:59:35 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002000c000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:35 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020006000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:35 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0x0, 0x200000000000000}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:59:35 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0xd800}, 0x2c) 00:59:35 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x2b000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:35 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200f6080000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:35 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002007fffffff000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:35 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:35 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002004c000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:35 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x4000000000000000}, 0x2c) 00:59:35 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:35 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020004aa0000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:35 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x900}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:59:35 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020074000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:35 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0xffffffff00000000}, 0x2c) 00:59:36 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000120000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:36 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020060000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:36 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x200100}, 0x2c) 00:59:36 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0x0, 0xf0ffffff7f0000}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:59:36 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0xf000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:36 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200000000000000000e0000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:36 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200fffffff4000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:36 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0xba020000}, 0x2c) 00:59:36 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:36 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200000c0000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:36 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8b03}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:59:36 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:36 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002000000266d000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:36 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x18000000}, 0x2c) [ 1930.742815] attempt to access beyond end of device [ 1930.747938] loop4: rw=12288, want=8200, limit=20 00:59:37 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200000000000000000a0000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1930.814360] attempt to access beyond end of device [ 1930.819500] loop4: rw=12288, want=12296, limit=20 00:59:37 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x1800}, 0x2c) [ 1930.894230] attempt to access beyond end of device [ 1930.899434] loop4: rw=12288, want=8200, limit=20 [ 1930.970327] attempt to access beyond end of device [ 1930.975549] loop4: rw=12288, want=12296, limit=20 00:59:37 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000110000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1931.106596] attempt to access beyond end of device [ 1931.111715] loop4: rw=12288, want=8200, limit=20 00:59:37 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x3e000}, 0x2c) [ 1931.196543] attempt to access beyond end of device [ 1931.201719] loop4: rw=12288, want=12296, limit=20 00:59:37 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:37 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0x0, 0xf401000000000000}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:59:37 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020020100000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:37 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000060000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:37 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x2400}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:37 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x7000000}, 0x2c) 00:59:37 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1931.547865] attempt to access beyond end of device [ 1931.552980] loop4: rw=12288, want=8200, limit=20 [ 1931.603257] attempt to access beyond end of device [ 1931.608364] loop4: rw=12288, want=12296, limit=20 00:59:37 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1931.660253] attempt to access beyond end of device [ 1931.665341] loop4: rw=12288, want=8200, limit=20 00:59:37 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002001020f5f2000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1931.720365] attempt to access beyond end of device [ 1931.725497] loop4: rw=12288, want=12296, limit=20 00:59:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0xd8000000}, 0x2c) [ 1931.827795] attempt to access beyond end of device [ 1931.832878] loop4: rw=12288, want=8200, limit=20 [ 1931.900609] attempt to access beyond end of device [ 1931.905734] loop4: rw=12288, want=12296, limit=20 00:59:38 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200fffffdfc000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1931.957418] attempt to access beyond end of device [ 1931.962573] loop4: rw=12288, want=8200, limit=20 [ 1931.996188] attempt to access beyond end of device [ 1932.001310] loop4: rw=12288, want=12296, limit=20 00:59:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x10000000}, 0x2c) 00:59:38 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000070000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:38 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000003000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:38 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:38 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002009b260000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:38 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0xa}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1932.492395] attempt to access beyond end of device [ 1932.497512] loop6: rw=12288, want=8200, limit=20 00:59:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x10}, 0x2c) 00:59:38 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0x0, 0xe8030000}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1932.565584] attempt to access beyond end of device [ 1932.570723] loop6: rw=12288, want=12296, limit=20 [ 1932.658324] attempt to access beyond end of device [ 1932.663468] loop6: rw=12288, want=8200, limit=20 00:59:38 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200fffffffe000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1932.701125] attempt to access beyond end of device [ 1932.706253] loop6: rw=12288, want=12296, limit=20 00:59:39 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:39 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ff7f00000000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:59:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x3201000000000000}, 0x2c) [ 1932.856008] attempt to access beyond end of device [ 1932.861112] loop6: rw=12288, want=8200, limit=20 [ 1932.911902] attempt to access beyond end of device [ 1932.916997] loop6: rw=12288, want=12296, limit=20 [ 1932.969510] attempt to access beyond end of device [ 1932.974592] loop6: rw=12288, want=8200, limit=20 00:59:39 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000003000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x3f00}, 0x2c) [ 1933.076645] attempt to access beyond end of device [ 1933.081771] loop4: rw=12288, want=8200, limit=20 [ 1933.086046] attempt to access beyond end of device [ 1933.087332] attempt to access beyond end of device [ 1933.091641] loop6: rw=12288, want=12296, limit=20 [ 1933.096655] loop4: rw=12288, want=12296, limit=20 [ 1933.181343] f2fs_msg: 376 callbacks suppressed [ 1933.181355] F2FS-fs (loop6): Failed to get valid F2FS checkpoint [ 1933.218790] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 1933.276161] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1933.283428] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 00:59:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x1c000}, 0x2c) [ 1933.401375] attempt to access beyond end of device [ 1933.406550] loop4: rw=12288, want=8200, limit=20 00:59:39 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000140000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:39 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1933.470615] attempt to access beyond end of device [ 1933.475739] loop4: rw=12288, want=12296, limit=20 [ 1933.554753] F2FS-fs (loop4): Failed to get valid F2FS checkpoint 00:59:39 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0x0, 0x38b}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:59:39 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x2300000000000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1933.652536] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1933.659689] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1933.668362] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1933.675595] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock 00:59:40 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0xe000000000000000}, 0x2c) [ 1933.738861] attempt to access beyond end of device [ 1933.743936] loop4: rw=12288, want=8200, limit=20 [ 1933.751473] F2FS-fs (loop6): Wrong segment_count / block_count (22 > 5120) [ 1933.801255] attempt to access beyond end of device [ 1933.806305] loop4: rw=12288, want=12296, limit=20 00:59:40 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1933.860312] attempt to access beyond end of device [ 1933.865373] loop4: rw=12288, want=8200, limit=20 00:59:40 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200000000000000000b0000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1933.921601] attempt to access beyond end of device [ 1933.926684] loop4: rw=12288, want=12296, limit=20 00:59:40 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002000000266b000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:40 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x600000000000000}, 0x2c) 00:59:40 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1934.126893] attempt to access beyond end of device [ 1934.132096] loop4: rw=12288, want=8200, limit=20 [ 1934.171933] attempt to access beyond end of device [ 1934.177046] loop4: rw=12288, want=12296, limit=20 00:59:40 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002000000006c000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1934.248240] attempt to access beyond end of device [ 1934.253344] loop4: rw=12288, want=8200, limit=20 00:59:40 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x8601000000000000}, 0x2c) [ 1934.321361] attempt to access beyond end of device [ 1934.326522] loop4: rw=12288, want=12296, limit=20 [ 1934.379384] attempt to access beyond end of device [ 1934.384461] loop6: rw=12288, want=8200, limit=20 [ 1934.404148] attempt to access beyond end of device [ 1934.409303] loop4: rw=12288, want=8200, limit=20 [ 1934.430445] attempt to access beyond end of device [ 1934.435525] loop6: rw=12288, want=12296, limit=20 [ 1934.457802] attempt to access beyond end of device [ 1934.462901] loop4: rw=12288, want=12296, limit=20 [ 1934.502978] attempt to access beyond end of device [ 1934.508082] loop6: rw=12288, want=8200, limit=20 [ 1934.528127] attempt to access beyond end of device [ 1934.533208] loop4: rw=12288, want=8200, limit=20 00:59:40 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:40 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0xc8020000}, 0x2c) [ 1934.580977] attempt to access beyond end of device [ 1934.586161] loop6: rw=12288, want=12296, limit=20 [ 1934.612628] attempt to access beyond end of device [ 1934.617675] loop4: rw=12288, want=12296, limit=20 00:59:40 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0x0, 0x7ffff000}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1934.703256] attempt to access beyond end of device [ 1934.708320] loop6: rw=12288, want=8200, limit=20 00:59:40 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c000000090000000100000002000000003f000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1934.750876] attempt to access beyond end of device [ 1934.756060] loop6: rw=12288, want=12296, limit=20 00:59:41 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0xa00}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:41 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000100000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1934.902992] attempt to access beyond end of device [ 1934.908137] loop4: rw=12288, want=8200, limit=20 00:59:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x6000}, 0x2c) 00:59:41 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5b0020}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1934.980244] attempt to access beyond end of device [ 1934.985493] loop4: rw=12288, want=12296, limit=20 00:59:41 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200f4ffffff000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1935.101116] attempt to access beyond end of device [ 1935.106258] loop4: rw=12288, want=8200, limit=20 00:59:41 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1935.190687] attempt to access beyond end of device [ 1935.195838] loop4: rw=12288, want=12296, limit=20 00:59:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0xd000000}, 0x2c) [ 1935.321566] attempt to access beyond end of device [ 1935.326715] loop4: rw=12288, want=8200, limit=20 00:59:41 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c00000009000000010000000200ffffff97000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1935.408224] attempt to access beyond end of device [ 1935.413325] loop4: rw=12288, want=12296, limit=20 00:59:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x14000000}, 0x2c) 00:59:41 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000048000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:41 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000060000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:41 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1935.766971] attempt to access beyond end of device [ 1935.772120] loop4: rw=12288, want=8200, limit=20 00:59:42 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0x0, 0xe803000000000000}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:59:42 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x23000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1935.842300] attempt to access beyond end of device [ 1935.847419] loop4: rw=12288, want=12296, limit=20 00:59:42 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000120000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:42 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x80010000}, 0x2c) [ 1935.900698] attempt to access beyond end of device [ 1935.905807] loop4: rw=12288, want=8200, limit=20 [ 1935.995711] attempt to access beyond end of device [ 1936.000925] loop4: rw=12288, want=12296, limit=20 00:59:42 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe00}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:59:42 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000210000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1936.157665] attempt to access beyond end of device [ 1936.162793] loop4: rw=12288, want=8200, limit=20 00:59:42 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00042f00000065d1840fa4ad57fb041559dd72109bbe78"], 0x1}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:59:42 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x122}, 0x2c) [ 1936.279492] attempt to access beyond end of device [ 1936.284630] loop4: rw=12288, want=12296, limit=20 [ 1936.372094] attempt to access beyond end of device [ 1936.377193] loop4: rw=12288, want=8200, limit=20 00:59:42 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020005000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 1936.458081] attempt to access beyond end of device [ 1936.463276] loop4: rw=12288, want=12296, limit=20 00:59:42 executing program 4: syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000fff000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:42 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0xd802000000000000}, 0x2c) 00:59:42 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$f2fs(&(0x7f00000004c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000004000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000500)={[{@fsync_mode_strict='fsync_mode=strict'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 00:59:42 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x9}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x0}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1936.790907] attempt to access beyond end of device [ 1936.796035] loop6: rw=12288, want=8200, limit=20 [ 1936.823678] attempt to access beyond end of device [ 1936.828887] loop4: rw=12288, want=8200, limit=20 [ 1936.876737] attempt to access beyond end of device [ 1936.881838] loop4: rw=12288, want=12296, limit=20 [ 1936.890905] attempt to access beyond end of device [ 1936.896016] loop6: rw=12288, want=12296, limit=20 00:59:43 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1a) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {}, 0x0, 0xf0ff7f}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) 00:59:43 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0xa00}, 0x2c) 00:59:43 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3000000000000000, {}, 0x0, 0x3000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 1936.954253] attempt to access beyond end of device [ 1936.959390] loop4: rw=12288, want=8200, limit=20 [ 1936.989374] attempt to access beyond end of device [ 1936.994504] loop6: rw=12288, want=8200, limit=20 [ 1937.040811] attempt to access beyond end of device [ 1937.045876] loop4: rw=12288, want=12296, limit=20 [ 1937.057073] attempt to access beyond end of device [ 1937.062157] loop6: rw=12288, want=12296, limit=20 00:59:43 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats\x00') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x0, 0x0, 0xb958}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x68}, 0x8) capset(&(0x7f00000001c0)={0x399f1336}, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x400, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x340, &(0x7f0000005b00), 0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x38c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007780)=[{{0x0, 0xffffffffffffff16, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000007080), 0x25c, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1937.173225] ------------[ cut here ]------------ [ 1937.180685] ODEBUG: free active (active state 0) object type: percpu_counter hint: (null) [ 1937.190133] WARNING: CPU: 1 PID: 18832 at lib/debugobjects.c:329 debug_print_object+0x16a/0x210 [ 1937.198966] Kernel panic - not syncing: panic_on_warn set ... [ 1937.198966] [ 1937.206338] CPU: 1 PID: 18832 Comm: syz-executor4 Not tainted 4.18.0-next-20180824+ #47 [ 1937.214474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1937.223822] Call Trace: [ 1937.226416] dump_stack+0x1c9/0x2b4 [ 1937.230045] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1937.235261] panic+0x238/0x4e7 [ 1937.238452] ? add_taint.cold.5+0x16/0x16 [ 1937.242602] ? __warn.cold.8+0x148/0x1ba [ 1937.246668] ? debug_print_object+0x16a/0x210 [ 1937.251161] __warn.cold.8+0x163/0x1ba [ 1937.255050] ? debug_print_object+0x16a/0x210 [ 1937.259553] report_bug+0x252/0x2d0 [ 1937.263181] do_error_trap+0x1fc/0x4d0 [ 1937.267066] ? math_error+0x3e0/0x3e0 [ 1937.270868] ? vprintk_default+0x28/0x30 [ 1937.274934] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 1937.279951] ? printk+0xa7/0xcf [ 1937.283236] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1937.288077] do_invalid_op+0x1b/0x20 [ 1937.291795] invalid_op+0x14/0x20 [ 1937.295253] RIP: 0010:debug_print_object+0x16a/0x210 [ 1937.300354] Code: 3a 87 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 92 00 00 00 48 8b 14 dd 20 e5 3a 87 4c 89 f6 48 c7 c7 c0 da 3a 87 e8 26 ec e3 fd <0f> 0b 83 05 a9 49 28 05 01 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f [ 1937.319253] RSP: 0018:ffff8801a9a97360 EFLAGS: 00010082 [ 1937.324646] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffc90012037000 [ 1937.331910] RDX: 000000000002cd2b RSI: ffffffff8163b051 RDI: 0000000000000001 [ 1937.339178] RBP: ffff8801a9a973a0 R08: ffff8801c1f76100 R09: ffffed003b623eca [ 1937.346441] R10: ffffed003b623eca R11: ffff8801db11f657 R12: 0000000000000001 [ 1937.353706] R13: ffffffff882b7ae0 R14: ffffffff873adf60 R15: 0000000000000000 [ 1937.360997] ? vprintk_func+0x81/0x117 [ 1937.364893] debug_check_no_obj_freed+0x3b2/0x595 [ 1937.369734] ? kzfree+0x28/0x30 [ 1937.373023] ? free_obj_work+0xbb0/0xbb0 [ 1937.377086] kfree+0xc7/0x210 [ 1937.380192] f2fs_fill_super+0xe1a/0x8150 [ 1937.384340] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1937.389891] ? f2fs_commit_super+0x400/0x400 [ 1937.394301] ? radix_tree_delete+0x30/0x30 [ 1937.398547] ? check_same_owner+0x340/0x340 [ 1937.402868] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1937.407883] ? widen_string+0xe0/0x2e0 [ 1937.411778] ? format_decode+0xaf0/0xaf0 [ 1937.415844] ? graph_lock+0x170/0x170 [ 1937.419667] ? string+0x225/0x2d0 [ 1937.423118] ? widen_string+0x2e0/0x2e0 [ 1937.427090] ? alloc_super+0x25e/0xb20 [ 1937.430976] ? find_held_lock+0x13f/0x1c0 [ 1937.435126] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1937.440675] ? bdev_name.isra.8+0x1a1/0x1f0 [ 1937.444994] ? pointer+0x157/0x990 [ 1937.448531] ? netdev_bits+0xb0/0xb0 [ 1937.452249] ? format_decode+0x1b1/0xaf0 [ 1937.456306] ? set_precision+0xe0/0xe0 [ 1937.460195] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1937.464611] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1937.470146] ? vsnprintf+0x20d/0x1b60 [ 1937.473956] ? vsprintf+0x40/0x40 [ 1937.477411] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1937.482429] ? set_blocksize+0x2c1/0x340 [ 1937.486495] mount_bdev+0x314/0x3e0 [ 1937.490122] ? mount_bdev+0x314/0x3e0 [ 1937.493965] ? f2fs_commit_super+0x400/0x400 [ 1937.498377] f2fs_mount+0x3c/0x50 [ 1937.501829] ? kill_f2fs_super+0x330/0x330 [ 1937.506066] legacy_get_tree+0x131/0x460 [ 1937.510124] vfs_get_tree+0x1cb/0x5c0 [ 1937.513928] do_mount+0x6f9/0x1e30 [ 1937.517468] ? rcu_is_watching+0x8c/0x150 [ 1937.521617] ? copy_mount_string+0x40/0x40 [ 1937.525858] ? retint_kernel+0x10/0x10 [ 1937.529746] ? copy_mount_options+0x1f0/0x380 [ 1937.534312] ? copy_mount_options+0x1f6/0x380 [ 1937.538808] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1937.544345] ? copy_mount_options+0x285/0x380 [ 1937.548838] ksys_mount+0x12d/0x140 [ 1937.552467] __x64_sys_mount+0xbe/0x150 [ 1937.556446] do_syscall_64+0x1b9/0x820 [ 1937.560515] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1937.565887] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1937.570823] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 1937.575838] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1937.580852] ? recalc_sigpending_tsk+0x180/0x180 [ 1937.585635] ? kasan_check_write+0x14/0x20 [ 1937.589875] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1937.594718] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1937.599904] RIP: 0033:0x459aba [ 1937.603098] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 bd 8a fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 9a 8a fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 1937.621992] RSP: 002b:00007f16f9937a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1937.629696] RAX: ffffffffffffffda RBX: 00007f16f9937b30 RCX: 0000000000459aba [ 1937.637225] RDX: 00007f16f9937ad0 RSI: 0000000020000100 RDI: 00007f16f9937af0 [ 1937.644491] RBP: 0000000020000100 R08: 00007f16f9937b30 R09: 00007f16f9937ad0 [ 1937.651753] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000003 [ 1937.659023] R13: 0000000000000000 R14: 00000000004c9c12 R15: 0000000000000000 [ 1937.666298] [ 1937.666304] ====================================================== [ 1937.666310] WARNING: possible circular locking dependency detected [ 1937.666315] 4.18.0-next-20180824+ #47 Not tainted [ 1937.666321] ------------------------------------------------------ [ 1937.666326] syz-executor4/18832 is trying to acquire lock: [ 1937.666330] 00000000cd8e7eb7 ((console_sem).lock){-.-.}, at: down_trylock+0x13/0x70 [ 1937.666346] [ 1937.666350] but task is already holding lock: [ 1937.666354] 0000000046ad1dd4 (&obj_hash[i].lock){-.-.}, at: debug_check_no_obj_freed+0x16c/0x595 [ 1937.666370] [ 1937.666375] which lock already depends on the new lock. [ 1937.666377] [ 1937.666380] [ 1937.666385] the existing dependency chain (in reverse order) is: [ 1937.666388] [ 1937.666390] -> #3 (&obj_hash[i].lock){-.-.}: [ 1937.666406] _raw_spin_lock_irqsave+0x96/0xc0 [ 1937.666411] __debug_object_init+0x127/0x12e0 [ 1937.666415] debug_object_init+0x16/0x20 [ 1937.666419] hrtimer_init+0x97/0x410 [ 1937.666424] init_dl_task_timer+0x1b/0x50 [ 1937.666428] __sched_fork+0x2ae/0x590 [ 1937.666432] init_idle+0x75/0x740 [ 1937.666436] sched_init+0xbee/0xcbd [ 1937.666440] start_kernel+0x47d/0x94e [ 1937.666445] x86_64_start_reservations+0x29/0x2b [ 1937.666449] x86_64_start_kernel+0x76/0x79 [ 1937.666454] secondary_startup_64+0xa4/0xb0 [ 1937.666456] [ 1937.666458] -> #2 (&rq->lock){-.-.}: [ 1937.666473] _raw_spin_lock+0x2a/0x40 [ 1937.666477] task_fork_fair+0x93/0x680 [ 1937.666482] sched_fork+0x44b/0xbd0 [ 1937.666486] copy_process+0x235e/0x7af0 [ 1937.666490] _do_fork+0x1ca/0x1170 [ 1937.666494] kernel_thread+0x34/0x40 [ 1937.666498] rest_init+0x22/0xe4 [ 1937.666502] start_kernel+0x913/0x94e [ 1937.666507] x86_64_start_reservations+0x29/0x2b [ 1937.666511] x86_64_start_kernel+0x76/0x79 [ 1937.666516] secondary_startup_64+0xa4/0xb0 [ 1937.666518] [ 1937.666521] -> #1 (&p->pi_lock){-.-.}: [ 1937.666536] _raw_spin_lock_irqsave+0x96/0xc0 [ 1937.666547] try_to_wake_up+0xd2/0x1250 [ 1937.666552] wake_up_process+0x10/0x20 [ 1937.666556] __up.isra.1+0x1c0/0x2a0 [ 1937.666560] up+0x13c/0x1c0 [ 1937.666564] __up_console_sem+0xbe/0x1b0 [ 1937.666568] console_unlock+0x506/0x10d0 [ 1937.666573] con_install+0x34e/0x420 [ 1937.666577] tty_init_dev+0xfd/0x460 [ 1937.666581] tty_open+0x692/0xb30 [ 1937.666585] chrdev_open+0x25a/0x770 [ 1937.666590] do_dentry_open+0x49c/0x1140 [ 1937.666594] vfs_open+0xa0/0xd0 [ 1937.666598] path_openat+0x12fb/0x5300 [ 1937.666602] do_filp_open+0x255/0x380 [ 1937.666606] do_sys_open+0x584/0x720 [ 1937.666610] __x64_sys_open+0x7e/0xc0 [ 1937.666615] do_syscall_64+0x1b9/0x820 [ 1937.666620] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1937.666622] [ 1937.666625] -> #0 ((console_sem).lock){-.-.}: [ 1937.666640] lock_acquire+0x1e4/0x4f0 [ 1937.666645] _raw_spin_lock_irqsave+0x96/0xc0 [ 1937.666649] down_trylock+0x13/0x70 [ 1937.666654] __down_trylock_console_sem+0xae/0x200 [ 1937.666658] console_trylock+0x15/0xa0 [ 1937.666663] vprintk_emit+0x31f/0x910 [ 1937.666667] vprintk_default+0x28/0x30 [ 1937.666671] vprintk_func+0x7a/0x117 [ 1937.666675] printk+0xa7/0xcf [ 1937.666679] __warn_printk+0x8c/0xe0 [ 1937.666683] debug_print_object+0x16a/0x210 [ 1937.666688] debug_check_no_obj_freed+0x3b2/0x595 [ 1937.666692] kfree+0xc7/0x210 [ 1937.666697] f2fs_fill_super+0xe1a/0x8150 [ 1937.666701] mount_bdev+0x314/0x3e0 [ 1937.666705] f2fs_mount+0x3c/0x50 [ 1937.666709] legacy_get_tree+0x131/0x460 [ 1937.666713] vfs_get_tree+0x1cb/0x5c0 [ 1937.666717] do_mount+0x6f9/0x1e30 [ 1937.666721] ksys_mount+0x12d/0x140 [ 1937.666726] __x64_sys_mount+0xbe/0x150 [ 1937.666730] do_syscall_64+0x1b9/0x820 [ 1937.666735] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1937.666738] [ 1937.666742] other info that might help us debug this: [ 1937.666745] [ 1937.666748] Chain exists of: [ 1937.666750] (console_sem).lock --> &rq->lock --> &obj_hash[i].lock [ 1937.666777] [ 1937.666782] Possible unsafe locking scenario: [ 1937.666784] [ 1937.666789] CPU0 CPU1 [ 1937.666793] ---- ---- [ 1937.666796] lock(&obj_hash[i].lock); [ 1937.666806] lock(&rq->lock); [ 1937.666816] lock(&obj_hash[i].lock); [ 1937.666825] lock((console_sem).lock); [ 1937.666834] [ 1937.666837] *** DEADLOCK *** [ 1937.666839] [ 1937.666844] 2 locks held by syz-executor4/18832: [ 1937.666846] #0: 000000002b55bbcc (&fc->fs_type->s_umount_key#49/1){+.+.}, at: alloc_super+0x25e/0xb20 [ 1937.666870] #1: 0000000046ad1dd4 (&obj_hash[i].lock){-.-.}, at: debug_check_no_obj_freed+0x16c/0x595 [ 1937.666890] [ 1937.666893] stack backtrace: [ 1937.666900] CPU: 1 PID: 18832 Comm: syz-executor4 Not tainted 4.18.0-next-20180824+ #47 [ 1937.666908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1937.666911] Call Trace: [ 1937.666915] dump_stack+0x1c9/0x2b4 [ 1937.666920] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1937.666925] ? vprintk_func+0x100/0x117 [ 1937.666930] print_circular_bug.isra.34.cold.55+0x1bd/0x27d [ 1937.666934] ? save_trace+0xe0/0x290 [ 1937.666939] __lock_acquire+0x3449/0x5020 [ 1937.666943] ? mark_held_locks+0x160/0x160 [ 1937.666948] ? mark_held_locks+0x160/0x160 [ 1937.666952] ? __lock_acquire+0x7fc/0x5020 [ 1937.666957] ? mark_held_locks+0x160/0x160 [ 1937.666961] ? mark_held_locks+0x160/0x160 [ 1937.666965] ? do_raw_spin_lock+0xc1/0x200 [ 1937.666970] ? print_usage_bug+0xc0/0xc0 [ 1937.666974] ? __mutex_lock+0x67f/0x1700 [ 1937.666978] ? pcpu_alloc+0x95f/0x1280 [ 1937.666982] ? graph_lock+0x170/0x170 [ 1937.666988] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1937.666992] lock_acquire+0x1e4/0x4f0 [ 1937.666996] ? down_trylock+0x13/0x70 [ 1937.667000] ? lock_release+0x9f0/0x9f0 [ 1937.667005] ? trace_hardirqs_off+0xb8/0x2b0 [ 1937.667010] ? trace_hardirqs_on+0x2c0/0x2c0 [ 1937.667014] ? trace_hardirqs_off+0xb8/0x2b0 [ 1937.667018] ? log_store+0x34f/0x4c0 [ 1937.667023] ? vprintk_emit+0x31f/0x910 [ 1937.667027] _raw_spin_lock_irqsave+0x96/0xc0 [ 1937.667032] ? down_trylock+0x13/0x70 [ 1937.667036] down_trylock+0x13/0x70 [ 1937.667040] __down_trylock_console_sem+0xae/0x200 [ 1937.667045] console_trylock+0x15/0xa0 [ 1937.667050] vprintk_emit+0x31f/0x910 [ 1937.667054] ? wake_up_klogd+0x110/0x110 [ 1937.667059] ? is_bpf_text_address+0xd7/0x170 [ 1937.667063] ? kernel_text_address+0x79/0xf0 [ 1937.667068] ? __kernel_text_address+0xd/0x40 [ 1937.667073] ? unwind_get_return_address+0x61/0xa0 [ 1937.667077] ? graph_lock+0x170/0x170 [ 1937.667081] vprintk_default+0x28/0x30 [ 1937.667086] vprintk_func+0x7a/0x117 [ 1937.667089] printk+0xa7/0xcf [ 1937.667094] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 1937.667098] ? lock_acquire+0x1e4/0x4f0 [ 1937.667102] ? __warn_printk+0x80/0xe0 [ 1937.667107] __warn_printk+0x8c/0xe0 [ 1937.667111] ? test_taint+0x20/0x20 [ 1937.667115] ? trace_hardirqs_off+0xb8/0x2b0 [ 1937.667119] ? kasan_check_read+0x11/0x20 [ 1937.667124] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1937.667128] debug_print_object+0x16a/0x210 [ 1937.667133] debug_check_no_obj_freed+0x3b2/0x595 [ 1937.667137] ? kzfree+0x28/0x30 [ 1937.667142] ? free_obj_work+0xbb0/0xbb0 [ 1937.667145] kfree+0xc7/0x210 [ 1937.667150] f2fs_fill_super+0xe1a/0x8150 [ 1937.667155] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1937.667159] ? f2fs_commit_super+0x400/0x400 [ 1937.667164] ? radix_tree_delete+0x30/0x30 [ 1937.667168] ? check_same_owner+0x340/0x340 [ 1937.667173] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1937.667178] ? widen_string+0xe0/0x2e0 [ 1937.667182] ? format_decode+0xaf0/0xaf0 [ 1937.667186] ? graph_lock+0x170/0x170 [ 1937.667190] ? string+0x225/0x2d0 [ 1937.667194] ? widen_string+0x2e0/0x2e0 [ 1937.667198] ? alloc_super+0x25e/0xb20 [ 1937.667203] ? find_held_lock+0x13f/0x1c0 [ 1937.667208] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1937.667212] ? bdev_name.isra.8+0x1a1/0x1f0 [ 1937.667216] ? pointer+0x157/0x990 [ 1937.667220] ? netdev_bits+0xb0/0xb0 [ 1937.667225] ? format_decode+0x1b1/0xaf0 [ 1937.667229] ? set_precision+0xe0/0xe0 [ 1937.667233] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1937.667239] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1937.667243] ? vsnprintf+0x20d/0x1b60 [ 1937.667247] ? vsprintf+0x40/0x40 [ 1937.667252] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1937.667256] ? set_blocksize+0x2c1/0x340 [ 1937.667260] mount_bdev+0x314/0x3e0 [ 1937.667265] ? mount_bdev+0x314/0x3e0 [ 1937.667269] ? f2fs_commit_super+0x400/0x400 [ 1937.667273] f2fs_mount+0x3c/0x50 [ 1937.667278] ? kill_f2fs_super+0x330/0x330 [ 1937.667282] legacy_get_tree+0x131/0x460 [ 1937.667286] vfs_get_tree+0x1cb/0x5c0 [ 1937.667290] do_mount+0x6f9/0x1e30 [ 1937.667295] ? rcu_is_watching+0x8c/0x150 [ 1937.667299] ? copy_mount_string+0x40/0x40 [ 1937.667304] ? retint_kernel+0x10/0x10 [ 1937.667308] ? copy_mount_options+0x1f0/0x380 [ 1937.667313] ? copy_mount_options+0x1f6/0x380 [ 1937.667318] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1937.667323] ? copy_mount_options+0x285/0x380 [ 1937.667327] ksys_mount+0x12d/0x140 [ 1937.667331] __x64_sys_mount+0xbe/0x150 [ 1937.667335] do_syscall_64+0x1b9/0x820 [ 1937.667341] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1937.667346] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1937.667351] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 1937.667356] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1937.667360] ? recalc_sigpending_tsk+0x180/0x180 [ 1937.667365] ? kasan_check_write+0x14/0x20 [ 1937.667370] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1937.667375] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1937.667378] RIP: 0033:0x459aba [ 1937.667393] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 bd 8a fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 9a 8a fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 1937.667398] RSP: 002b:00007f16f9937a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1937.667409] RAX: ffffffffffffffda RBX: 00007f16f9937b30 RCX: 0000000000459aba [ 1937.667416] RDX: 00007f16f9937ad0 RSI: 0000000020000100 RDI: 00007f16f9937af0 [ 1937.667422] RBP: 0000000020000100 R08: 00007f16f9937b30 R09: 00007f16f9937ad0 [ 1937.667429] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000003 [ 1937.667435] R13: 0000000000000000 R14: 00000000004c9c12 R15: 0000000000000000 [ 1937.667762] Dumping ftrace buffer: [ 1938.663553] --------------------------------- [ 1938.668057] syz-exec-23595 1...2 1079757271us : 0: }D [ 1938.668073] syz-exec-23595 1..s3 1079757464us : 0: }D [ 1938.673416] --------------------------------- [ 1938.683256] Kernel Offset: disabled [ 1938.686866] Rebooting in 86400 seconds..