tempt to access beyond end of device [ 2016.009592][T21942] loop4: rw=1, want=10615, limit=112 [ 2016.025280][T28929] attempt to access beyond end of device [ 2016.030979][T28929] loop2: rw=1, want=16529, limit=112 [ 2016.036376][T21942] Buffer I/O error on dev loop4, logical block 10614, lost async page write [ 2016.045156][T21942] attempt to access beyond end of device [ 2016.050805][T21942] loop4: rw=1, want=10616, limit=112 17:10:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:10:35 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) [ 2016.081363][T28929] attempt to access beyond end of device [ 2016.087140][T21942] Buffer I/O error on dev loop4, logical block 10615, lost async page write [ 2016.098946][T28929] loop2: rw=1, want=20625, limit=112 [ 2016.111836][T21942] attempt to access beyond end of device [ 2016.117533][T21942] loop4: rw=1, want=10617, limit=112 [ 2016.123002][T21942] Buffer I/O error on dev loop4, logical block 10616, lost async page write [ 2016.138881][T28929] attempt to access beyond end of device [ 2016.139518][ T3096] attempt to access beyond end of device [ 2016.152008][T21942] attempt to access beyond end of device [ 2016.157958][ T3096] loop1: rw=1, want=130, limit=112 [ 2016.158279][T28929] loop2: rw=1, want=24721, limit=112 [ 2016.177753][T21942] loop4: rw=1, want=10638, limit=112 [ 2016.187331][ T3096] Buffer I/O error on dev loop1, logical block 129, lost async page write [ 2016.190020][T21942] Buffer I/O error on dev loop4, logical block 10637, lost async page write [ 2016.205424][T28929] attempt to access beyond end of device [ 2016.214450][ T3096] attempt to access beyond end of device [ 2016.228213][ T3096] loop1: rw=1, want=131, limit=112 [ 2016.237742][ T3096] Buffer I/O error on dev loop1, logical block 130, lost async page write [ 2016.245372][T28929] loop2: rw=1, want=27033, limit=112 [ 2016.261581][T28929] attempt to access beyond end of device [ 2016.268176][T21942] attempt to access beyond end of device [ 2016.270117][ T3096] attempt to access beyond end of device [ 2016.280687][T21942] loop4: rw=1, want=10639, limit=112 [ 2016.287041][T28929] loop2: rw=1, want=27062, limit=112 [ 2016.290309][ T3096] loop1: rw=1, want=132, limit=112 [ 2016.298234][T21942] Buffer I/O error on dev loop4, logical block 10638, lost async page write [ 2016.305448][ T3096] Buffer I/O error on dev loop1, logical block 131, lost async page write [ 2016.312735][T28929] attempt to access beyond end of device [ 2016.321114][T28929] loop2: rw=1, want=27063, limit=112 [ 2016.325564][ T3096] attempt to access beyond end of device [ 2016.337357][ T3096] loop1: rw=1, want=133, limit=112 [ 2016.342105][T21942] attempt to access beyond end of device [ 2016.347203][ T3096] attempt to access beyond end of device [ 2016.348124][T21942] loop4: rw=1, want=10640, limit=112 [ 2016.358452][T28929] attempt to access beyond end of device [ 2016.368381][ T3096] loop1: rw=1, want=142, limit=112 [ 2016.371809][T21942] attempt to access beyond end of device [ 2016.379143][T21942] loop4: rw=1, want=10641, limit=112 [ 2016.379375][ T3096] attempt to access beyond end of device [ 2016.391878][T21942] attempt to access beyond end of device [ 2016.396392][ T3096] loop1: rw=1, want=143, limit=112 [ 2016.397528][T21942] loop4: rw=1, want=10690, limit=112 [ 2016.397571][T21942] attempt to access beyond end of device [ 2016.407364][ T3096] attempt to access beyond end of device [ 2016.408039][T28929] loop2: rw=1, want=27064, limit=112 [ 2016.418138][ T3096] loop1: rw=1, want=144, limit=112 [ 2016.431806][T28929] attempt to access beyond end of device [ 2016.437453][T28929] loop2: rw=1, want=27065, limit=112 [ 2016.438852][ T3096] attempt to access beyond end of device [ 2016.448852][ T3096] loop1: rw=1, want=145, limit=112 [ 2016.451803][T28929] attempt to access beyond end of device [ 2016.459606][T28929] loop2: rw=1, want=27086, limit=112 [ 2016.461832][T21942] loop4: rw=1, want=10691, limit=112 [ 2016.471552][T21942] attempt to access beyond end of device [ 2016.478113][ T3096] attempt to access beyond end of device [ 2016.484201][T21942] loop4: rw=1, want=10692, limit=112 [ 2016.490916][T21942] attempt to access beyond end of device [ 2016.491799][T28929] attempt to access beyond end of device [ 2016.501222][T21942] loop4: rw=1, want=10693, limit=112 [ 2016.511477][ T3096] loop1: rw=1, want=4241, limit=112 [ 2016.520003][T21942] attempt to access beyond end of device [ 2016.521775][T28929] loop2: rw=1, want=27087, limit=112 [ 2016.530986][T28929] attempt to access beyond end of device [ 2016.533754][T21942] loop4: rw=1, want=10702, limit=112 [ 2016.551166][T21942] attempt to access beyond end of device [ 2016.558310][T28929] loop2: rw=1, want=27088, limit=112 [ 2016.558425][ T3096] attempt to access beyond end of device [ 2016.569706][T21942] loop4: rw=1, want=10703, limit=112 [ 2016.570264][T28929] attempt to access beyond end of device [ 2016.575508][ T3096] loop1: rw=1, want=8337, limit=112 [ 2016.580691][T28929] loop2: rw=1, want=27089, limit=112 [ 2016.580763][T28929] attempt to access beyond end of device [ 2016.586371][T21942] attempt to access beyond end of device [ 2016.608111][ T3096] attempt to access beyond end of device [ 2016.614190][ T3096] loop1: rw=1, want=9049, limit=112 [ 2016.618777][T28929] loop2: rw=1, want=27138, limit=112 [ 2016.619499][T21942] loop4: rw=1, want=10704, limit=112 [ 2016.631035][ T3096] attempt to access beyond end of device [ 2016.635834][T28929] attempt to access beyond end of device [ 2016.637168][T21942] attempt to access beyond end of device [ 2016.648349][T21942] loop4: rw=1, want=10705, limit=112 [ 2016.654083][ T3096] loop1: rw=1, want=9078, limit=112 [ 2016.659684][T28929] loop2: rw=1, want=27139, limit=112 [ 2016.660569][ T3096] attempt to access beyond end of device [ 2016.665100][T28929] attempt to access beyond end of device [ 2016.676762][T21942] attempt to access beyond end of device [ 2016.682527][ T3096] loop1: rw=1, want=9079, limit=112 [ 2016.687864][ T3096] attempt to access beyond end of device [ 2016.693990][T21942] loop4: rw=1, want=14801, limit=112 [ 2016.699538][ T3096] loop1: rw=1, want=9080, limit=112 [ 2016.704466][T28929] loop2: rw=1, want=27140, limit=112 [ 2016.710067][T28929] attempt to access beyond end of device [ 2016.710635][ T3096] attempt to access beyond end of device [ 2016.727015][T21942] attempt to access beyond end of device [ 2016.732801][ T3096] loop1: rw=1, want=9081, limit=112 [ 2016.734071][T28929] loop2: rw=1, want=27141, limit=112 [ 2016.738127][ T3096] attempt to access beyond end of device [ 2016.749411][T21942] loop4: rw=1, want=18897, limit=112 [ 2016.755142][ T3096] loop1: rw=1, want=9102, limit=112 [ 2016.765009][ T3096] attempt to access beyond end of device [ 2016.771132][T28929] attempt to access beyond end of device [ 2016.776848][T28929] loop2: rw=1, want=27150, limit=112 [ 2016.777668][ T3096] loop1: rw=1, want=9103, limit=112 [ 2016.787833][T21942] attempt to access beyond end of device [ 2016.793673][ T3096] attempt to access beyond end of device [ 2016.799408][T21942] loop4: rw=1, want=22993, limit=112 [ 2016.799950][T28929] attempt to access beyond end of device [ 2016.805132][ T3096] loop1: rw=1, want=9104, limit=112 [ 2016.821853][T28929] loop2: rw=1, want=27151, limit=112 [ 2016.832325][ T3096] attempt to access beyond end of device [ 2016.838806][T21942] attempt to access beyond end of device [ 2016.844928][T28929] attempt to access beyond end of device [ 2016.850690][ T3096] loop1: rw=1, want=9105, limit=112 [ 2016.856440][T21942] loop4: rw=1, want=27089, limit=112 [ 2016.862173][T28929] loop2: rw=1, want=27152, limit=112 [ 2016.867632][ T3096] attempt to access beyond end of device [ 2016.874618][T28929] attempt to access beyond end of device [ 2016.887135][T28929] loop2: rw=1, want=27153, limit=112 [ 2016.896704][T21942] attempt to access beyond end of device [ 2016.905805][ T3096] loop1: rw=1, want=9154, limit=112 [ 2016.908126][T21942] loop4: rw=1, want=31185, limit=112 [ 2016.911051][ T3096] attempt to access beyond end of device [ 2016.918473][T28929] attempt to access beyond end of device [ 2016.927815][T28929] loop2: rw=1, want=31249, limit=112 [ 2016.934493][ T3096] loop1: rw=1, want=9155, limit=112 [ 2016.939746][ T3096] attempt to access beyond end of device [ 2016.944477][T21942] attempt to access beyond end of device [ 2016.953732][T28929] attempt to access beyond end of device [ 2016.959380][T28929] loop2: rw=1, want=32993, limit=112 [ 2016.965118][T21942] loop4: rw=1, want=32993, limit=112 [ 2016.975117][ T3096] loop1: rw=1, want=9156, limit=112 [ 2016.980573][ T3096] attempt to access beyond end of device [ 2016.991889][ T3096] loop1: rw=1, want=9157, limit=112 [ 2017.009744][ T3096] attempt to access beyond end of device [ 2017.028023][ T3096] loop1: rw=1, want=9166, limit=112 [ 2017.046479][ T3096] attempt to access beyond end of device [ 2017.064772][ T3096] loop1: rw=1, want=9167, limit=112 [ 2017.091810][ T3096] attempt to access beyond end of device [ 2017.097465][ T3096] loop1: rw=1, want=9168, limit=112 [ 2017.121861][ T3096] attempt to access beyond end of device [ 2017.127520][ T3096] loop1: rw=1, want=9169, limit=112 [ 2017.158575][ T3096] attempt to access beyond end of device [ 2017.188541][ T3096] loop1: rw=1, want=13265, limit=112 [ 2017.245009][ T3096] attempt to access beyond end of device [ 2017.261864][ T3096] loop1: rw=1, want=17361, limit=112 [ 2017.301592][ T3096] attempt to access beyond end of device [ 2017.331821][ T3096] loop1: rw=1, want=21457, limit=112 [ 2017.364555][ T3096] attempt to access beyond end of device [ 2017.370207][ T3096] loop1: rw=1, want=24017, limit=112 17:10:37 executing program 4: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:10:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) accept$netrom(0xffffffffffffff9c, &(0x7f0000000300)={{0x3, @default}, [@remote, @bcast, @bcast, @bcast, @bcast, @default, @null, @netrom]}, &(0x7f0000000380)=0x48) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) socket$inet(0x2, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000400)) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3323, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 17:10:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:10:37 executing program 2: mknod(&(0x7f0000000180)='./file1\x00', 0x88, 0x0) syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) r1 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000100)=0x1c, 0x80000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000300)={{}, {{@in=@initdev}, 0x0, @in=@multicast2}}, &(0x7f0000000240)=0xe8) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000140)={0xbfe}, 0x4) r2 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, 0x0, 0xef0d) 17:10:37 executing program 3: clone(0x7fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) tkill(r0, 0x40000000000020) ptrace$cont(0x18, r0, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x28}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 17:10:37 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2018.675078][T27989] attempt to access beyond end of device [ 2018.680883][T27989] loop4: rw=1, want=130, limit=112 [ 2018.721318][T27989] attempt to access beyond end of device [ 2018.741326][T27989] loop4: rw=1, want=131, limit=112 [ 2018.769015][T27989] attempt to access beyond end of device 17:10:37 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, 0x0) clone(0xee7c3932fb900146, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() [ 2018.845677][T27989] loop4: rw=1, want=132, limit=112 [ 2018.956018][T27989] attempt to access beyond end of device [ 2019.036337][T27989] loop4: rw=1, want=133, limit=112 [ 2019.041512][T27989] attempt to access beyond end of device [ 2019.047244][T27989] loop4: rw=1, want=142, limit=112 [ 2019.052538][T27989] attempt to access beyond end of device [ 2019.058188][T27989] loop4: rw=1, want=143, limit=112 17:10:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78030000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2019.290519][T27989] attempt to access beyond end of device [ 2019.360704][ T3668] IPVS: ftp: loaded support on port[0] = 21 [ 2019.429963][T27989] loop4: rw=1, want=144, limit=112 [ 2019.520916][T27989] attempt to access beyond end of device [ 2019.576821][T27989] loop4: rw=1, want=145, limit=112 17:10:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) accept$netrom(0xffffffffffffff9c, &(0x7f0000000300)={{0x3, @default}, [@remote, @bcast, @bcast, @bcast, @bcast, @default, @null, @netrom]}, &(0x7f0000000380)=0x48) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) socket$inet(0x2, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000400)) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3323, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 17:10:38 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:10:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2019.695127][ T2262] attempt to access beyond end of device [ 2019.701502][ T2262] loop1: rw=1, want=130, limit=112 [ 2019.717967][T27989] attempt to access beyond end of device [ 2019.725772][ T2262] attempt to access beyond end of device [ 2019.744918][ T2262] loop1: rw=1, want=131, limit=112 [ 2019.754858][ T2262] attempt to access beyond end of device [ 2019.766670][ T2262] loop1: rw=1, want=132, limit=112 [ 2019.769059][T27989] loop4: rw=1, want=4241, limit=112 [ 2019.780329][ T2262] attempt to access beyond end of device [ 2019.798481][ T2262] loop1: rw=1, want=133, limit=112 [ 2019.829614][ T2262] attempt to access beyond end of device [ 2019.835199][T27989] attempt to access beyond end of device [ 2019.857999][T27989] loop4: rw=1, want=8337, limit=112 [ 2019.870841][ T2262] loop1: rw=1, want=142, limit=112 [ 2019.893572][ T3669] IPVS: ftp: loaded support on port[0] = 21 [ 2019.907838][ T2262] attempt to access beyond end of device [ 2019.916126][T27989] attempt to access beyond end of device [ 2019.946110][T27989] loop4: rw=1, want=9625, limit=112 17:10:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2019.971019][ T2262] loop1: rw=1, want=143, limit=112 [ 2019.971117][T27989] attempt to access beyond end of device [ 2020.009633][T27989] loop4: rw=1, want=9654, limit=112 [ 2020.010771][ T2262] attempt to access beyond end of device [ 2020.043209][ T2262] loop1: rw=1, want=144, limit=112 [ 2020.045066][T27989] attempt to access beyond end of device [ 2020.067211][ T2262] attempt to access beyond end of device [ 2020.080710][T27989] loop4: rw=1, want=9655, limit=112 [ 2020.091266][ T2262] loop1: rw=1, want=145, limit=112 [ 2020.099293][T27989] attempt to access beyond end of device [ 2020.117252][T27989] loop4: rw=1, want=9656, limit=112 [ 2020.134884][ T2262] attempt to access beyond end of device [ 2020.141121][T27989] attempt to access beyond end of device [ 2020.154841][ T2262] loop1: rw=1, want=4241, limit=112 [ 2020.168719][T27989] loop4: rw=1, want=9657, limit=112 [ 2020.210490][T27989] attempt to access beyond end of device [ 2020.244344][T27989] loop4: rw=1, want=9678, limit=112 [ 2020.249951][ T2262] attempt to access beyond end of device [ 2020.270788][T27989] attempt to access beyond end of device [ 2020.279158][ T2262] loop1: rw=1, want=8337, limit=112 [ 2020.310096][T27989] loop4: rw=1, want=9679, limit=112 [ 2020.343456][T27989] attempt to access beyond end of device [ 2020.377140][T27989] loop4: rw=1, want=9680, limit=112 [ 2020.389420][ T2262] attempt to access beyond end of device [ 2020.407889][T27989] attempt to access beyond end of device [ 2020.416451][ T2262] loop1: rw=1, want=12433, limit=112 [ 2020.439116][T27989] loop4: rw=1, want=9681, limit=112 [ 2020.464849][T27989] attempt to access beyond end of device [ 2020.495297][ T2262] attempt to access beyond end of device [ 2020.514329][T27989] loop4: rw=1, want=9730, limit=112 [ 2020.534803][T27989] buffer_io_error: 71 callbacks suppressed [ 2020.534814][T27989] Buffer I/O error on dev loop4, logical block 9729, lost async page write [ 2020.550742][ T2262] loop1: rw=1, want=16529, limit=112 [ 2020.596132][T27989] attempt to access beyond end of device [ 2020.607189][T27989] loop4: rw=1, want=9731, limit=112 [ 2020.620150][ T2262] attempt to access beyond end of device [ 2020.631322][T27989] Buffer I/O error on dev loop4, logical block 9730, lost async page write [ 2020.641865][ T2262] loop1: rw=1, want=20625, limit=112 [ 2020.659315][T27989] attempt to access beyond end of device [ 2020.666983][ T2262] attempt to access beyond end of device [ 2020.681841][T27989] loop4: rw=1, want=9732, limit=112 [ 2020.688153][T27989] Buffer I/O error on dev loop4, logical block 9731, lost async page write [ 2020.702607][ T2262] loop1: rw=1, want=22201, limit=112 [ 2020.741834][T27989] attempt to access beyond end of device [ 2020.747487][T27989] loop4: rw=1, want=9733, limit=112 [ 2020.771835][T27989] Buffer I/O error on dev loop4, logical block 9732, lost async page write [ 2020.780476][T27989] attempt to access beyond end of device [ 2020.791809][T27989] loop4: rw=1, want=9742, limit=112 [ 2020.797053][T27989] Buffer I/O error on dev loop4, logical block 9741, lost async page write [ 2020.841851][T27989] attempt to access beyond end of device [ 2020.847508][T27989] loop4: rw=1, want=9743, limit=112 [ 2020.881810][T27989] Buffer I/O error on dev loop4, logical block 9742, lost async page write [ 2020.890450][T27989] attempt to access beyond end of device [ 2020.934818][T27989] loop4: rw=1, want=9744, limit=112 [ 2020.956384][T27989] Buffer I/O error on dev loop4, logical block 9743, lost async page write [ 2020.996289][T27989] attempt to access beyond end of device [ 2021.014788][T27989] loop4: rw=1, want=9745, limit=112 [ 2021.031631][T27989] Buffer I/O error on dev loop4, logical block 9744, lost async page write [ 2021.084477][T27989] attempt to access beyond end of device [ 2021.100571][T27989] loop4: rw=1, want=13841, limit=112 [ 2021.156415][T27989] attempt to access beyond end of device [ 2021.176116][T27989] loop4: rw=1, want=17937, limit=112 [ 2021.229379][T27989] attempt to access beyond end of device [ 2021.249129][T27989] loop4: rw=1, want=22033, limit=112 [ 2021.291071][T27989] attempt to access beyond end of device [ 2021.313214][T27989] loop4: rw=1, want=24465, limit=112 [ 2022.013636][ T3701] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006900) [ 2022.021527][ T3701] FAT-fs (loop1): Filesystem has been set read-only [ 2022.030806][ T3701] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006641) 17:10:42 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:10:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2030000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:10:42 executing program 3: clone(0x7fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) tkill(r0, 0x40000000000020) ptrace$cont(0x18, r0, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x28}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 17:10:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) accept$netrom(0xffffffffffffff9c, &(0x7f0000000300)={{0x3, @default}, [@remote, @bcast, @bcast, @bcast, @bcast, @default, @null, @netrom]}, &(0x7f0000000380)=0x48) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) socket$inet(0x2, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3323, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 17:10:42 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2023.630232][T10586] attempt to access beyond end of device [ 2023.662124][T10586] loop4: rw=1, want=130, limit=112 [ 2023.678724][T10586] Buffer I/O error on dev loop4, logical block 129, lost async page write [ 2023.764200][T10586] attempt to access beyond end of device [ 2023.875715][T10586] loop4: rw=1, want=131, limit=112 [ 2023.924687][T10586] Buffer I/O error on dev loop4, logical block 130, lost async page write [ 2023.933346][T10586] attempt to access beyond end of device [ 2023.938996][T10586] loop4: rw=1, want=132, limit=112 [ 2023.944222][T10586] attempt to access beyond end of device [ 2023.949874][T10586] loop4: rw=1, want=133, limit=112 [ 2023.955091][T10586] attempt to access beyond end of device [ 2023.960814][T10586] loop4: rw=1, want=142, limit=112 [ 2023.966042][T10586] attempt to access beyond end of device [ 2023.971704][T10586] loop4: rw=1, want=143, limit=112 [ 2023.978268][T10586] attempt to access beyond end of device [ 2024.108873][T10586] loop4: rw=1, want=144, limit=112 [ 2024.174761][T10586] attempt to access beyond end of device [ 2024.267097][T10586] loop4: rw=1, want=145, limit=112 17:10:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xca020000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2024.477109][T10586] attempt to access beyond end of device [ 2024.582198][T10586] loop4: rw=1, want=4241, limit=112 [ 2024.634109][T27989] attempt to access beyond end of device [ 2024.639785][T27989] loop1: rw=1, want=130, limit=112 [ 2024.642412][T10586] attempt to access beyond end of device [ 2024.661336][T27989] attempt to access beyond end of device [ 2024.662182][T10586] loop4: rw=1, want=5209, limit=112 [ 2024.685571][T10586] attempt to access beyond end of device [ 2024.691225][T10586] loop4: rw=1, want=5238, limit=112 [ 2024.692008][T27989] loop1: rw=1, want=131, limit=112 [ 2024.711917][T27989] attempt to access beyond end of device [ 2024.722265][T10586] attempt to access beyond end of device [ 2024.727919][T10586] loop4: rw=1, want=5239, limit=112 [ 2024.730119][T27989] loop1: rw=1, want=132, limit=112 [ 2024.745294][T27989] attempt to access beyond end of device [ 2024.761828][T10586] attempt to access beyond end of device [ 2024.762254][T27989] loop1: rw=1, want=133, limit=112 [ 2024.767481][T10586] loop4: rw=1, want=5240, limit=112 [ 2024.767524][T10586] attempt to access beyond end of device [ 2024.796465][T27989] attempt to access beyond end of device [ 2024.814733][T27989] loop1: rw=1, want=142, limit=112 [ 2024.822115][T10586] loop4: rw=1, want=5241, limit=112 [ 2024.827384][T10586] attempt to access beyond end of device [ 2024.831379][T27989] attempt to access beyond end of device [ 2024.851879][T27989] loop1: rw=1, want=143, limit=112 [ 2024.861609][T27989] attempt to access beyond end of device [ 2024.861770][T10586] loop4: rw=1, want=5262, limit=112 [ 2024.875271][T27989] loop1: rw=1, want=144, limit=112 [ 2024.891819][T10586] attempt to access beyond end of device [ 2024.891850][T27989] attempt to access beyond end of device [ 2024.897469][T10586] loop4: rw=1, want=5263, limit=112 [ 2024.897511][T10586] attempt to access beyond end of device [ 2024.928002][T27989] loop1: rw=1, want=145, limit=112 [ 2024.961783][T10586] loop4: rw=1, want=5264, limit=112 [ 2024.965368][T27989] attempt to access beyond end of device [ 2024.967077][T10586] attempt to access beyond end of device [ 2024.988631][T27989] loop1: rw=1, want=4241, limit=112 [ 2025.001797][T10586] loop4: rw=1, want=5265, limit=112 [ 2025.007074][T10586] attempt to access beyond end of device [ 2025.031784][T10586] loop4: rw=1, want=5314, limit=112 [ 2025.037081][T10586] attempt to access beyond end of device [ 2025.037153][T27989] attempt to access beyond end of device [ 2025.060851][T27989] loop1: rw=1, want=8337, limit=112 [ 2025.061775][T10586] loop4: rw=1, want=5315, limit=112 [ 2025.081821][T10586] attempt to access beyond end of device [ 2025.087474][T10586] loop4: rw=1, want=5316, limit=112 [ 2025.108613][T27989] attempt to access beyond end of device [ 2025.121813][T10586] attempt to access beyond end of device [ 2025.126858][T27989] loop1: rw=1, want=12433, limit=112 [ 2025.127469][T10586] loop4: rw=1, want=5317, limit=112 [ 2025.161817][T10586] attempt to access beyond end of device [ 2025.167469][T10586] loop4: rw=1, want=5326, limit=112 [ 2025.177332][T27989] attempt to access beyond end of device [ 2025.191815][T10586] attempt to access beyond end of device [ 2025.196607][T27989] loop1: rw=1, want=16529, limit=112 [ 2025.197468][T10586] loop4: rw=1, want=5327, limit=112 [ 2025.231809][T10586] attempt to access beyond end of device [ 2025.237465][T10586] loop4: rw=1, want=5328, limit=112 [ 2025.248431][T27989] attempt to access beyond end of device [ 2025.261810][T10586] attempt to access beyond end of device [ 2025.266602][T27989] loop1: rw=1, want=20625, limit=112 [ 2025.267462][T10586] loop4: rw=1, want=5329, limit=112 [ 2025.300823][T27989] attempt to access beyond end of device [ 2025.308277][T10586] attempt to access beyond end of device [ 2025.321329][T27989] loop1: rw=1, want=21665, limit=112 [ 2025.343047][T10586] loop4: rw=1, want=9425, limit=112 [ 2025.378311][T10586] attempt to access beyond end of device [ 2025.411836][T10586] loop4: rw=1, want=13521, limit=112 [ 2025.447166][T10586] attempt to access beyond end of device [ 2025.473067][T10586] loop4: rw=1, want=17617, limit=112 [ 2025.508410][T10586] attempt to access beyond end of device [ 2025.541833][T10586] loop4: rw=1, want=21713, limit=112 [ 2025.584292][T10586] attempt to access beyond end of device [ 2025.589992][T10586] loop4: rw=1, want=23969, limit=112 [ 2027.197423][T27989] attempt to access beyond end of device [ 2027.211859][T27989] loop4: rw=1, want=130, limit=112 [ 2027.216981][T27989] buffer_io_error: 30 callbacks suppressed [ 2027.216991][T27989] Buffer I/O error on dev loop4, logical block 129, lost async page write [ 2027.231975][T27989] attempt to access beyond end of device [ 2027.237630][T27989] loop4: rw=1, want=131, limit=112 [ 2027.242998][T27989] Buffer I/O error on dev loop4, logical block 130, lost async page write [ 2027.251521][T27989] attempt to access beyond end of device [ 2027.257330][T27989] loop4: rw=1, want=132, limit=112 [ 2027.262645][T27989] Buffer I/O error on dev loop4, logical block 131, lost async page write [ 2027.271207][T27989] attempt to access beyond end of device [ 2027.277033][T27989] loop4: rw=1, want=133, limit=112 [ 2027.282389][T27989] Buffer I/O error on dev loop4, logical block 132, lost async page write [ 2027.291440][T27989] attempt to access beyond end of device [ 2027.297286][T27989] loop4: rw=1, want=142, limit=112 [ 2027.302625][T27989] Buffer I/O error on dev loop4, logical block 141, lost async page write [ 2027.311165][T27989] attempt to access beyond end of device [ 2027.317291][T27989] loop4: rw=1, want=143, limit=112 [ 2027.331818][T27989] Buffer I/O error on dev loop4, logical block 142, lost async page write [ 2027.340355][T27989] attempt to access beyond end of device 17:10:46 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) fremovexattr(0xffffffffffffffff, 0x0) 17:10:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) accept$netrom(0xffffffffffffff9c, &(0x7f0000000300)={{0x3, @default}, [@remote, @bcast, @bcast, @bcast, @bcast, @default, @null, @netrom]}, &(0x7f0000000380)=0x48) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) socket$inet(0x2, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3323, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 17:10:46 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:10:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0020000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:10:46 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:10:46 executing program 3: clone(0x7fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) tkill(r0, 0x40000000000020) ptrace$cont(0x18, r0, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x28}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) [ 2027.361827][T27989] loop4: rw=1, want=144, limit=112 [ 2027.366951][T27989] Buffer I/O error on dev loop4, logical block 143, lost async page write [ 2027.381863][T27989] attempt to access beyond end of device [ 2027.387505][T27989] loop4: rw=1, want=145, limit=112 [ 2027.401784][T27989] Buffer I/O error on dev loop4, logical block 144, lost async page write [ 2027.455271][T27989] attempt to access beyond end of device [ 2027.460930][T27989] loop4: rw=1, want=3097, limit=112 17:10:46 executing program 2: rt_sigsuspend(&(0x7f0000000440), 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x9}}, 0xfffffffffffffffe) tkill(r0, 0x1000000000016) [ 2027.674131][T27989] attempt to access beyond end of device [ 2027.793894][T27989] loop4: rw=1, want=3126, limit=112 [ 2027.799249][T27989] Buffer I/O error on dev loop4, logical block 3125, lost async page write [ 2027.807997][T27989] attempt to access beyond end of device [ 2027.813718][T27989] loop4: rw=1, want=3127, limit=112 [ 2027.818969][T27989] Buffer I/O error on dev loop4, logical block 3126, lost async page write [ 2027.827685][T27989] attempt to access beyond end of device [ 2027.833372][T27989] loop4: rw=1, want=3128, limit=112 [ 2027.838631][T27989] attempt to access beyond end of device [ 2027.844465][T27989] loop4: rw=1, want=3129, limit=112 [ 2027.849727][T27989] attempt to access beyond end of device [ 2028.061445][T27989] loop4: rw=1, want=3150, limit=112 17:10:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2010000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2028.113517][T27989] attempt to access beyond end of device [ 2028.207838][T27989] loop4: rw=1, want=3151, limit=112 17:10:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) accept$netrom(0xffffffffffffff9c, &(0x7f0000000300)={{0x3, @default}, [@remote, @bcast, @bcast, @bcast, @bcast, @default, @null, @netrom]}, &(0x7f0000000380)=0x48) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) socket$inet(0x2, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3323, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 2028.295537][T27989] attempt to access beyond end of device [ 2028.316851][T27989] loop4: rw=1, want=3152, limit=112 [ 2028.328086][T27989] attempt to access beyond end of device [ 2028.339782][T27989] loop4: rw=1, want=3153, limit=112 17:10:47 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2028.351228][T27989] attempt to access beyond end of device [ 2028.364030][T27989] loop4: rw=1, want=3202, limit=112 [ 2028.372057][ T3096] attempt to access beyond end of device [ 2028.375344][T27989] attempt to access beyond end of device [ 2028.384732][ T3096] loop1: rw=1, want=130, limit=112 [ 2028.394632][ T3096] attempt to access beyond end of device [ 2028.402720][T27989] loop4: rw=1, want=3203, limit=112 [ 2028.412647][ T3096] loop1: rw=1, want=131, limit=112 [ 2028.420226][T27989] attempt to access beyond end of device [ 2028.429523][ T3096] attempt to access beyond end of device [ 2028.437649][T27989] loop4: rw=1, want=3204, limit=112 [ 2028.446689][ T3096] loop1: rw=1, want=132, limit=112 17:10:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0030000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2028.454374][T27989] attempt to access beyond end of device [ 2028.467099][ T3096] attempt to access beyond end of device [ 2028.488806][T27989] loop4: rw=1, want=3205, limit=112 [ 2028.498066][ T3096] loop1: rw=1, want=133, limit=112 [ 2028.513231][T27989] attempt to access beyond end of device [ 2028.523734][ T3096] attempt to access beyond end of device [ 2028.539577][T27989] loop4: rw=1, want=3214, limit=112 17:10:47 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f00000000c0)=0x8, 0x4) write$binfmt_elf32(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/148, 0xc8}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000037f, 0x0) [ 2028.560740][T27989] attempt to access beyond end of device [ 2028.564294][ T3096] loop1: rw=1, want=142, limit=112 [ 2028.589887][ T3096] attempt to access beyond end of device [ 2028.599502][T27989] loop4: rw=1, want=3215, limit=112 [ 2028.621514][ T3096] loop1: rw=1, want=143, limit=112 [ 2028.639231][T27989] attempt to access beyond end of device [ 2028.649083][ T3096] attempt to access beyond end of device 17:10:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2028.671589][T27989] loop4: rw=1, want=3216, limit=112 [ 2028.673769][ T3096] loop1: rw=1, want=144, limit=112 [ 2028.700426][T27989] attempt to access beyond end of device 17:10:47 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2028.719902][ T3096] attempt to access beyond end of device [ 2028.735770][T27989] loop4: rw=1, want=3217, limit=112 [ 2028.754321][ T3096] loop1: rw=1, want=145, limit=112 [ 2028.801071][T27989] attempt to access beyond end of device [ 2028.809007][ T3096] attempt to access beyond end of device [ 2028.828253][T27989] loop4: rw=1, want=7313, limit=112 [ 2028.840697][ T3096] loop1: rw=1, want=4241, limit=112 [ 2028.921151][T27989] attempt to access beyond end of device [ 2028.940866][ T3096] attempt to access beyond end of device [ 2028.959816][T27989] loop4: rw=1, want=11409, limit=112 [ 2028.976784][ T3096] loop1: rw=1, want=8337, limit=112 17:10:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6ffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2029.068074][T27989] attempt to access beyond end of device [ 2029.073905][T27989] loop4: rw=1, want=15505, limit=112 [ 2029.086412][T27989] attempt to access beyond end of device [ 2029.092218][T27989] loop4: rw=1, want=17177, limit=112 [ 2029.220856][ T3096] attempt to access beyond end of device [ 2029.265065][ T3096] loop1: rw=1, want=11609, limit=112 17:10:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) accept$netrom(0xffffffffffffff9c, &(0x7f0000000300)={{0x3, @default}, [@remote, @bcast, @bcast, @bcast, @bcast, @default, @null, @netrom]}, &(0x7f0000000380)=0x48) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) socket$inet(0x2, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3323, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 2029.344583][ T3096] attempt to access beyond end of device [ 2029.421123][ T3096] loop1: rw=1, want=11638, limit=112 [ 2029.496499][ T3096] attempt to access beyond end of device [ 2029.539009][ T3096] loop1: rw=1, want=11639, limit=112 [ 2029.576164][ T3096] attempt to access beyond end of device [ 2029.630671][ T3096] loop1: rw=1, want=11640, limit=112 [ 2029.698712][ T3096] attempt to access beyond end of device [ 2029.768692][ T3096] loop1: rw=1, want=11641, limit=112 [ 2029.774134][ T3096] attempt to access beyond end of device [ 2029.779776][ T3096] loop1: rw=1, want=11662, limit=112 [ 2029.786380][ T3096] attempt to access beyond end of device [ 2029.792197][ T3096] loop1: rw=1, want=11663, limit=112 [ 2029.797535][ T3096] attempt to access beyond end of device [ 2029.803260][ T3096] loop1: rw=1, want=11664, limit=112 [ 2029.808611][ T3096] attempt to access beyond end of device [ 2029.815534][ T3096] loop1: rw=1, want=11665, limit=112 [ 2029.820903][ T3096] attempt to access beyond end of device [ 2029.826647][ T3096] loop1: rw=1, want=11714, limit=112 [ 2029.832125][ T3096] attempt to access beyond end of device [ 2029.837807][ T3096] loop1: rw=1, want=11715, limit=112 [ 2029.843192][ T3096] attempt to access beyond end of device [ 2029.848838][ T3096] loop1: rw=1, want=11716, limit=112 [ 2029.855462][ T3096] attempt to access beyond end of device [ 2029.861105][ T3096] loop1: rw=1, want=11717, limit=112 [ 2029.866523][ T3096] attempt to access beyond end of device [ 2029.872211][ T3096] loop1: rw=1, want=11726, limit=112 [ 2029.877546][ T3096] attempt to access beyond end of device [ 2029.883266][ T3096] loop1: rw=1, want=11727, limit=112 [ 2029.888597][ T3096] attempt to access beyond end of device [ 2029.894300][ T3096] loop1: rw=1, want=11728, limit=112 [ 2029.899623][ T3096] attempt to access beyond end of device [ 2029.906534][ T3096] loop1: rw=1, want=11729, limit=112 [ 2029.918675][ T3096] attempt to access beyond end of device [ 2029.927524][ T2262] attempt to access beyond end of device [ 2029.945062][ T2262] loop2: rw=1, want=130, limit=112 [ 2029.958855][ T3096] loop1: rw=1, want=15825, limit=112 [ 2029.981684][ T2262] attempt to access beyond end of device [ 2029.996863][ T3096] attempt to access beyond end of device [ 2030.011104][ T2262] loop2: rw=1, want=131, limit=112 [ 2030.021846][ T2262] attempt to access beyond end of device [ 2030.027492][ T2262] loop2: rw=1, want=132, limit=112 [ 2030.041775][ T3096] loop1: rw=1, want=19921, limit=112 [ 2030.071450][ T3096] attempt to access beyond end of device [ 2030.077229][ T2262] attempt to access beyond end of device [ 2030.121460][ T2262] loop2: rw=1, want=133, limit=112 [ 2030.142202][ T3096] loop1: rw=1, want=22689, limit=112 [ 2030.171882][ T2262] attempt to access beyond end of device [ 2030.177543][ T2262] loop2: rw=1, want=142, limit=112 [ 2030.232542][ T2262] attempt to access beyond end of device [ 2030.261780][ T2262] loop2: rw=1, want=143, limit=112 [ 2030.267326][ T2262] attempt to access beyond end of device [ 2030.273075][ T2262] loop2: rw=1, want=144, limit=112 [ 2030.278226][ T2262] attempt to access beyond end of device [ 2030.321803][ T2262] loop2: rw=1, want=145, limit=112 [ 2030.347335][ T2262] attempt to access beyond end of device [ 2030.358463][ T2262] loop2: rw=1, want=4241, limit=112 [ 2030.385282][ T2262] attempt to access beyond end of device [ 2030.390979][ T2262] loop2: rw=1, want=4249, limit=112 [ 2030.413055][ T2262] attempt to access beyond end of device [ 2030.418706][ T2262] loop2: rw=1, want=4278, limit=112 [ 2030.431814][ T2262] attempt to access beyond end of device [ 2030.437460][ T2262] loop2: rw=1, want=4279, limit=112 [ 2030.492821][ T2262] attempt to access beyond end of device [ 2030.575244][ T2262] loop2: rw=1, want=4280, limit=112 [ 2030.601900][ T2262] attempt to access beyond end of device [ 2030.639302][ T2262] loop2: rw=1, want=4281, limit=112 [ 2030.667742][ T2262] attempt to access beyond end of device [ 2030.693819][ T2262] loop2: rw=1, want=4302, limit=112 [ 2030.716540][ T2262] attempt to access beyond end of device [ 2030.742642][ T2262] loop2: rw=1, want=4303, limit=112 [ 2030.766509][ T2262] attempt to access beyond end of device [ 2030.793257][ T2262] loop2: rw=1, want=4304, limit=112 [ 2030.816160][ T2262] attempt to access beyond end of device [ 2030.841479][ T2262] loop2: rw=1, want=4305, limit=112 [ 2030.865534][ T2262] attempt to access beyond end of device [ 2030.889741][ T2262] loop2: rw=1, want=4354, limit=112 [ 2030.912489][ T2262] attempt to access beyond end of device [ 2030.939557][ T2262] loop2: rw=1, want=4355, limit=112 [ 2030.963497][ T2262] attempt to access beyond end of device [ 2030.986564][ T2262] loop2: rw=1, want=4356, limit=112 [ 2031.010426][ T2262] attempt to access beyond end of device [ 2031.035888][ T2262] loop2: rw=1, want=4357, limit=112 [ 2031.060435][ T2262] attempt to access beyond end of device [ 2031.079081][ T2262] loop2: rw=1, want=4366, limit=112 [ 2031.097064][ T2262] attempt to access beyond end of device [ 2031.130130][ T2262] loop2: rw=1, want=4367, limit=112 [ 2031.148346][ T2262] attempt to access beyond end of device [ 2031.154115][ T2262] loop2: rw=1, want=4368, limit=112 [ 2031.159367][ T2262] attempt to access beyond end of device [ 2031.165076][ T2262] loop2: rw=1, want=4369, limit=112 [ 2031.176412][ T2262] attempt to access beyond end of device [ 2031.182222][ T2262] loop2: rw=1, want=8465, limit=112 [ 2031.197256][ T2262] attempt to access beyond end of device [ 2031.202978][ T2262] loop2: rw=1, want=12561, limit=112 [ 2031.217971][ T2262] attempt to access beyond end of device [ 2031.223730][ T2262] loop2: rw=1, want=16657, limit=112 [ 2031.238698][ T2262] attempt to access beyond end of device [ 2031.244428][ T2262] loop2: rw=1, want=20753, limit=112 [ 2031.259111][ T2262] attempt to access beyond end of device [ 2031.264801][ T2262] loop2: rw=1, want=24849, limit=112 [ 2031.274390][ T2262] attempt to access beyond end of device [ 2031.280045][ T2262] loop2: rw=1, want=25633, limit=112 [ 2031.301399][ T2262] attempt to access beyond end of device [ 2031.320803][ T2262] loop4: rw=1, want=130, limit=112 17:10:50 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:10:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:10:50 executing program 2: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:10:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) accept$netrom(0xffffffffffffff9c, &(0x7f0000000300)={{0x3, @default}, [@remote, @bcast, @bcast, @bcast, @bcast, @default, @null, @netrom]}, &(0x7f0000000380)=0x48) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) socket$inet(0x2, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3323, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 17:10:50 executing program 3: clone(0x7fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) tkill(r0, 0x40000000000020) ptrace$cont(0x18, r0, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x28}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) [ 2031.342445][ T2262] attempt to access beyond end of device [ 2031.461533][ T2262] loop4: rw=1, want=131, limit=112 [ 2031.466781][ T2262] attempt to access beyond end of device [ 2031.531216][ T2262] loop4: rw=1, want=132, limit=112 [ 2031.595256][ T2262] attempt to access beyond end of device [ 2031.706410][ T2262] loop4: rw=1, want=133, limit=112 [ 2031.795851][ T2262] attempt to access beyond end of device [ 2031.890232][ T2262] loop4: rw=1, want=142, limit=112 [ 2031.935188][ T2262] attempt to access beyond end of device [ 2031.972192][ T2262] loop4: rw=1, want=143, limit=112 [ 2031.977353][ T2262] attempt to access beyond end of device [ 2031.983152][ T2262] loop4: rw=1, want=144, limit=112 [ 2031.988301][ T2262] attempt to access beyond end of device [ 2031.994052][ T2262] loop4: rw=1, want=145, limit=112 [ 2032.005509][ T2262] attempt to access beyond end of device [ 2032.011145][ T2262] loop4: rw=1, want=4241, limit=112 17:10:51 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:10:51 executing program 3: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:10:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2032.034966][ T2262] attempt to access beyond end of device [ 2032.040621][ T2262] loop4: rw=1, want=4249, limit=112 [ 2032.059597][ T2262] attempt to access beyond end of device [ 2032.065306][ T2262] loop4: rw=1, want=4278, limit=112 [ 2032.067916][T27989] attempt to access beyond end of device [ 2032.070556][ T2262] attempt to access beyond end of device [ 2032.097652][T27989] loop1: rw=1, want=130, limit=112 [ 2032.128400][T27989] attempt to access beyond end of device [ 2032.166355][ T2262] loop4: rw=1, want=4279, limit=112 [ 2032.180819][T27989] loop1: rw=1, want=131, limit=112 [ 2032.208676][ T2262] attempt to access beyond end of device [ 2032.245048][ T2262] loop4: rw=1, want=4280, limit=112 [ 2032.273671][ T2262] buffer_io_error: 73 callbacks suppressed [ 2032.273681][ T2262] Buffer I/O error on dev loop4, logical block 4279, lost async page write [ 2032.342255][ T2262] attempt to access beyond end of device [ 2032.366036][ T2262] loop4: rw=1, want=4281, limit=112 [ 2032.389091][ T2262] Buffer I/O error on dev loop4, logical block 4280, lost async page write [ 2032.442353][T27989] Buffer I/O error on dev loop1, logical block 130, lost async page write [ 2032.489858][ T2262] attempt to access beyond end of device [ 2032.527078][T27989] attempt to access beyond end of device 17:10:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2032.549020][ T2262] loop4: rw=1, want=4302, limit=112 17:10:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) accept$netrom(0xffffffffffffff9c, &(0x7f0000000300)={{0x3, @default}, [@remote, @bcast, @bcast, @bcast, @bcast, @default, @null, @netrom]}, &(0x7f0000000380)=0x48) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) socket$inet(0x2, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3323, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 2032.598312][T27989] loop1: rw=1, want=132, limit=112 [ 2032.606156][ T2262] Buffer I/O error on dev loop4, logical block 4301, lost async page write [ 2032.614984][T27989] Buffer I/O error on dev loop1, logical block 131, lost async page write [ 2032.623708][ T2262] attempt to access beyond end of device [ 2032.629500][T27989] attempt to access beyond end of device [ 2032.635420][ T2262] loop4: rw=1, want=4303, limit=112 [ 2032.640722][T27989] loop1: rw=1, want=133, limit=112 [ 2032.821313][ T2262] Buffer I/O error on dev loop4, logical block 4302, lost async page write [ 2032.849150][T27989] Buffer I/O error on dev loop1, logical block 132, lost async page write [ 2032.891343][ T2262] attempt to access beyond end of device [ 2032.918184][T27989] attempt to access beyond end of device [ 2032.964399][ T2262] loop4: rw=1, want=4304, limit=112 17:10:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2032.989434][T27989] loop1: rw=1, want=142, limit=112 [ 2032.997867][ T2262] Buffer I/O error on dev loop4, logical block 4303, lost async page write [ 2033.006613][ T2262] attempt to access beyond end of device [ 2033.012787][ T2262] loop4: rw=1, want=4305, limit=112 [ 2033.018025][ T2262] Buffer I/O error on dev loop4, logical block 4304, lost async page write [ 2033.026824][ T2262] attempt to access beyond end of device [ 2033.032503][ T2262] loop4: rw=1, want=4354, limit=112 [ 2033.032518][ T2262] Buffer I/O error on dev loop4, logical block 4353, lost async page write [ 2033.032552][ T2262] attempt to access beyond end of device [ 2033.032563][ T2262] loop4: rw=1, want=4355, limit=112 [ 2033.032618][ T2262] attempt to access beyond end of device [ 2033.042646][T27989] attempt to access beyond end of device [ 2033.046436][ T2262] loop4: rw=1, want=4356, limit=112 [ 2033.046473][ T2262] attempt to access beyond end of device 17:10:52 executing program 3: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2033.086546][ T2262] loop4: rw=1, want=4357, limit=112 [ 2033.092485][ T2262] attempt to access beyond end of device [ 2033.098462][ T2262] loop4: rw=1, want=4366, limit=112 [ 2033.104278][ T2262] attempt to access beyond end of device [ 2033.110283][ T2262] loop4: rw=1, want=4367, limit=112 [ 2033.118778][T28929] attempt to access beyond end of device [ 2033.125495][ T2262] attempt to access beyond end of device [ 2033.128348][T27989] loop1: rw=1, want=143, limit=112 [ 2033.136916][ T2262] loop4: rw=1, want=4368, limit=112 [ 2033.153775][ T2262] attempt to access beyond end of device [ 2033.161690][T28929] loop3: rw=1, want=130, limit=112 [ 2033.165170][T27989] attempt to access beyond end of device [ 2033.179430][ T2262] loop4: rw=1, want=4369, limit=112 [ 2033.195604][T27989] loop1: rw=1, want=144, limit=112 [ 2033.198040][T28929] attempt to access beyond end of device [ 2033.220652][T27989] attempt to access beyond end of device [ 2033.224910][ T2262] attempt to access beyond end of device [ 2033.243152][T27989] loop1: rw=1, want=145, limit=112 [ 2033.255714][T28929] loop3: rw=1, want=131, limit=112 [ 2033.260946][T28929] attempt to access beyond end of device [ 2033.260959][T28929] loop3: rw=1, want=132, limit=112 [ 2033.273223][T27989] attempt to access beyond end of device [ 2033.278880][T27989] loop1: rw=1, want=4241, limit=112 [ 2033.280433][ T2262] loop4: rw=1, want=8465, limit=112 [ 2033.299415][ T2262] attempt to access beyond end of device [ 2033.310808][T27989] attempt to access beyond end of device [ 2033.311792][T28929] attempt to access beyond end of device [ 2033.331774][ T2262] loop4: rw=1, want=12561, limit=112 [ 2033.341846][T27989] loop1: rw=1, want=8337, limit=112 [ 2033.349987][T28929] loop3: rw=1, want=133, limit=112 [ 2033.360132][ T2262] attempt to access beyond end of device [ 2033.364046][T27989] attempt to access beyond end of device [ 2033.366355][T28929] attempt to access beyond end of device [ 2033.381843][T27989] loop1: rw=1, want=10777, limit=112 [ 2033.388485][ T2262] loop4: rw=1, want=16657, limit=112 [ 2033.389027][T27989] attempt to access beyond end of device [ 2033.401403][T28929] loop3: rw=1, want=142, limit=112 [ 2033.411206][T27989] loop1: rw=1, want=10806, limit=112 [ 2033.416983][T28929] attempt to access beyond end of device [ 2033.416998][T28929] loop3: rw=1, want=143, limit=112 [ 2033.434799][T28929] attempt to access beyond end of device [ 2033.441521][T28929] loop3: rw=1, want=144, limit=112 [ 2033.460915][T27989] attempt to access beyond end of device [ 2033.472529][T27989] loop1: rw=1, want=10807, limit=112 [ 2033.477857][T27989] attempt to access beyond end of device [ 2033.552885][T28929] attempt to access beyond end of device [ 2033.558537][T28929] loop3: rw=1, want=145, limit=112 [ 2033.564156][T27989] loop1: rw=1, want=10808, limit=112 [ 2033.569502][T27989] attempt to access beyond end of device [ 2033.577098][ T2262] attempt to access beyond end of device [ 2033.582926][ T2262] loop4: rw=1, want=20753, limit=112 [ 2033.596764][ T2262] attempt to access beyond end of device [ 2033.602595][ T2262] loop4: rw=1, want=23649, limit=112 [ 2033.645794][T27989] loop1: rw=1, want=10809, limit=112 [ 2033.661159][T28929] attempt to access beyond end of device [ 2033.668171][T27989] attempt to access beyond end of device [ 2033.679697][T28929] loop3: rw=1, want=4241, limit=112 [ 2033.685118][T27989] loop1: rw=1, want=10830, limit=112 [ 2033.697292][T27989] attempt to access beyond end of device [ 2033.714417][T27989] loop1: rw=1, want=10831, limit=112 [ 2033.727007][T28929] attempt to access beyond end of device [ 2033.737372][T27989] attempt to access beyond end of device [ 2033.752254][T28929] loop3: rw=1, want=8337, limit=112 [ 2033.761855][T27989] loop1: rw=1, want=10832, limit=112 [ 2033.780867][T27989] attempt to access beyond end of device [ 2033.810405][T27989] loop1: rw=1, want=10833, limit=112 [ 2033.825510][T28929] attempt to access beyond end of device [ 2033.842004][T27989] attempt to access beyond end of device [ 2033.858026][T28929] loop3: rw=1, want=12433, limit=112 [ 2033.906852][T27989] loop1: rw=1, want=10882, limit=112 [ 2033.912732][T27989] attempt to access beyond end of device [ 2033.924609][T27989] loop1: rw=1, want=10883, limit=112 [ 2033.931028][T27989] attempt to access beyond end of device [ 2033.937063][T27989] loop1: rw=1, want=10884, limit=112 [ 2033.942824][T27989] attempt to access beyond end of device [ 2033.948577][T27989] loop1: rw=1, want=10885, limit=112 [ 2033.954417][T27989] attempt to access beyond end of device [ 2033.960149][T27989] loop1: rw=1, want=10894, limit=112 [ 2033.966126][T27989] attempt to access beyond end of device [ 2033.972475][T27989] loop1: rw=1, want=10895, limit=112 [ 2033.987102][T27989] attempt to access beyond end of device [ 2033.994967][T28929] attempt to access beyond end of device [ 2034.007694][T27989] loop1: rw=1, want=10896, limit=112 [ 2034.014378][T28929] loop3: rw=1, want=12441, limit=112 [ 2034.025715][T27989] attempt to access beyond end of device [ 2034.032332][T28929] attempt to access beyond end of device [ 2034.047440][T27989] loop1: rw=1, want=10897, limit=112 [ 2034.057593][T28929] loop3: rw=1, want=12470, limit=112 [ 2034.081619][T28929] attempt to access beyond end of device [ 2034.110266][T27989] attempt to access beyond end of device [ 2034.119741][T28929] loop3: rw=1, want=12471, limit=112 [ 2034.144714][T28929] attempt to access beyond end of device [ 2034.151645][T27989] loop1: rw=1, want=14993, limit=112 [ 2034.175765][T28929] loop3: rw=1, want=12472, limit=112 [ 2034.216967][T28929] attempt to access beyond end of device [ 2034.241691][T28929] loop3: rw=1, want=12473, limit=112 [ 2034.243963][T27989] attempt to access beyond end of device [ 2034.247154][T28929] attempt to access beyond end of device [ 2034.258319][T28929] loop3: rw=1, want=12494, limit=112 [ 2034.263773][T28929] attempt to access beyond end of device [ 2034.269421][T28929] loop3: rw=1, want=12495, limit=112 [ 2034.274989][T28929] attempt to access beyond end of device [ 2034.280674][T28929] loop3: rw=1, want=12496, limit=112 [ 2034.286102][T28929] attempt to access beyond end of device [ 2034.291853][T28929] loop3: rw=1, want=12497, limit=112 [ 2034.297203][T28929] attempt to access beyond end of device [ 2034.298578][T27989] loop1: rw=1, want=19089, limit=112 [ 2034.302933][T28929] loop3: rw=1, want=12546, limit=112 [ 2034.302969][T28929] attempt to access beyond end of device [ 2034.319152][T28929] loop3: rw=1, want=12547, limit=112 [ 2034.324697][T28929] attempt to access beyond end of device [ 2034.330334][T28929] loop3: rw=1, want=12548, limit=112 [ 2034.335789][T28929] attempt to access beyond end of device [ 2034.337673][ T2262] attempt to access beyond end of device [ 2034.341455][T28929] loop3: rw=1, want=12549, limit=112 [ 2034.352583][T28929] attempt to access beyond end of device [ 2034.358251][T28929] loop3: rw=1, want=12558, limit=112 [ 2034.363718][T28929] attempt to access beyond end of device [ 2034.369374][T28929] loop3: rw=1, want=12559, limit=112 [ 2034.374272][T27989] attempt to access beyond end of device [ 2034.374818][T28929] attempt to access beyond end of device [ 2034.381289][T27989] loop1: rw=1, want=23185, limit=112 [ 2034.385954][ T2262] loop2: rw=1, want=130, limit=112 [ 2034.385999][ T2262] attempt to access beyond end of device [ 2034.386026][ T2262] loop2: rw=1, want=131, limit=112 [ 2034.386062][ T2262] attempt to access beyond end of device [ 2034.410783][T27989] attempt to access beyond end of device [ 2034.431810][T28929] loop3: rw=1, want=12560, limit=112 [ 2034.437144][T28929] attempt to access beyond end of device [ 2034.442196][T27989] loop1: rw=1, want=24305, limit=112 [ 2034.451154][T28929] loop3: rw=1, want=12561, limit=112 [ 2034.461822][ T2262] loop2: rw=1, want=132, limit=112 [ 2034.466974][ T2262] attempt to access beyond end of device [ 2034.479560][T28929] attempt to access beyond end of device [ 2034.491832][ T2262] loop2: rw=1, want=133, limit=112 [ 2034.496983][ T2262] attempt to access beyond end of device [ 2034.511853][T28929] loop3: rw=1, want=16657, limit=112 [ 2034.533080][ T2262] loop2: rw=1, want=142, limit=112 [ 2034.537008][T28929] attempt to access beyond end of device [ 2034.538237][ T2262] attempt to access beyond end of device [ 2034.551772][T28929] loop3: rw=1, want=20753, limit=112 [ 2034.575000][T28929] attempt to access beyond end of device [ 2034.579262][ T2262] loop2: rw=1, want=143, limit=112 [ 2034.580651][T28929] loop3: rw=1, want=23817, limit=112 [ 2034.611844][ T2262] attempt to access beyond end of device [ 2034.617508][ T2262] loop2: rw=1, want=144, limit=112 [ 2034.639686][ T2262] attempt to access beyond end of device [ 2034.645691][ T2262] loop2: rw=1, want=145, limit=112 [ 2034.664422][ T2262] attempt to access beyond end of device [ 2034.670177][ T2262] loop2: rw=1, want=2585, limit=112 [ 2034.677721][ T2262] attempt to access beyond end of device [ 2034.683863][ T2262] loop2: rw=1, want=2614, limit=112 [ 2034.689132][ T2262] attempt to access beyond end of device [ 2034.695154][ T2262] loop2: rw=1, want=2615, limit=112 [ 2034.700561][ T2262] attempt to access beyond end of device [ 2034.710509][ T2262] loop2: rw=1, want=2616, limit=112 [ 2034.717886][ T2262] attempt to access beyond end of device [ 2034.856194][ T2262] loop2: rw=1, want=2617, limit=112 [ 2034.884313][ T2262] attempt to access beyond end of device [ 2034.936325][ T2262] loop2: rw=1, want=2638, limit=112 [ 2035.006021][ T2262] attempt to access beyond end of device [ 2035.011920][ T2262] loop2: rw=1, want=2639, limit=112 [ 2035.017154][ T2262] attempt to access beyond end of device [ 2035.022863][ T2262] loop2: rw=1, want=2640, limit=112 [ 2035.028103][ T2262] attempt to access beyond end of device [ 2035.033791][ T2262] loop2: rw=1, want=2641, limit=112 [ 2035.039063][ T2262] attempt to access beyond end of device [ 2035.044867][ T2262] loop2: rw=1, want=2690, limit=112 [ 2035.055266][ T2262] attempt to access beyond end of device [ 2035.081826][ T2262] loop2: rw=1, want=2691, limit=112 [ 2035.106530][ T2262] attempt to access beyond end of device [ 2035.130451][ T2262] loop2: rw=1, want=2692, limit=112 [ 2035.154220][ T2262] attempt to access beyond end of device [ 2035.179400][ T2262] loop2: rw=1, want=2693, limit=112 [ 2035.202109][ T2262] attempt to access beyond end of device [ 2035.226145][ T2262] loop2: rw=1, want=2702, limit=112 [ 2035.249860][ T2262] attempt to access beyond end of device [ 2035.289053][ T2262] loop2: rw=1, want=2703, limit=112 [ 2035.325557][ T2262] attempt to access beyond end of device [ 2035.361308][ T2262] loop2: rw=1, want=2704, limit=112 [ 2035.392076][ T2262] attempt to access beyond end of device [ 2035.423530][ T2262] loop2: rw=1, want=2705, limit=112 [ 2035.484731][ T2262] attempt to access beyond end of device [ 2035.513630][ T2262] loop2: rw=1, want=6801, limit=112 [ 2035.528252][ T2262] attempt to access beyond end of device [ 2035.533941][ T2262] loop2: rw=1, want=10897, limit=112 [ 2035.548557][ T2262] attempt to access beyond end of device [ 2035.555066][ T2262] loop2: rw=1, want=14993, limit=112 [ 2035.565595][ T2262] attempt to access beyond end of device [ 2035.571231][ T2262] loop2: rw=1, want=16353, limit=112 17:10:54 executing program 4: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:10:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:10:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) accept$netrom(0xffffffffffffff9c, &(0x7f0000000300)={{0x3, @default}, [@remote, @bcast, @bcast, @bcast, @bcast, @default, @null, @netrom]}, &(0x7f0000000380)=0x48) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) socket$inet(0x2, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000440)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 17:10:54 executing program 2: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2035.584223][T21942] attempt to access beyond end of device [ 2035.589866][T21942] loop4: rw=1, want=130, limit=112 [ 2035.634859][T21942] attempt to access beyond end of device [ 2035.655351][T21942] loop4: rw=1, want=131, limit=112 [ 2035.704558][T21942] attempt to access beyond end of device [ 2035.739993][T21942] loop4: rw=1, want=132, limit=112 17:10:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2035.998144][T21942] attempt to access beyond end of device [ 2036.057738][T21942] loop4: rw=1, want=133, limit=112 17:10:55 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2036.115360][T21942] attempt to access beyond end of device [ 2036.217506][T21942] loop4: rw=1, want=142, limit=112 [ 2036.319307][T21942] attempt to access beyond end of device [ 2036.419627][T21942] loop4: rw=1, want=143, limit=112 [ 2036.892119][T21942] attempt to access beyond end of device [ 2036.965798][T21942] loop4: rw=1, want=144, limit=112 [ 2037.042155][T21942] attempt to access beyond end of device 17:10:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) accept$netrom(0xffffffffffffff9c, &(0x7f0000000300)={{0x3, @default}, [@remote, @bcast, @bcast, @bcast, @bcast, @default, @null, @netrom]}, &(0x7f0000000380)=0x48) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) socket$inet(0x2, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000440)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 17:10:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2037.144523][T21942] loop4: rw=1, want=145, limit=112 17:10:56 executing program 3: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:10:56 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2037.265357][ T3096] attempt to access beyond end of device [ 2037.276051][ T3096] loop3: rw=1, want=130, limit=112 [ 2037.291801][ T3096] buffer_io_error: 83 callbacks suppressed [ 2037.291813][ T3096] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 2037.309408][T27989] attempt to access beyond end of device [ 2037.311940][T21942] attempt to access beyond end of device [ 2037.322156][ T3096] attempt to access beyond end of device [ 2037.335066][T21942] loop4: rw=1, want=4241, limit=112 [ 2037.337831][T27989] loop1: rw=1, want=130, limit=112 [ 2037.345249][ T3096] loop3: rw=1, want=131, limit=112 [ 2037.350429][T27989] Buffer I/O error on dev loop1, logical block 129, lost async page write [ 2037.404700][ T3096] Buffer I/O error on dev loop3, logical block 130, lost async page write [ 2037.439903][T27989] attempt to access beyond end of device [ 2037.446164][T27989] loop1: rw=1, want=131, limit=112 [ 2037.467517][T27989] Buffer I/O error on dev loop1, logical block 130, lost async page write [ 2037.476695][T21942] attempt to access beyond end of device [ 2037.493175][ T3096] attempt to access beyond end of device [ 2037.509789][T21942] loop4: rw=1, want=8337, limit=112 [ 2037.533046][ T3096] loop3: rw=1, want=132, limit=112 [ 2037.539392][T27989] attempt to access beyond end of device [ 2037.597365][ T3096] Buffer I/O error on dev loop3, logical block 131, lost async page write [ 2037.607847][T21942] attempt to access beyond end of device [ 2037.617133][T27989] loop1: rw=1, want=132, limit=112 [ 2037.630534][T27989] Buffer I/O error on dev loop1, logical block 131, lost async page write [ 2037.641900][T21942] loop4: rw=1, want=8345, limit=112 [ 2037.675046][ T3096] attempt to access beyond end of device 17:10:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:10:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) accept$netrom(0xffffffffffffff9c, &(0x7f0000000300)={{0x3, @default}, [@remote, @bcast, @bcast, @bcast, @bcast, @default, @null, @netrom]}, &(0x7f0000000380)=0x48) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) socket$inet(0x2, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000440)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 2037.720743][T21942] attempt to access beyond end of device [ 2037.758468][ T3096] loop3: rw=1, want=133, limit=112 [ 2037.764301][T27989] attempt to access beyond end of device [ 2037.796013][T21942] loop4: rw=1, want=8374, limit=112 [ 2037.803989][ T3096] Buffer I/O error on dev loop3, logical block 132, lost async page write [ 2037.812652][ T3096] attempt to access beyond end of device [ 2037.818387][ T3096] loop3: rw=1, want=142, limit=112 [ 2037.823719][T27989] loop1: rw=1, want=133, limit=112 [ 2037.828919][T27989] Buffer I/O error on dev loop1, logical block 132, lost async page write [ 2037.866736][T21942] Buffer I/O error on dev loop4, logical block 8373, lost async page write [ 2037.924842][ T3096] Buffer I/O error on dev loop3, logical block 141, lost async page write [ 2037.948585][T21942] attempt to access beyond end of device [ 2038.005554][T21942] loop4: rw=1, want=8375, limit=112 [ 2038.025368][ T3096] attempt to access beyond end of device [ 2038.061983][T21942] attempt to access beyond end of device [ 2038.080632][ T3096] loop3: rw=1, want=143, limit=112 [ 2038.113063][T21942] loop4: rw=1, want=8376, limit=112 [ 2038.124022][ T3096] attempt to access beyond end of device [ 2038.164620][T21942] attempt to access beyond end of device [ 2038.181864][T27989] attempt to access beyond end of device [ 2038.187805][ T3096] loop3: rw=1, want=144, limit=112 [ 2038.211230][T21942] loop4: rw=1, want=8377, limit=112 [ 2038.216834][T21942] attempt to access beyond end of device [ 2038.222546][T21942] loop4: rw=1, want=8398, limit=112 [ 2038.222589][T21942] attempt to access beyond end of device [ 2038.233414][T21942] loop4: rw=1, want=8399, limit=112 [ 2038.233463][T21942] attempt to access beyond end of device [ 2038.233474][T21942] loop4: rw=1, want=8400, limit=112 [ 2038.233508][T21942] attempt to access beyond end of device [ 2038.242421][T27989] loop1: rw=1, want=142, limit=112 [ 2038.244442][T21942] loop4: rw=1, want=8401, limit=112 [ 2038.244513][T21942] attempt to access beyond end of device [ 2038.250190][T27989] attempt to access beyond end of device [ 2038.255290][T21942] loop4: rw=1, want=8450, limit=112 [ 2038.255330][T21942] attempt to access beyond end of device [ 2038.255341][T21942] loop4: rw=1, want=8451, limit=112 [ 2038.255375][T21942] attempt to access beyond end of device [ 2038.267495][ T3096] attempt to access beyond end of device [ 2038.271441][T21942] loop4: rw=1, want=8452, limit=112 [ 2038.271481][T21942] attempt to access beyond end of device [ 2038.271492][T21942] loop4: rw=1, want=8453, limit=112 [ 2038.271524][T21942] attempt to access beyond end of device [ 2038.302054][T21942] loop4: rw=1, want=8462, limit=112 [ 2038.320720][T27989] loop1: rw=1, want=143, limit=112 [ 2038.341846][T21942] attempt to access beyond end of device [ 2038.347518][T21942] loop4: rw=1, want=8463, limit=112 [ 2038.355451][T28929] attempt to access beyond end of device [ 2038.361112][T28929] loop2: rw=1, want=130, limit=112 [ 2038.361793][ T3096] loop3: rw=1, want=145, limit=112 [ 2038.375635][T27989] attempt to access beyond end of device [ 2038.381704][T28929] attempt to access beyond end of device [ 2038.391802][T21942] attempt to access beyond end of device [ 2038.397456][T21942] loop4: rw=1, want=8464, limit=112 [ 2038.406795][T27989] loop1: rw=1, want=144, limit=112 [ 2038.408785][ T3096] attempt to access beyond end of device [ 2038.414339][T28929] loop2: rw=1, want=131, limit=112 [ 2038.427525][ T3096] loop3: rw=1, want=4241, limit=112 [ 2038.437458][T21942] attempt to access beyond end of device [ 2038.441163][T27989] attempt to access beyond end of device [ 2038.455387][T27989] loop1: rw=1, want=145, limit=112 [ 2038.456797][T21942] loop4: rw=1, want=8465, limit=112 [ 2038.464309][T28929] attempt to access beyond end of device [ 2038.479345][T28929] loop2: rw=1, want=132, limit=112 [ 2038.488163][ T3096] attempt to access beyond end of device [ 2038.503001][T28929] attempt to access beyond end of device [ 2038.516622][T27989] attempt to access beyond end of device [ 2038.526030][T28929] loop2: rw=1, want=133, limit=112 [ 2038.531822][ T3096] loop3: rw=1, want=8337, limit=112 [ 2038.534924][T27989] loop1: rw=1, want=4241, limit=112 [ 2038.543912][T21942] attempt to access beyond end of device [ 2038.546397][T28929] attempt to access beyond end of device [ 2038.549546][T21942] loop4: rw=1, want=12561, limit=112 [ 2038.576318][ T3096] attempt to access beyond end of device [ 2038.589303][T21942] attempt to access beyond end of device [ 2038.591085][T28929] loop2: rw=1, want=142, limit=112 [ 2038.611839][ T3096] loop3: rw=1, want=12433, limit=112 [ 2038.615260][T28929] attempt to access beyond end of device [ 2038.625930][T27989] attempt to access beyond end of device [ 2038.638660][T27989] loop1: rw=1, want=8337, limit=112 [ 2038.641833][T21942] loop4: rw=1, want=16657, limit=112 [ 2038.644484][T28929] loop2: rw=1, want=143, limit=112 [ 2038.656939][ T3096] attempt to access beyond end of device [ 2038.670767][T28929] attempt to access beyond end of device [ 2038.690918][T27989] attempt to access beyond end of device [ 2038.696948][T28929] loop2: rw=1, want=144, limit=112 [ 2038.699158][T21942] attempt to access beyond end of device [ 2038.707812][ T3096] loop3: rw=1, want=16529, limit=112 [ 2038.709312][T28929] attempt to access beyond end of device [ 2038.719205][T27989] loop1: rw=1, want=12433, limit=112 [ 2038.726046][ T3096] attempt to access beyond end of device [ 2038.731816][T21942] loop4: rw=1, want=20753, limit=112 [ 2038.739082][T28929] loop2: rw=1, want=145, limit=112 [ 2038.751841][ T3096] loop3: rw=1, want=16665, limit=112 [ 2038.757354][ T3096] attempt to access beyond end of device [ 2038.767190][T21942] attempt to access beyond end of device [ 2038.771019][T28929] attempt to access beyond end of device [ 2038.781792][ T3096] loop3: rw=1, want=16694, limit=112 [ 2038.787115][ T3096] attempt to access beyond end of device [ 2038.789804][T27989] attempt to access beyond end of device [ 2038.792831][T21942] loop4: rw=1, want=23105, limit=112 [ 2038.799969][T28929] loop2: rw=1, want=4241, limit=112 [ 2038.810580][T27989] loop1: rw=1, want=16529, limit=112 [ 2038.821786][ T3096] loop3: rw=1, want=16695, limit=112 [ 2038.827118][ T3096] attempt to access beyond end of device [ 2038.830598][T28929] attempt to access beyond end of device [ 2038.851809][ T3096] loop3: rw=1, want=16696, limit=112 [ 2038.857055][T27989] attempt to access beyond end of device [ 2038.857156][ T3096] attempt to access beyond end of device [ 2038.863206][T28929] loop2: rw=1, want=8337, limit=112 [ 2038.889372][T27989] loop1: rw=1, want=20625, limit=112 [ 2038.891082][T28929] attempt to access beyond end of device [ 2038.920210][ T3096] loop3: rw=1, want=16697, limit=112 [ 2038.921762][T28929] loop2: rw=1, want=12433, limit=112 [ 2038.925625][ T3096] attempt to access beyond end of device [ 2038.932645][T27989] attempt to access beyond end of device [ 2038.946379][T28929] attempt to access beyond end of device [ 2038.952082][T28929] loop2: rw=1, want=12441, limit=112 [ 2038.957425][T28929] attempt to access beyond end of device [ 2038.963511][T27989] loop1: rw=1, want=23537, limit=112 [ 2038.969522][ T3096] loop3: rw=1, want=16718, limit=112 [ 2038.973037][T28929] loop2: rw=1, want=12470, limit=112 [ 2038.989838][ T3096] attempt to access beyond end of device [ 2038.992541][T28929] attempt to access beyond end of device [ 2039.001114][T28929] loop2: rw=1, want=12471, limit=112 [ 2039.015089][ T3096] loop3: rw=1, want=16719, limit=112 [ 2039.020401][ T3096] attempt to access beyond end of device [ 2039.030441][ T3096] loop3: rw=1, want=16720, limit=112 [ 2039.040268][ T3096] attempt to access beyond end of device [ 2039.050226][ T3096] loop3: rw=1, want=16721, limit=112 [ 2039.060475][ T3096] attempt to access beyond end of device [ 2039.061818][T28929] attempt to access beyond end of device [ 2039.070403][ T3096] loop3: rw=1, want=16770, limit=112 [ 2039.089278][ T3096] attempt to access beyond end of device [ 2039.091894][T28929] loop2: rw=1, want=12472, limit=112 [ 2039.100257][T28929] attempt to access beyond end of device [ 2039.110891][ T3096] loop3: rw=1, want=16771, limit=112 [ 2039.126001][ T3096] attempt to access beyond end of device [ 2039.131648][ T3096] loop3: rw=1, want=16772, limit=112 [ 2039.131873][T28929] loop2: rw=1, want=12473, limit=112 [ 2039.160633][ T3096] attempt to access beyond end of device [ 2039.180601][T28929] attempt to access beyond end of device [ 2039.186649][ T3096] loop3: rw=1, want=16773, limit=112 [ 2039.203020][T28929] loop2: rw=1, want=12494, limit=112 [ 2039.208395][T28929] attempt to access beyond end of device [ 2039.221863][ T3096] attempt to access beyond end of device [ 2039.227536][ T3096] loop3: rw=1, want=16782, limit=112 [ 2039.231769][T28929] loop2: rw=1, want=12495, limit=112 [ 2039.241902][ T3096] attempt to access beyond end of device [ 2039.247543][ T3096] loop3: rw=1, want=16783, limit=112 [ 2039.250460][T28929] attempt to access beyond end of device [ 2039.261854][ T3096] attempt to access beyond end of device [ 2039.267514][ T3096] loop3: rw=1, want=16784, limit=112 [ 2039.273441][T28929] loop2: rw=1, want=12496, limit=112 [ 2039.278770][T28929] attempt to access beyond end of device [ 2039.281884][ T3096] attempt to access beyond end of device [ 2039.290550][ T3096] loop3: rw=1, want=16785, limit=112 [ 2039.309960][T28929] loop2: rw=1, want=12497, limit=112 [ 2039.328624][ T3096] attempt to access beyond end of device [ 2039.331592][T28929] attempt to access beyond end of device [ 2039.352317][T28929] loop2: rw=1, want=12546, limit=112 [ 2039.357424][ T3096] loop3: rw=1, want=20881, limit=112 [ 2039.357631][T28929] attempt to access beyond end of device [ 2039.389267][T28929] loop2: rw=1, want=12547, limit=112 [ 2039.392342][ T3096] attempt to access beyond end of device [ 2039.395101][T28929] attempt to access beyond end of device [ 2039.400203][ T3096] loop3: rw=1, want=24977, limit=112 [ 2039.428740][T28929] loop2: rw=1, want=12548, limit=112 [ 2039.451170][ T3096] attempt to access beyond end of device [ 2039.452586][T28929] attempt to access beyond end of device [ 2039.465945][ T3096] loop3: rw=1, want=29073, limit=112 [ 2039.492592][T28929] loop2: rw=1, want=12549, limit=112 [ 2039.498222][T28929] attempt to access beyond end of device [ 2039.511689][T28929] loop2: rw=1, want=12558, limit=112 [ 2039.529949][T28929] attempt to access beyond end of device [ 2039.543309][T28929] loop2: rw=1, want=12559, limit=112 [ 2039.580683][T28929] attempt to access beyond end of device [ 2039.621196][ T3096] attempt to access beyond end of device [ 2039.645628][T28929] loop2: rw=1, want=12560, limit=112 [ 2039.689904][ T3096] loop3: rw=1, want=32993, limit=112 [ 2039.705097][T28929] attempt to access beyond end of device [ 2039.755974][T28929] loop2: rw=1, want=12561, limit=112 [ 2039.768147][T28929] attempt to access beyond end of device [ 2039.773838][T28929] loop2: rw=1, want=16657, limit=112 [ 2039.791113][T28929] attempt to access beyond end of device [ 2039.797046][T28929] loop2: rw=1, want=20753, limit=112 [ 2039.812889][T28929] attempt to access beyond end of device [ 2039.818534][T28929] loop2: rw=1, want=24561, limit=112 17:11:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:11:00 executing program 2: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:11:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) accept$netrom(0xffffffffffffff9c, &(0x7f0000000300)={{0x3, @default}, [@remote, @bcast, @bcast, @bcast, @bcast, @default, @null, @netrom]}, &(0x7f0000000380)=0x48) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) socket$inet(0x2, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3323, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 17:11:00 executing program 4: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:11:00 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2040.948423][T28929] attempt to access beyond end of device [ 2040.962377][T28929] loop1: rw=1, want=130, limit=112 [ 2040.976921][T28929] attempt to access beyond end of device [ 2040.984931][ T3096] attempt to access beyond end of device [ 2040.990664][ T3096] loop4: rw=1, want=130, limit=112 [ 2041.018869][T28929] loop1: rw=1, want=131, limit=112 [ 2041.036192][ T3096] attempt to access beyond end of device [ 2041.051370][T28929] attempt to access beyond end of device [ 2041.060020][ T3096] loop4: rw=1, want=131, limit=112 [ 2041.074527][ T3096] attempt to access beyond end of device [ 2041.088987][T28929] loop1: rw=1, want=132, limit=112 [ 2041.099656][ T3096] loop4: rw=1, want=132, limit=112 [ 2041.131916][ T3096] attempt to access beyond end of device [ 2041.139952][T28929] attempt to access beyond end of device [ 2041.162998][ T3096] loop4: rw=1, want=133, limit=112 [ 2041.168953][T28929] loop1: rw=1, want=133, limit=112 [ 2041.181850][ T3096] attempt to access beyond end of device [ 2041.188828][T28929] attempt to access beyond end of device [ 2041.207208][ T3096] loop4: rw=1, want=142, limit=112 [ 2041.214884][T28929] loop1: rw=1, want=142, limit=112 [ 2041.232168][ T3096] attempt to access beyond end of device [ 2041.238014][T28929] attempt to access beyond end of device [ 2041.271808][ T3096] loop4: rw=1, want=143, limit=112 [ 2041.276957][ T3096] attempt to access beyond end of device 17:11:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2041.283478][T28929] loop1: rw=1, want=143, limit=112 [ 2041.289835][T28929] attempt to access beyond end of device [ 2041.301787][T28929] loop1: rw=1, want=144, limit=112 [ 2041.306953][T28929] attempt to access beyond end of device [ 2041.312816][ T3096] loop4: rw=1, want=144, limit=112 [ 2041.317985][ T3096] attempt to access beyond end of device [ 2041.341922][T28929] loop1: rw=1, want=145, limit=112 [ 2041.350372][ T3096] loop4: rw=1, want=145, limit=112 [ 2041.488113][T28929] attempt to access beyond end of device [ 2041.532136][T28929] loop1: rw=1, want=3737, limit=112 [ 2041.560176][ T3096] attempt to access beyond end of device [ 2041.590807][ T3096] loop4: rw=1, want=3545, limit=112 [ 2041.599209][T28929] attempt to access beyond end of device [ 2041.638433][T28929] loop1: rw=1, want=3766, limit=112 17:11:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2041.668886][ T3096] attempt to access beyond end of device [ 2041.718199][T28929] attempt to access beyond end of device [ 2041.748459][ T3096] loop4: rw=1, want=3574, limit=112 [ 2041.785433][T28929] loop1: rw=1, want=3767, limit=112 [ 2041.790749][T28929] attempt to access beyond end of device [ 2041.796521][T28929] loop1: rw=1, want=3768, limit=112 [ 2041.801856][T28929] attempt to access beyond end of device [ 2041.807494][T28929] loop1: rw=1, want=3769, limit=112 [ 2041.812814][T28929] attempt to access beyond end of device [ 2041.818460][T28929] loop1: rw=1, want=3790, limit=112 [ 2041.818526][T28929] attempt to access beyond end of device [ 2041.818539][T28929] loop1: rw=1, want=3791, limit=112 [ 2041.818577][T28929] attempt to access beyond end of device [ 2041.834792][ T3096] attempt to access beyond end of device [ 2041.840475][T28929] loop1: rw=1, want=3792, limit=112 [ 2041.840530][T28929] attempt to access beyond end of device [ 2041.840541][T28929] loop1: rw=1, want=3793, limit=112 [ 2041.840615][T28929] attempt to access beyond end of device [ 2041.851476][T28929] loop1: rw=1, want=3842, limit=112 [ 2041.903423][ T3096] loop4: rw=1, want=3575, limit=112 [ 2041.946242][ T3096] attempt to access beyond end of device [ 2041.983540][ T3096] loop4: rw=1, want=3576, limit=112 [ 2041.997814][T28929] attempt to access beyond end of device [ 2042.014666][ T3096] attempt to access beyond end of device [ 2042.028607][T28929] loop1: rw=1, want=3843, limit=112 [ 2042.050178][ T3096] loop4: rw=1, want=3577, limit=112 17:11:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) accept$netrom(0xffffffffffffff9c, &(0x7f0000000300)={{0x3, @default}, [@remote, @bcast, @bcast, @bcast, @bcast, @default, @null, @netrom]}, &(0x7f0000000380)=0x48) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) socket$inet(0x2, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3323, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 2042.076314][T28929] attempt to access beyond end of device [ 2042.123544][ T3096] attempt to access beyond end of device [ 2042.165137][T28929] loop1: rw=1, want=3844, limit=112 [ 2042.247621][T28929] attempt to access beyond end of device [ 2042.280873][ T3096] loop4: rw=1, want=3598, limit=112 [ 2042.340408][ T3096] buffer_io_error: 93 callbacks suppressed [ 2042.340420][ T3096] Buffer I/O error on dev loop4, logical block 3597, lost async page write [ 2042.403996][T28929] loop1: rw=1, want=3845, limit=112 [ 2042.551515][ T3096] attempt to access beyond end of device [ 2042.557294][ T3096] loop4: rw=1, want=3599, limit=112 [ 2042.562564][ T3096] Buffer I/O error on dev loop4, logical block 3598, lost async page write [ 2042.571191][ T3096] attempt to access beyond end of device [ 2042.576918][ T3096] loop4: rw=1, want=3600, limit=112 [ 2042.582238][ T3096] Buffer I/O error on dev loop4, logical block 3599, lost async page write [ 2042.590869][ T3096] attempt to access beyond end of device [ 2042.598068][ T3096] loop4: rw=1, want=3601, limit=112 [ 2042.607051][T28929] Buffer I/O error on dev loop1, logical block 3844, lost async page write [ 2042.633364][ T3096] Buffer I/O error on dev loop4, logical block 3600, lost async page write [ 2042.661121][T28929] attempt to access beyond end of device [ 2042.726073][ T3096] attempt to access beyond end of device [ 2042.745050][T28929] loop1: rw=1, want=3854, limit=112 [ 2042.816685][ T3096] loop4: rw=1, want=3650, limit=112 [ 2042.852099][T28929] Buffer I/O error on dev loop1, logical block 3853, lost async page write [ 2042.916552][T10586] attempt to access beyond end of device [ 2042.952802][ T3096] Buffer I/O error on dev loop4, logical block 3649, lost async page write [ 2042.969695][T10586] loop2: rw=1, want=130, limit=112 [ 2043.032842][T28929] attempt to access beyond end of device [ 2043.072607][T10586] Buffer I/O error on dev loop2, logical block 129, lost async page write [ 2043.104575][ T3096] attempt to access beyond end of device [ 2043.120908][T28929] loop1: rw=1, want=3855, limit=112 [ 2043.151133][ T3096] loop4: rw=1, want=3651, limit=112 [ 2043.157362][T28929] Buffer I/O error on dev loop1, logical block 3854, lost async page write [ 2043.166463][T10586] attempt to access beyond end of device [ 2043.189428][ T3096] Buffer I/O error on dev loop4, logical block 3650, lost async page write [ 2043.202822][T10586] loop2: rw=1, want=131, limit=112 [ 2043.215999][T28929] attempt to access beyond end of device [ 2043.230984][T10586] attempt to access beyond end of device [ 2043.245040][ T3096] attempt to access beyond end of device [ 2043.254456][T28929] loop1: rw=1, want=3856, limit=112 [ 2043.268946][T10586] loop2: rw=1, want=132, limit=112 [ 2043.278493][ T3096] loop4: rw=1, want=3652, limit=112 [ 2043.283574][T28929] attempt to access beyond end of device [ 2043.283893][ T3096] attempt to access beyond end of device [ 2043.295540][ T3096] loop4: rw=1, want=3653, limit=112 17:11:02 executing program 3: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) 17:11:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee0f0000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:11:02 executing program 2: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:11:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) accept$netrom(0xffffffffffffff9c, &(0x7f0000000300)={{0x3, @default}, [@remote, @bcast, @bcast, @bcast, @bcast, @default, @null, @netrom]}, &(0x7f0000000380)=0x48) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) socket$inet(0x2, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3323, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 2043.300440][T10586] attempt to access beyond end of device [ 2043.300777][ T3096] attempt to access beyond end of device [ 2043.312136][ T3096] loop4: rw=1, want=3662, limit=112 [ 2043.317363][ T3096] attempt to access beyond end of device [ 2043.320451][T28929] loop1: rw=1, want=3857, limit=112 [ 2043.323065][ T3096] loop4: rw=1, want=3663, limit=112 [ 2043.323140][ T3096] attempt to access beyond end of device [ 2043.323159][ T3096] loop4: rw=1, want=3664, limit=112 [ 2043.351149][ T3096] attempt to access beyond end of device [ 2043.351866][T10586] loop2: rw=1, want=133, limit=112 [ 2043.356921][ T3096] loop4: rw=1, want=3665, limit=112 [ 2043.366992][T21942] attempt to access beyond end of device [ 2043.373634][ T3096] attempt to access beyond end of device [ 2043.379308][ T3096] loop4: rw=1, want=7761, limit=112 [ 2043.384856][T21942] loop3: rw=1, want=130, limit=112 [ 2043.388764][ T3096] attempt to access beyond end of device [ 2043.395874][ T3096] loop4: rw=1, want=8417, limit=112 [ 2043.404374][T10586] attempt to access beyond end of device [ 2043.417937][T28929] attempt to access beyond end of device [ 2043.423790][T21942] attempt to access beyond end of device [ 2043.438583][T10586] loop2: rw=1, want=142, limit=112 [ 2043.443921][T28929] loop1: rw=1, want=7953, limit=112 [ 2043.451525][T21942] loop3: rw=1, want=131, limit=112 [ 2043.462740][T10586] attempt to access beyond end of device [ 2043.471439][T21942] attempt to access beyond end of device [ 2043.486242][T10586] loop2: rw=1, want=143, limit=112 [ 2043.501124][T21942] loop3: rw=1, want=132, limit=112 [ 2043.519664][T28929] attempt to access beyond end of device [ 2043.526509][T10586] attempt to access beyond end of device [ 2043.534968][T21942] attempt to access beyond end of device [ 2043.554732][T10586] loop2: rw=1, want=144, limit=112 [ 2043.561147][T28929] loop1: rw=1, want=12049, limit=112 17:11:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2043.563044][T21942] loop3: rw=1, want=133, limit=112 [ 2043.582525][T10586] attempt to access beyond end of device [ 2043.605978][T10586] loop2: rw=1, want=145, limit=112 [ 2043.613618][T21942] attempt to access beyond end of device [ 2043.634220][T28929] attempt to access beyond end of device [ 2043.645806][T21942] loop3: rw=1, want=142, limit=112 [ 2043.670061][T28929] loop1: rw=1, want=16145, limit=112 [ 2043.675954][T21942] attempt to access beyond end of device [ 2043.683204][T10586] attempt to access beyond end of device [ 2043.703097][T21942] loop3: rw=1, want=143, limit=112 [ 2043.712337][T10586] loop2: rw=1, want=4241, limit=112 17:11:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2043.731560][T21942] attempt to access beyond end of device [ 2043.749978][T28929] attempt to access beyond end of device [ 2043.768184][T21942] loop3: rw=1, want=144, limit=112 [ 2043.771391][T10586] attempt to access beyond end of device [ 2043.779572][T28929] loop1: rw=1, want=20241, limit=112 [ 2043.791889][T10586] loop2: rw=1, want=8337, limit=112 [ 2043.801866][T21942] attempt to access beyond end of device [ 2043.819229][T28929] attempt to access beyond end of device [ 2043.830830][T21942] loop3: rw=1, want=145, limit=112 [ 2043.839753][T10586] attempt to access beyond end of device [ 2043.848175][T28929] loop1: rw=1, want=23041, limit=112 [ 2043.866897][T10586] loop2: rw=1, want=12433, limit=112 [ 2043.891005][T21942] attempt to access beyond end of device [ 2043.950728][T21942] loop3: rw=1, want=4241, limit=112 [ 2044.019338][T10586] attempt to access beyond end of device 17:11:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2044.120537][T10586] loop2: rw=1, want=16529, limit=112 [ 2044.171005][T21942] attempt to access beyond end of device [ 2044.180977][T10586] attempt to access beyond end of device [ 2044.201791][T10586] loop2: rw=1, want=20625, limit=112 [ 2044.371486][T21942] loop3: rw=1, want=8337, limit=112 [ 2044.408216][T10586] attempt to access beyond end of device [ 2044.469421][T10586] loop2: rw=1, want=22745, limit=112 [ 2044.543831][T10586] attempt to access beyond end of device [ 2044.552814][T21942] attempt to access beyond end of device [ 2044.589490][T21942] loop3: rw=1, want=12433, limit=112 [ 2044.597521][T10586] loop2: rw=1, want=22774, limit=112 [ 2044.634667][T10586] attempt to access beyond end of device [ 2044.656792][T10586] loop2: rw=1, want=22775, limit=112 [ 2044.662200][T10586] attempt to access beyond end of device [ 2044.667849][T10586] loop2: rw=1, want=22776, limit=112 [ 2044.673267][T10586] attempt to access beyond end of device [ 2044.678907][T10586] loop2: rw=1, want=22777, limit=112 [ 2044.684326][T10586] attempt to access beyond end of device [ 2044.689973][T10586] loop2: rw=1, want=22798, limit=112 [ 2044.695349][T10586] attempt to access beyond end of device [ 2044.697618][T21942] attempt to access beyond end of device [ 2044.700983][T10586] loop2: rw=1, want=22799, limit=112 [ 2044.701057][T10586] attempt to access beyond end of device [ 2044.717695][T10586] loop2: rw=1, want=22800, limit=112 [ 2044.723098][T10586] attempt to access beyond end of device [ 2044.728742][T10586] loop2: rw=1, want=22801, limit=112 17:11:03 executing program 4: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2044.734170][T10586] attempt to access beyond end of device [ 2044.740408][T10586] loop2: rw=1, want=22850, limit=112 [ 2044.742345][T28929] attempt to access beyond end of device [ 2044.745836][T10586] attempt to access beyond end of device [ 2044.752038][T28929] loop4: rw=1, want=130, limit=112 [ 2044.757117][T10586] loop2: rw=1, want=22851, limit=112 [ 2044.767405][T10586] attempt to access beyond end of device [ 2044.773115][T10586] loop2: rw=1, want=22852, limit=112 [ 2044.778454][T10586] attempt to access beyond end of device [ 2044.785371][T10586] loop2: rw=1, want=22853, limit=112 [ 2044.790716][T10586] attempt to access beyond end of device [ 2044.791861][T21942] loop3: rw=1, want=16529, limit=112 [ 2044.796503][T10586] loop2: rw=1, want=22862, limit=112 [ 2044.811598][T21942] attempt to access beyond end of device [ 2044.811804][T28929] attempt to access beyond end of device [ 2044.831904][T10586] attempt to access beyond end of device [ 2044.837554][T10586] loop2: rw=1, want=22863, limit=112 [ 2044.851799][T28929] loop4: rw=1, want=131, limit=112 [ 2044.852079][T21942] loop3: rw=1, want=19929, limit=112 [ 2044.856960][T28929] attempt to access beyond end of device [ 2044.867999][T10586] attempt to access beyond end of device [ 2044.881814][T10586] loop2: rw=1, want=22864, limit=112 [ 2044.887175][T10586] attempt to access beyond end of device [ 2044.891468][T21942] attempt to access beyond end of device [ 2044.892951][T28929] loop4: rw=1, want=132, limit=112 [ 2044.903800][T21942] loop3: rw=1, want=19958, limit=112 [ 2044.909148][T21942] attempt to access beyond end of device [ 2044.911791][T10586] loop2: rw=1, want=22865, limit=112 [ 2044.931836][T28929] attempt to access beyond end of device [ 2044.937514][T28929] loop4: rw=1, want=133, limit=112 [ 2044.951035][T21942] loop3: rw=1, want=19959, limit=112 [ 2044.956810][T10586] attempt to access beyond end of device [ 2044.956999][T21942] attempt to access beyond end of device [ 2044.962610][T28929] attempt to access beyond end of device [ 2044.962623][T28929] loop4: rw=1, want=142, limit=112 [ 2044.962659][T28929] attempt to access beyond end of device [ 2044.962682][T28929] loop4: rw=1, want=143, limit=112 [ 2044.962718][T28929] attempt to access beyond end of device [ 2044.988006][T21942] loop3: rw=1, want=19960, limit=112 [ 2045.001851][T10586] loop2: rw=1, want=26961, limit=112 [ 2045.022047][T21942] attempt to access beyond end of device [ 2045.027190][T10586] attempt to access beyond end of device [ 2045.027882][T21942] loop3: rw=1, want=19961, limit=112 [ 2045.041803][T28929] loop4: rw=1, want=144, limit=112 [ 2045.046978][T28929] attempt to access beyond end of device [ 2045.053977][T10586] loop2: rw=1, want=31057, limit=112 [ 2045.064482][T21942] attempt to access beyond end of device [ 2045.070173][T21942] loop3: rw=1, want=19982, limit=112 [ 2045.075797][T10586] attempt to access beyond end of device [ 2045.081456][T10586] loop2: rw=1, want=32993, limit=112 [ 2045.086848][T28929] loop4: rw=1, want=145, limit=112 [ 2045.096281][T21942] attempt to access beyond end of device [ 2045.098607][T28929] attempt to access beyond end of device [ 2045.120371][T21942] loop3: rw=1, want=19983, limit=112 [ 2045.127135][T28929] loop4: rw=1, want=4241, limit=112 [ 2045.141929][T21942] attempt to access beyond end of device [ 2045.147594][T21942] loop3: rw=1, want=19984, limit=112 [ 2045.161446][T28929] attempt to access beyond end of device [ 2045.175298][T21942] attempt to access beyond end of device [ 2045.180993][T21942] loop3: rw=1, want=19985, limit=112 [ 2045.201477][T28929] loop4: rw=1, want=8337, limit=112 [ 2045.201950][T21942] attempt to access beyond end of device [ 2045.222521][T28929] attempt to access beyond end of device [ 2045.228193][T28929] loop4: rw=1, want=10073, limit=112 [ 2045.229367][T21942] loop3: rw=1, want=20034, limit=112 [ 2045.243236][T28929] attempt to access beyond end of device [ 2045.248897][T28929] loop4: rw=1, want=10102, limit=112 [ 2045.261966][T28929] attempt to access beyond end of device [ 2045.267640][T28929] loop4: rw=1, want=10103, limit=112 [ 2045.273122][T21942] attempt to access beyond end of device [ 2045.278803][T21942] loop3: rw=1, want=20035, limit=112 [ 2045.301841][T28929] attempt to access beyond end of device [ 2045.307752][T21942] attempt to access beyond end of device [ 2045.313461][T28929] loop4: rw=1, want=10104, limit=112 [ 2045.318804][T28929] attempt to access beyond end of device [ 2045.325571][T21942] loop3: rw=1, want=20036, limit=112 [ 2045.330884][T21942] attempt to access beyond end of device [ 2045.365912][T28929] loop4: rw=1, want=10105, limit=112 [ 2045.374831][T21942] loop3: rw=1, want=20037, limit=112 [ 2045.393724][T28929] attempt to access beyond end of device [ 2045.402927][T21942] attempt to access beyond end of device [ 2045.425897][T28929] loop4: rw=1, want=10126, limit=112 [ 2045.432143][T21942] loop3: rw=1, want=20046, limit=112 [ 2045.454768][T28929] attempt to access beyond end of device [ 2045.464467][T21942] attempt to access beyond end of device [ 2045.491877][T28929] loop4: rw=1, want=10127, limit=112 [ 2045.502200][T21942] loop3: rw=1, want=20047, limit=112 [ 2045.525480][T28929] attempt to access beyond end of device [ 2045.535910][T21942] attempt to access beyond end of device [ 2045.566974][T21942] loop3: rw=1, want=20048, limit=112 [ 2045.598252][T21942] attempt to access beyond end of device [ 2045.620537][T28929] loop4: rw=1, want=10128, limit=112 [ 2045.637462][T21942] loop3: rw=1, want=20049, limit=112 [ 2045.651880][T28929] attempt to access beyond end of device [ 2045.681899][T28929] loop4: rw=1, want=10129, limit=112 [ 2045.703541][T21942] attempt to access beyond end of device [ 2045.715184][T28929] attempt to access beyond end of device [ 2045.737170][T21942] loop3: rw=1, want=24145, limit=112 [ 2045.747362][T28929] loop4: rw=1, want=10178, limit=112 [ 2045.772445][T28929] attempt to access beyond end of device [ 2045.796972][T21942] attempt to access beyond end of device [ 2045.809819][T28929] loop4: rw=1, want=10179, limit=112 [ 2045.829153][T21942] loop3: rw=1, want=26113, limit=112 [ 2045.838011][T28929] attempt to access beyond end of device [ 2045.867068][T28929] loop4: rw=1, want=10180, limit=112 [ 2045.906208][T28929] attempt to access beyond end of device [ 2045.936717][T28929] loop4: rw=1, want=10181, limit=112 [ 2045.967361][T28929] attempt to access beyond end of device [ 2046.001240][T28929] loop4: rw=1, want=10190, limit=112 [ 2046.029873][T28929] attempt to access beyond end of device [ 2046.060933][T28929] loop4: rw=1, want=10191, limit=112 [ 2046.090844][T28929] attempt to access beyond end of device [ 2046.108643][T28929] loop4: rw=1, want=10192, limit=112 [ 2046.115352][T28929] attempt to access beyond end of device [ 2046.121004][T28929] loop4: rw=1, want=10193, limit=112 17:11:05 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:11:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) accept$netrom(0xffffffffffffff9c, &(0x7f0000000300)={{0x3, @default}, [@remote, @bcast, @bcast, @bcast, @bcast, @default, @null, @netrom]}, &(0x7f0000000380)=0x48) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) socket$inet(0x2, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3323, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 17:11:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2046.145877][T28929] attempt to access beyond end of device [ 2046.151532][T28929] loop4: rw=1, want=14289, limit=112 [ 2046.176758][T21942] attempt to access beyond end of device [ 2046.191341][T28929] attempt to access beyond end of device [ 2046.191798][T21942] loop1: rw=1, want=130, limit=112 [ 2046.222162][T28929] loop4: rw=1, want=18385, limit=112 [ 2046.242690][T21942] attempt to access beyond end of device [ 2046.249134][T28929] attempt to access beyond end of device [ 2046.266312][T21942] loop1: rw=1, want=131, limit=112 [ 2046.302101][T21942] attempt to access beyond end of device [ 2046.307771][T21942] loop1: rw=1, want=132, limit=112 [ 2046.313843][T28929] loop4: rw=1, want=22481, limit=112 17:11:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2046.362943][T28929] attempt to access beyond end of device [ 2046.375075][T28929] loop4: rw=1, want=22833, limit=112 [ 2046.381158][T21942] attempt to access beyond end of device [ 2046.401915][T21942] loop1: rw=1, want=133, limit=112 [ 2046.407077][T21942] attempt to access beyond end of device [ 2046.446023][T21942] loop1: rw=1, want=142, limit=112 [ 2046.451202][T21942] attempt to access beyond end of device [ 2046.487516][T21942] loop1: rw=1, want=143, limit=112 [ 2046.531920][T21942] attempt to access beyond end of device [ 2046.537564][T21942] loop1: rw=1, want=144, limit=112 [ 2046.570364][T21942] attempt to access beyond end of device [ 2046.591862][T21942] loop1: rw=1, want=145, limit=112 [ 2046.623839][T21942] attempt to access beyond end of device [ 2046.629478][T21942] loop1: rw=1, want=4241, limit=112 [ 2046.659285][T21942] attempt to access beyond end of device [ 2046.681841][T21942] loop1: rw=1, want=4249, limit=112 [ 2046.687123][T21942] attempt to access beyond end of device [ 2046.721884][T21942] loop1: rw=1, want=4278, limit=112 [ 2046.727168][T21942] attempt to access beyond end of device [ 2046.746308][T21942] loop1: rw=1, want=4279, limit=112 [ 2046.751668][T21942] attempt to access beyond end of device [ 2046.801835][T21942] loop1: rw=1, want=4280, limit=112 [ 2046.807087][T21942] attempt to access beyond end of device [ 2046.913951][T21942] loop1: rw=1, want=4281, limit=112 [ 2046.919215][T21942] attempt to access beyond end of device [ 2047.026393][T21942] loop1: rw=1, want=4302, limit=112 [ 2047.055822][T21942] attempt to access beyond end of device [ 2047.087286][T21942] loop1: rw=1, want=4303, limit=112 [ 2047.121176][T21942] attempt to access beyond end of device [ 2047.144138][T21942] loop1: rw=1, want=4304, limit=112 [ 2047.187483][T21942] attempt to access beyond end of device [ 2047.194971][T21942] loop1: rw=1, want=4305, limit=112 [ 2047.212089][T21942] attempt to access beyond end of device [ 2047.217723][T21942] loop1: rw=1, want=4354, limit=112 [ 2047.224463][T21942] attempt to access beyond end of device [ 2047.230170][T21942] loop1: rw=1, want=4355, limit=112 [ 2047.235768][T21942] attempt to access beyond end of device [ 2047.241476][T21942] loop1: rw=1, want=4356, limit=112 [ 2047.248242][T21942] attempt to access beyond end of device [ 2047.265883][T21942] loop1: rw=1, want=4357, limit=112 [ 2047.278126][T21942] attempt to access beyond end of device [ 2047.290155][T21942] loop1: rw=1, want=4366, limit=112 [ 2047.301262][T21942] attempt to access beyond end of device [ 2047.318376][T21942] loop1: rw=1, want=4367, limit=112 [ 2047.349073][T21942] buffer_io_error: 100 callbacks suppressed [ 2047.349086][T21942] Buffer I/O error on dev loop1, logical block 4366, lost async page write [ 2047.445179][T21942] attempt to access beyond end of device [ 2047.476312][T21942] loop1: rw=1, want=4368, limit=112 [ 2047.507732][T21942] Buffer I/O error on dev loop1, logical block 4367, lost async page write [ 2047.576421][T21942] attempt to access beyond end of device [ 2047.582151][T21942] loop1: rw=1, want=4369, limit=112 [ 2047.587349][T21942] Buffer I/O error on dev loop1, logical block 4368, lost async page write [ 2047.602407][T21942] attempt to access beyond end of device [ 2047.608059][T21942] loop1: rw=1, want=8465, limit=112 17:11:06 executing program 3: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) 17:11:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:11:06 executing program 2: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:11:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) accept$netrom(0xffffffffffffff9c, &(0x7f0000000300)={{0x3, @default}, [@remote, @bcast, @bcast, @bcast, @bcast, @default, @null, @netrom]}, &(0x7f0000000380)=0x48) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) socket$inet(0x2, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3323, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 2047.623410][T21942] attempt to access beyond end of device [ 2047.635612][T21942] loop1: rw=1, want=12561, limit=112 [ 2047.652117][T21942] attempt to access beyond end of device [ 2047.657856][T21942] loop1: rw=1, want=16657, limit=112 [ 2047.672985][ T3096] attempt to access beyond end of device [ 2047.678651][ T3096] loop2: rw=1, want=130, limit=112 [ 2047.680910][T21942] attempt to access beyond end of device [ 2047.689639][T21942] loop1: rw=1, want=20753, limit=112 [ 2047.708868][T21942] attempt to access beyond end of device [ 2047.714881][T21942] loop1: rw=1, want=24849, limit=112 [ 2047.728103][ T3096] Buffer I/O error on dev loop2, logical block 129, lost async page write 17:11:07 executing program 3: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2048.878757][ T3096] attempt to access beyond end of device [ 2048.888303][ T3096] loop2: rw=1, want=131, limit=112 [ 2048.898884][T27989] attempt to access beyond end of device [ 2048.905180][T21942] attempt to access beyond end of device [ 2048.943247][T27989] loop3: rw=1, want=130, limit=112 17:11:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2048.972095][ T3096] Buffer I/O error on dev loop2, logical block 130, lost async page write [ 2048.990608][T21942] loop1: rw=1, want=25097, limit=112 [ 2049.007598][T27989] Buffer I/O error on dev loop3, logical block 129, lost async page write 17:11:08 executing program 4: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2049.054798][ T3096] attempt to access beyond end of device [ 2049.060443][ T3096] loop2: rw=1, want=132, limit=112 [ 2049.073437][T10586] attempt to access beyond end of device [ 2049.082349][T27989] attempt to access beyond end of device [ 2049.093462][T10586] loop4: rw=1, want=130, limit=112 17:11:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) accept$netrom(0xffffffffffffff9c, &(0x7f0000000300)={{0x3, @default}, [@remote, @bcast, @bcast, @bcast, @bcast, @default, @null, @netrom]}, &(0x7f0000000380)=0x48) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) socket$inet(0x2, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3323, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 2049.101883][ T3096] Buffer I/O error on dev loop2, logical block 131, lost async page write [ 2049.105725][T27989] loop3: rw=1, want=131, limit=112 [ 2049.110437][ T3096] attempt to access beyond end of device [ 2049.110448][ T3096] loop2: rw=1, want=133, limit=112 [ 2049.110461][ T3096] Buffer I/O error on dev loop2, logical block 132, lost async page write [ 2049.110489][ T3096] attempt to access beyond end of device [ 2049.124122][T10586] Buffer I/O error on dev loop4, logical block 129, lost async page write [ 2049.142354][T27989] Buffer I/O error on dev loop3, logical block 130, lost async page write [ 2049.160185][T10586] attempt to access beyond end of device [ 2049.160200][T10586] loop4: rw=1, want=131, limit=112 [ 2049.172115][T10586] attempt to access beyond end of device [ 2049.178048][T10586] loop4: rw=1, want=132, limit=112 [ 2049.184269][T27989] attempt to access beyond end of device [ 2049.193537][T10586] attempt to access beyond end of device [ 2049.201372][ T3096] loop2: rw=1, want=142, limit=112 [ 2049.207665][T27989] loop3: rw=1, want=132, limit=112 [ 2049.213595][T10586] loop4: rw=1, want=133, limit=112 [ 2049.219154][ T3096] attempt to access beyond end of device [ 2049.229253][T27989] attempt to access beyond end of device [ 2049.242861][T27989] loop3: rw=1, want=133, limit=112 [ 2049.244278][T10586] attempt to access beyond end of device [ 2049.254807][ T3096] loop2: rw=1, want=143, limit=112 [ 2049.271214][T27989] attempt to access beyond end of device [ 2049.271795][T10586] loop4: rw=1, want=142, limit=112 [ 2049.298497][ T3096] attempt to access beyond end of device [ 2049.306380][T27989] loop3: rw=1, want=142, limit=112 [ 2049.320839][T10586] attempt to access beyond end of device [ 2049.333228][ T3096] loop2: rw=1, want=144, limit=112 [ 2049.342500][T27989] attempt to access beyond end of device [ 2049.343743][T10586] loop4: rw=1, want=143, limit=112 [ 2049.369174][ T3096] attempt to access beyond end of device [ 2049.389836][T10586] attempt to access beyond end of device [ 2049.395626][T27989] loop3: rw=1, want=143, limit=112 [ 2049.400822][T27989] attempt to access beyond end of device [ 2049.407844][ T3096] loop2: rw=1, want=145, limit=112 [ 2049.418866][T10586] loop4: rw=1, want=144, limit=112 [ 2049.439963][ T3096] attempt to access beyond end of device [ 2049.453315][T10586] attempt to access beyond end of device [ 2049.459017][T10586] loop4: rw=1, want=145, limit=112 [ 2049.460223][ T3096] loop2: rw=1, want=2201, limit=112 [ 2049.464280][T27989] loop3: rw=1, want=144, limit=112 [ 2049.464366][T27989] attempt to access beyond end of device [ 2049.501662][ T3096] attempt to access beyond end of device [ 2049.506579][T10586] attempt to access beyond end of device [ 2049.520889][T27989] loop3: rw=1, want=145, limit=112 [ 2049.523447][ T3096] loop2: rw=1, want=2230, limit=112 [ 2049.537518][ T3096] attempt to access beyond end of device [ 2049.538525][T27989] attempt to access beyond end of device [ 2049.557075][ T3096] loop2: rw=1, want=2231, limit=112 [ 2049.561810][T10586] loop4: rw=1, want=4241, limit=112 [ 2049.577137][ T3096] attempt to access beyond end of device [ 2049.593083][T27989] loop3: rw=1, want=4241, limit=112 [ 2049.596140][ T3096] loop2: rw=1, want=2232, limit=112 [ 2049.607288][T10586] attempt to access beyond end of device [ 2049.620556][ T3096] attempt to access beyond end of device [ 2049.627400][T27989] attempt to access beyond end of device [ 2049.639613][ T3096] loop2: rw=1, want=2233, limit=112 [ 2049.641389][T10586] loop4: rw=1, want=8337, limit=112 [ 2049.659503][ T3096] attempt to access beyond end of device [ 2049.669520][T27989] loop3: rw=1, want=8337, limit=112 [ 2049.683822][ T3096] loop2: rw=1, want=2254, limit=112 [ 2049.689878][T10586] attempt to access beyond end of device [ 2049.701905][ T3096] attempt to access beyond end of device [ 2049.722090][ T3096] loop2: rw=1, want=2255, limit=112 [ 2049.726846][T27989] attempt to access beyond end of device [ 2049.739740][ T3096] attempt to access beyond end of device [ 2049.741319][T10586] loop4: rw=1, want=12433, limit=112 [ 2049.761120][T10586] attempt to access beyond end of device [ 2049.763512][ T3096] loop2: rw=1, want=2256, limit=112 [ 2049.766894][T27989] loop3: rw=1, want=12433, limit=112 [ 2049.791925][T10586] loop4: rw=1, want=16529, limit=112 [ 2049.800892][ T3096] attempt to access beyond end of device [ 2049.809131][T27989] attempt to access beyond end of device [ 2049.827225][ T3096] loop2: rw=1, want=2257, limit=112 [ 2049.827483][T10586] attempt to access beyond end of device [ 2049.841883][T27989] loop3: rw=1, want=16529, limit=112 [ 2049.851714][ T3096] attempt to access beyond end of device [ 2049.870993][ T3096] loop2: rw=1, want=2306, limit=112 [ 2049.877135][T27989] attempt to access beyond end of device [ 2049.891175][T10586] loop4: rw=1, want=20625, limit=112 [ 2049.894336][ T3096] attempt to access beyond end of device [ 2049.908192][T27989] loop3: rw=1, want=20625, limit=112 [ 2049.920781][ T3096] loop2: rw=1, want=2307, limit=112 [ 2049.930795][T10586] attempt to access beyond end of device [ 2049.932315][ T3096] attempt to access beyond end of device [ 2049.961043][T27989] attempt to access beyond end of device [ 2049.972253][ T3096] loop2: rw=1, want=2308, limit=112 [ 2049.990804][T27989] loop3: rw=1, want=24721, limit=112 [ 2050.002606][ T3096] attempt to access beyond end of device [ 2050.010747][T10586] loop4: rw=1, want=24721, limit=112 [ 2050.021293][ T3096] loop2: rw=1, want=2309, limit=112 [ 2050.038245][ T3096] attempt to access beyond end of device [ 2050.054149][T27989] attempt to access beyond end of device [ 2050.058246][ T3096] loop2: rw=1, want=2318, limit=112 [ 2050.059857][T27989] loop3: rw=1, want=28817, limit=112 [ 2050.073086][T10586] attempt to access beyond end of device [ 2050.088049][T27989] attempt to access beyond end of device [ 2050.088898][T10586] loop4: rw=1, want=28817, limit=112 [ 2050.102728][ T3096] attempt to access beyond end of device [ 2050.116377][ T3096] loop2: rw=1, want=2319, limit=112 [ 2050.133034][ T3096] attempt to access beyond end of device [ 2050.145446][T10586] attempt to access beyond end of device [ 2050.157264][ T3096] loop2: rw=1, want=2320, limit=112 [ 2050.170550][T10586] loop4: rw=1, want=32889, limit=112 [ 2050.179561][ T3096] attempt to access beyond end of device [ 2050.196949][T27989] loop3: rw=1, want=32889, limit=112 [ 2050.208918][ T3096] loop2: rw=1, want=2321, limit=112 [ 2050.288686][ T3096] attempt to access beyond end of device [ 2050.323719][ T3096] loop2: rw=1, want=6417, limit=112 [ 2050.400590][ T3096] attempt to access beyond end of device [ 2050.429274][ T3096] loop2: rw=1, want=10513, limit=112 [ 2050.492850][ T3096] attempt to access beyond end of device [ 2050.527163][ T3096] loop2: rw=1, want=14609, limit=112 [ 2050.596394][ T3096] attempt to access beyond end of device [ 2050.631856][ T3096] loop2: rw=1, want=16977, limit=112 17:11:09 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:11:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:11:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) accept$netrom(0xffffffffffffff9c, &(0x7f0000000300)={{0x3, @default}, [@remote, @bcast, @bcast, @bcast, @bcast, @default, @null, @netrom]}, &(0x7f0000000380)=0x48) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) socket$inet(0x2, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 2050.964101][ T3096] attempt to access beyond end of device [ 2050.969799][ T3096] loop1: rw=1, want=130, limit=112 [ 2050.997873][ T3096] attempt to access beyond end of device [ 2051.016772][ T3096] loop1: rw=1, want=131, limit=112 [ 2051.043720][ T3096] attempt to access beyond end of device [ 2051.083899][ T3096] loop1: rw=1, want=132, limit=112 [ 2051.089237][ T3096] attempt to access beyond end of device [ 2051.112243][ T3096] loop1: rw=1, want=133, limit=112 [ 2051.117388][ T3096] attempt to access beyond end of device 17:11:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2051.194340][ T3096] loop1: rw=1, want=142, limit=112 [ 2051.199495][ T3096] attempt to access beyond end of device [ 2051.219484][ T3096] loop1: rw=1, want=143, limit=112 [ 2051.242028][ T3096] attempt to access beyond end of device [ 2051.270081][ T3096] loop1: rw=1, want=144, limit=112 [ 2051.289330][ T3096] attempt to access beyond end of device [ 2051.307584][ T3096] loop1: rw=1, want=145, limit=112 [ 2051.384044][ T3096] attempt to access beyond end of device [ 2051.478404][ T3096] loop1: rw=1, want=3545, limit=112 [ 2051.588847][ T3096] attempt to access beyond end of device [ 2051.685449][ T3096] loop1: rw=1, want=3574, limit=112 17:11:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1002000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2051.758707][ T3096] attempt to access beyond end of device [ 2051.837591][ T3096] loop1: rw=1, want=3575, limit=112 [ 2051.898488][ T3096] attempt to access beyond end of device [ 2051.957289][ T3096] loop1: rw=1, want=3576, limit=112 17:11:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) accept$netrom(0xffffffffffffff9c, &(0x7f0000000300)={{0x3, @default}, [@remote, @bcast, @bcast, @bcast, @bcast, @default, @null, @netrom]}, &(0x7f0000000380)=0x48) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) socket$inet(0x2, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 2052.013287][ T3096] attempt to access beyond end of device [ 2052.018979][ T3096] loop1: rw=1, want=3577, limit=112 [ 2052.024362][ T3096] attempt to access beyond end of device [ 2052.030001][ T3096] loop1: rw=1, want=3598, limit=112 [ 2052.044135][ T3096] attempt to access beyond end of device [ 2052.049801][ T3096] loop1: rw=1, want=3599, limit=112 [ 2052.055378][ T3096] attempt to access beyond end of device [ 2052.061023][ T3096] loop1: rw=1, want=3600, limit=112 [ 2052.066383][ T3096] attempt to access beyond end of device [ 2052.072065][ T3096] loop1: rw=1, want=3601, limit=112 [ 2052.077328][ T3096] attempt to access beyond end of device [ 2052.083073][ T3096] loop1: rw=1, want=3650, limit=112 [ 2052.088316][ T3096] attempt to access beyond end of device [ 2052.109688][T10586] attempt to access beyond end of device [ 2052.111841][ T3096] loop1: rw=1, want=3651, limit=112 [ 2052.123089][T10586] loop3: rw=1, want=130, limit=112 [ 2052.128559][ T3096] attempt to access beyond end of device [ 2052.134418][ T3096] loop1: rw=1, want=3652, limit=112 [ 2052.139733][ T3096] attempt to access beyond end of device [ 2052.161868][ T3096] loop1: rw=1, want=3653, limit=112 [ 2052.167109][ T3096] attempt to access beyond end of device [ 2052.185608][T10586] attempt to access beyond end of device [ 2052.191244][T10586] loop3: rw=1, want=131, limit=112 [ 2052.215234][T10586] attempt to access beyond end of device [ 2052.220884][T10586] loop3: rw=1, want=132, limit=112 [ 2052.241826][ T3096] loop1: rw=1, want=3662, limit=112 [ 2052.247093][ T3096] attempt to access beyond end of device [ 2052.253284][T10586] attempt to access beyond end of device [ 2052.258968][T10586] loop3: rw=1, want=133, limit=112 [ 2052.272252][T10586] attempt to access beyond end of device [ 2052.277893][T10586] loop3: rw=1, want=142, limit=112 [ 2052.285579][ T3096] loop1: rw=1, want=3663, limit=112 [ 2052.290858][ T3096] attempt to access beyond end of device [ 2052.290874][ T3096] loop1: rw=1, want=3664, limit=112 [ 2053.361897][ T3096] buffer_io_error: 59 callbacks suppressed [ 2053.361909][ T3096] Buffer I/O error on dev loop1, logical block 3663, lost async page write [ 2053.431889][ T3096] attempt to access beyond end of device [ 2053.437583][ T3096] loop1: rw=1, want=3665, limit=112 [ 2053.438789][T10586] Buffer I/O error on dev loop3, logical block 141, lost async page write [ 2053.463505][ T3096] Buffer I/O error on dev loop1, logical block 3664, lost async page write [ 2053.561140][T10586] attempt to access beyond end of device [ 2053.625591][ T3096] attempt to access beyond end of device [ 2053.662996][T21942] attempt to access beyond end of device [ 2053.671847][T10586] loop3: rw=1, want=143, limit=112 [ 2053.677043][ T3096] loop1: rw=1, want=7761, limit=112 [ 2053.683918][T21942] loop4: rw=1, want=130, limit=112 [ 2053.691919][T10586] Buffer I/O error on dev loop3, logical block 142, lost async page write [ 2053.711085][T21942] Buffer I/O error on dev loop4, logical block 129, lost async page write [ 2053.712094][ T3096] attempt to access beyond end of device [ 2053.741863][T10586] attempt to access beyond end of device [ 2053.747548][T10586] loop3: rw=1, want=144, limit=112 [ 2053.753174][ T3096] loop1: rw=1, want=11857, limit=112 [ 2053.778788][ T3096] attempt to access beyond end of device [ 2053.784600][T10586] Buffer I/O error on dev loop3, logical block 143, lost async page write [ 2053.801903][T10586] attempt to access beyond end of device [ 2053.807566][T10586] loop3: rw=1, want=145, limit=112 [ 2053.820782][ T3096] loop1: rw=1, want=15953, limit=112 [ 2053.831905][T21942] attempt to access beyond end of device [ 2053.837553][T21942] loop4: rw=1, want=131, limit=112 [ 2053.880771][T10586] Buffer I/O error on dev loop3, logical block 144, lost async page write [ 2053.890015][ T3096] attempt to access beyond end of device [ 2053.898233][T21942] Buffer I/O error on dev loop4, logical block 130, lost async page write [ 2053.922703][ T3096] loop1: rw=1, want=20049, limit=112 17:11:13 executing program 2: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:11:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2200000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:11:13 executing program 4: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:11:13 executing program 3: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:11:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) accept$netrom(0xffffffffffffff9c, &(0x7f0000000300)={{0x3, @default}, [@remote, @bcast, @bcast, @bcast, @bcast, @default, @null, @netrom]}, &(0x7f0000000380)=0x48) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) socket$inet(0x2, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 2053.954266][T10586] attempt to access beyond end of device [ 2053.961930][T21942] attempt to access beyond end of device [ 2053.985050][T21942] loop4: rw=1, want=132, limit=112 [ 2053.990216][T21942] Buffer I/O error on dev loop4, logical block 131, lost async page write [ 2053.990354][ T3096] attempt to access beyond end of device [ 2054.004390][ T2262] attempt to access beyond end of device [ 2054.005048][T10586] loop3: rw=1, want=4241, limit=112 [ 2054.011098][ T2262] loop2: rw=1, want=130, limit=112 [ 2054.022343][T10586] attempt to access beyond end of device [ 2054.027991][T10586] loop3: rw=1, want=6425, limit=112 [ 2054.029624][ T2262] Buffer I/O error on dev loop2, logical block 129, lost async page write [ 2054.035311][T10586] attempt to access beyond end of device [ 2054.059343][T10586] loop3: rw=1, want=6454, limit=112 [ 2054.081807][ T3096] loop1: rw=1, want=22321, limit=112 [ 2054.084030][ T2262] attempt to access beyond end of device [ 2054.087520][T10586] attempt to access beyond end of device [ 2054.101448][T21942] attempt to access beyond end of device [ 2054.111519][T21942] loop4: rw=1, want=133, limit=112 [ 2054.131828][T10586] loop3: rw=1, want=6455, limit=112 [ 2054.137124][T10586] attempt to access beyond end of device [ 2054.138861][ T2262] loop2: rw=1, want=131, limit=112 [ 2054.151867][T21942] attempt to access beyond end of device [ 2054.157738][T21942] loop4: rw=1, want=142, limit=112 [ 2054.163323][ T2262] attempt to access beyond end of device 17:11:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2403000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2054.182268][T10586] loop3: rw=1, want=6456, limit=112 [ 2054.187580][T10586] attempt to access beyond end of device [ 2054.194844][T21942] attempt to access beyond end of device [ 2054.200483][T21942] loop4: rw=1, want=143, limit=112 [ 2054.211614][ T2262] loop2: rw=1, want=132, limit=112 [ 2054.218881][T10586] loop3: rw=1, want=6457, limit=112 [ 2054.228932][T21942] attempt to access beyond end of device [ 2054.245110][T10586] attempt to access beyond end of device [ 2054.250776][T10586] loop3: rw=1, want=6478, limit=112 [ 2054.254740][ T2262] attempt to access beyond end of device [ 2054.260337][T21942] loop4: rw=1, want=144, limit=112 [ 2054.289992][ T2262] loop2: rw=1, want=133, limit=112 [ 2054.306443][ T2262] attempt to access beyond end of device [ 2054.312520][T21942] attempt to access beyond end of device [ 2054.318180][T21942] loop4: rw=1, want=145, limit=112 [ 2054.325463][T10586] attempt to access beyond end of device [ 2054.329090][ T2262] loop2: rw=1, want=142, limit=112 [ 2054.331097][T10586] loop3: rw=1, want=6479, limit=112 [ 2054.331160][T10586] attempt to access beyond end of device [ 2054.362565][T21942] attempt to access beyond end of device [ 2054.368478][T21942] loop4: rw=1, want=4241, limit=112 [ 2054.371085][ T2262] attempt to access beyond end of device [ 2054.392444][T10586] loop3: rw=1, want=6480, limit=112 [ 2054.395528][ T2262] loop2: rw=1, want=143, limit=112 [ 2054.402169][T10586] attempt to access beyond end of device [ 2054.426855][ T2262] attempt to access beyond end of device [ 2054.433696][T21942] attempt to access beyond end of device [ 2054.439371][T21942] loop4: rw=1, want=8337, limit=112 [ 2054.445044][ T2262] loop2: rw=1, want=144, limit=112 [ 2054.453829][T10586] loop3: rw=1, want=6481, limit=112 [ 2054.459167][T10586] attempt to access beyond end of device [ 2054.464429][ T2262] attempt to access beyond end of device [ 2054.481795][T10586] loop3: rw=1, want=6530, limit=112 [ 2054.497598][T21942] attempt to access beyond end of device [ 2054.504083][T10586] attempt to access beyond end of device [ 2054.509727][T10586] loop3: rw=1, want=6531, limit=112 [ 2054.521172][ T2262] loop2: rw=1, want=145, limit=112 [ 2054.531858][T21942] loop4: rw=1, want=12433, limit=112 [ 2054.542267][T10586] attempt to access beyond end of device [ 2054.547972][T10586] loop3: rw=1, want=6532, limit=112 [ 2054.572251][T10586] attempt to access beyond end of device [ 2054.577958][T10586] loop3: rw=1, want=6533, limit=112 [ 2054.582818][ T2262] attempt to access beyond end of device [ 2054.585765][T21942] attempt to access beyond end of device [ 2054.588845][ T2262] loop2: rw=1, want=4241, limit=112 [ 2054.601919][T10586] attempt to access beyond end of device [ 2054.607571][T10586] loop3: rw=1, want=6542, limit=112 [ 2054.621862][T21942] loop4: rw=1, want=16529, limit=112 [ 2054.641120][ T2262] attempt to access beyond end of device [ 2054.641863][T10586] attempt to access beyond end of device [ 2054.658143][T21942] attempt to access beyond end of device [ 2054.671852][T10586] loop3: rw=1, want=6543, limit=112 [ 2054.677120][T10586] attempt to access beyond end of device [ 2054.679756][ T2262] loop2: rw=1, want=8337, limit=112 [ 2054.688820][T21942] loop4: rw=1, want=20625, limit=112 [ 2054.717763][T21942] attempt to access beyond end of device [ 2054.723565][T10586] loop3: rw=1, want=6544, limit=112 [ 2054.725942][ T2262] attempt to access beyond end of device [ 2054.728836][T10586] attempt to access beyond end of device [ 2054.751865][T21942] loop4: rw=1, want=24721, limit=112 [ 2054.761871][ T2262] loop2: rw=1, want=12433, limit=112 [ 2054.762343][T10586] loop3: rw=1, want=6545, limit=112 [ 2054.787344][T21942] attempt to access beyond end of device [ 2054.797095][ T2262] attempt to access beyond end of device [ 2054.799809][T10586] attempt to access beyond end of device [ 2054.821891][T10586] loop3: rw=1, want=10641, limit=112 [ 2054.830299][ T2262] loop2: rw=1, want=16529, limit=112 [ 2054.832185][T21942] loop4: rw=1, want=28817, limit=112 [ 2054.863658][T10586] attempt to access beyond end of device [ 2054.866301][ T2262] attempt to access beyond end of device [ 2054.869354][T10586] loop3: rw=1, want=14737, limit=112 [ 2054.882839][T21942] attempt to access beyond end of device [ 2054.888491][T21942] loop4: rw=1, want=32889, limit=112 [ 2054.898727][ T2262] loop2: rw=1, want=20625, limit=112 [ 2054.923544][ T2262] attempt to access beyond end of device [ 2054.929210][ T2262] loop2: rw=1, want=24721, limit=112 [ 2054.937574][T10586] attempt to access beyond end of device [ 2054.957036][T10586] loop3: rw=1, want=18833, limit=112 [ 2054.981339][ T2262] attempt to access beyond end of device [ 2054.987325][T10586] attempt to access beyond end of device [ 2055.001856][ T2262] loop2: rw=1, want=28817, limit=112 [ 2055.003151][T10586] loop3: rw=1, want=22929, limit=112 [ 2055.020836][ T2262] attempt to access beyond end of device [ 2055.025073][T10586] attempt to access beyond end of device [ 2055.041524][T10586] loop3: rw=1, want=24001, limit=112 [ 2055.051788][ T2262] loop2: rw=1, want=32889, limit=112 17:11:14 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:11:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c03000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:11:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) accept$netrom(0xffffffffffffff9c, &(0x7f0000000300)={{0x3, @default}, [@remote, @bcast, @bcast, @bcast, @bcast, @default, @null, @netrom]}, &(0x7f0000000380)=0x48) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) socket$inet(0x2, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 2055.840342][T10586] attempt to access beyond end of device [ 2055.863120][T10586] loop1: rw=1, want=130, limit=112 [ 2055.885657][T10586] attempt to access beyond end of device [ 2055.915783][T10586] loop1: rw=1, want=131, limit=112 [ 2055.940420][T10586] attempt to access beyond end of device [ 2055.970448][T10586] loop1: rw=1, want=132, limit=112 17:11:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2055.993870][T10586] attempt to access beyond end of device [ 2056.028421][T10586] loop1: rw=1, want=133, limit=112 [ 2056.081856][T10586] attempt to access beyond end of device [ 2056.087551][T10586] loop1: rw=1, want=142, limit=112 [ 2056.111441][T10586] attempt to access beyond end of device [ 2056.173416][T10586] loop1: rw=1, want=143, limit=112 [ 2056.209812][T10586] attempt to access beyond end of device [ 2056.244703][T10586] loop1: rw=1, want=144, limit=112 17:11:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2056.274922][T10586] attempt to access beyond end of device [ 2056.315313][T10586] loop1: rw=1, want=145, limit=112 [ 2056.386670][T10586] attempt to access beyond end of device [ 2056.420380][T10586] loop1: rw=1, want=4241, limit=112 17:11:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6400000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2056.494505][T10586] attempt to access beyond end of device [ 2056.531654][T10586] loop1: rw=1, want=8337, limit=112 [ 2056.630404][T10586] attempt to access beyond end of device [ 2056.675886][T10586] loop1: rw=1, want=11737, limit=112 [ 2056.805485][T10586] attempt to access beyond end of device [ 2056.856481][T10586] loop1: rw=1, want=11766, limit=112 [ 2056.861924][T10586] attempt to access beyond end of device [ 2056.882107][T10586] loop1: rw=1, want=11767, limit=112 [ 2057.113214][T10586] attempt to access beyond end of device [ 2057.174058][T10586] loop1: rw=1, want=11768, limit=112 [ 2057.225137][T10586] attempt to access beyond end of device [ 2057.265784][T10586] loop1: rw=1, want=11769, limit=112 [ 2057.285451][T10586] attempt to access beyond end of device [ 2057.303803][T10586] loop1: rw=1, want=11790, limit=112 [ 2057.322290][T10586] attempt to access beyond end of device [ 2057.348431][T10586] loop1: rw=1, want=11791, limit=112 [ 2057.353919][T10586] attempt to access beyond end of device [ 2057.359553][T10586] loop1: rw=1, want=11792, limit=112 [ 2057.364951][T10586] attempt to access beyond end of device [ 2057.364961][T10586] loop1: rw=1, want=11793, limit=112 [ 2057.365019][T10586] attempt to access beyond end of device [ 2057.374302][ T7] attempt to access beyond end of device [ 2057.375932][T10586] loop1: rw=1, want=11842, limit=112 [ 2057.381513][ T7] loop4: rw=1, want=130, limit=112 [ 2057.387248][T10586] attempt to access beyond end of device [ 2057.399238][ T7] attempt to access beyond end of device [ 2057.409481][ T7] loop4: rw=1, want=131, limit=112 [ 2057.443579][ T7] attempt to access beyond end of device [ 2057.449274][ T7] loop4: rw=1, want=132, limit=112 [ 2057.454762][T10586] loop1: rw=1, want=11843, limit=112 [ 2057.460116][T10586] attempt to access beyond end of device [ 2057.466535][ T7] attempt to access beyond end of device [ 2057.472607][T10586] loop1: rw=1, want=11844, limit=112 [ 2057.478014][ T7] loop4: rw=1, want=133, limit=112 [ 2057.483795][T10586] attempt to access beyond end of device [ 2057.489580][ T7] attempt to access beyond end of device [ 2057.496852][T10586] loop1: rw=1, want=11845, limit=112 [ 2057.502710][ T7] loop4: rw=1, want=142, limit=112 [ 2057.508070][T10586] attempt to access beyond end of device [ 2057.514599][ T7] attempt to access beyond end of device [ 2057.520463][T10586] loop1: rw=1, want=11854, limit=112 [ 2057.526389][ T7] loop4: rw=1, want=143, limit=112 [ 2057.532218][T10586] attempt to access beyond end of device [ 2057.538132][ T7] attempt to access beyond end of device [ 2057.544473][T10586] loop1: rw=1, want=11855, limit=112 [ 2057.549934][ T7] loop4: rw=1, want=144, limit=112 [ 2057.556002][T10586] attempt to access beyond end of device [ 2057.562552][ T7] attempt to access beyond end of device [ 2057.568425][T10586] loop1: rw=1, want=11856, limit=112 [ 2057.574481][ T7] loop4: rw=1, want=145, limit=112 [ 2057.579907][T10586] attempt to access beyond end of device [ 2057.592171][T10586] loop1: rw=1, want=11857, limit=112 [ 2057.600280][ T7] attempt to access beyond end of device [ 2057.610728][ T7] loop4: rw=1, want=4241, limit=112 [ 2057.618822][T10586] attempt to access beyond end of device [ 2057.629417][T10586] loop1: rw=1, want=15953, limit=112 [ 2057.643729][ T7] attempt to access beyond end of device [ 2057.657418][ T7] loop4: rw=1, want=8337, limit=112 [ 2057.665258][T10586] attempt to access beyond end of device [ 2057.675601][T10586] loop1: rw=1, want=20049, limit=112 [ 2057.695564][ T7] attempt to access beyond end of device [ 2057.718950][T10586] attempt to access beyond end of device [ 2057.727039][ T7] loop4: rw=1, want=12433, limit=112 [ 2057.746162][T10586] loop1: rw=1, want=22249, limit=112 [ 2057.786881][ T7] attempt to access beyond end of device [ 2057.812949][ T7] loop4: rw=1, want=16529, limit=112 [ 2057.859340][ T7] attempt to access beyond end of device [ 2057.894004][ T7] loop4: rw=1, want=17817, limit=112 [ 2057.912744][ T7] attempt to access beyond end of device [ 2057.924170][ T7] loop4: rw=1, want=17846, limit=112 [ 2057.935233][ T7] attempt to access beyond end of device [ 2057.946571][ T7] loop4: rw=1, want=17847, limit=112 [ 2057.957639][ T7] attempt to access beyond end of device [ 2057.963464][ T7] loop4: rw=1, want=17848, limit=112 [ 2057.968896][ T7] attempt to access beyond end of device [ 2057.974677][ T7] loop4: rw=1, want=17849, limit=112 [ 2057.980157][ T7] attempt to access beyond end of device [ 2057.986006][ T7] loop4: rw=1, want=17870, limit=112 [ 2057.991401][ T7] attempt to access beyond end of device [ 2057.997220][ T7] loop4: rw=1, want=17871, limit=112 [ 2058.002728][ T7] attempt to access beyond end of device [ 2058.008452][ T7] loop4: rw=1, want=17872, limit=112 [ 2058.014012][ T7] attempt to access beyond end of device [ 2058.019770][ T7] loop4: rw=1, want=17873, limit=112 [ 2058.025290][ T7] attempt to access beyond end of device [ 2058.031023][ T7] loop4: rw=1, want=17922, limit=112 [ 2058.037660][ T7] attempt to access beyond end of device [ 2058.049021][ T7] loop4: rw=1, want=17923, limit=112 [ 2058.060089][ T7] attempt to access beyond end of device [ 2058.071488][ T7] loop4: rw=1, want=17924, limit=112 [ 2058.083672][ T7] attempt to access beyond end of device [ 2058.095046][ T7] loop4: rw=1, want=17925, limit=112 [ 2058.110554][ T7] attempt to access beyond end of device [ 2058.127525][ T7] loop4: rw=1, want=17934, limit=112 [ 2058.145416][ T7] attempt to access beyond end of device [ 2058.157890][ T7] loop4: rw=1, want=17935, limit=112 [ 2058.169001][ T7] attempt to access beyond end of device [ 2058.187158][ T7] loop4: rw=1, want=17936, limit=112 [ 2058.205060][ T7] attempt to access beyond end of device [ 2058.225456][ T7] loop4: rw=1, want=17937, limit=112 [ 2058.265116][ T7] attempt to access beyond end of device [ 2058.270819][ T7] loop4: rw=1, want=22033, limit=112 17:11:17 executing program 2: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:11:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) accept$netrom(0xffffffffffffff9c, &(0x7f0000000300)={{0x3, @default}, [@remote, @bcast, @bcast, @bcast, @bcast, @default, @null, @netrom]}, &(0x7f0000000380)=0x48) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) socket$inet(0x2, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 17:11:17 executing program 3: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:11:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7803000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:11:17 executing program 4: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2058.310809][ T7] attempt to access beyond end of device [ 2058.320449][ T7] loop4: rw=1, want=23585, limit=112 17:11:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2060.390939][T21942] attempt to access beyond end of device [ 2060.420784][T21942] loop1: rw=1, want=130, limit=112 17:11:19 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:11:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) accept$netrom(0xffffffffffffff9c, &(0x7f0000000300)={{0x3, @default}, [@remote, @bcast, @bcast, @bcast, @bcast, @default, @null, @netrom]}, &(0x7f0000000380)=0x48) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) socket$inet(0x2, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 17:11:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8400000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2060.476189][T21942] buffer_io_error: 76 callbacks suppressed [ 2060.476198][T21942] Buffer I/O error on dev loop1, logical block 129, lost async page write 17:11:19 executing program 2: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2060.560296][T21942] attempt to access beyond end of device [ 2060.583644][T10586] attempt to access beyond end of device [ 2060.669587][T10586] loop2: rw=1, want=130, limit=112 [ 2060.727859][T21942] loop1: rw=1, want=131, limit=112 [ 2060.765861][T10586] Buffer I/O error on dev loop2, logical block 129, lost async page write 17:11:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cffffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2060.817444][T21942] Buffer I/O error on dev loop1, logical block 130, lost async page write [ 2060.859320][T10586] attempt to access beyond end of device [ 2060.865094][T10586] loop2: rw=1, want=131, limit=112 [ 2060.870231][T10586] Buffer I/O error on dev loop2, logical block 130, lost async page write [ 2061.186899][T21942] attempt to access beyond end of device [ 2061.228719][T10586] attempt to access beyond end of device [ 2061.290485][T21942] loop1: rw=1, want=132, limit=112 [ 2061.304842][T10586] loop2: rw=1, want=132, limit=112 [ 2061.310060][T10586] Buffer I/O error on dev loop2, logical block 131, lost async page write [ 2061.318764][T10586] attempt to access beyond end of device [ 2061.324548][T10586] loop2: rw=1, want=133, limit=112 [ 2061.329753][T10586] Buffer I/O error on dev loop2, logical block 132, lost async page write [ 2061.338369][T10586] attempt to access beyond end of device [ 2061.344101][T10586] loop2: rw=1, want=142, limit=112 [ 2061.344117][T10586] Buffer I/O error on dev loop2, logical block 141, lost async page write [ 2061.344169][T10586] attempt to access beyond end of device [ 2061.344200][T10586] loop2: rw=1, want=143, limit=112 [ 2061.344234][T10586] Buffer I/O error on dev loop2, logical block 142, lost async page write [ 2061.377407][T10586] attempt to access beyond end of device 17:11:20 executing program 4: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:11:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) accept$netrom(0xffffffffffffff9c, &(0x7f0000000300)={{0x3, @default}, [@remote, @bcast, @bcast, @bcast, @bcast, @default, @null, @netrom]}, &(0x7f0000000380)=0x48) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) socket$inet(0x2, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 2061.406495][T21942] Buffer I/O error on dev loop1, logical block 131, lost async page write [ 2061.425562][ T2262] attempt to access beyond end of device [ 2061.431197][ T2262] loop4: rw=1, want=130, limit=112 [ 2061.436641][T21942] attempt to access beyond end of device [ 2061.464479][T10586] loop2: rw=1, want=144, limit=112 [ 2061.472312][T21942] loop1: rw=1, want=133, limit=112 [ 2061.482156][ T2262] Buffer I/O error on dev loop4, logical block 129, lost async page write [ 2061.494791][T10586] attempt to access beyond end of device [ 2061.502997][T21942] attempt to access beyond end of device 17:11:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc203000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2061.524874][ T2262] attempt to access beyond end of device [ 2061.530727][T10586] loop2: rw=1, want=145, limit=112 [ 2061.538737][T21942] loop1: rw=1, want=142, limit=112 [ 2061.549888][ T2262] loop4: rw=1, want=131, limit=112 [ 2061.559117][T21942] attempt to access beyond end of device [ 2061.575445][ T2262] attempt to access beyond end of device [ 2061.582620][T10586] attempt to access beyond end of device [ 2061.589505][T21942] loop1: rw=1, want=143, limit=112 [ 2061.611843][ T2262] loop4: rw=1, want=132, limit=112 [ 2061.618282][T21942] attempt to access beyond end of device [ 2061.624521][T10586] loop2: rw=1, want=4241, limit=112 [ 2061.638159][ T2262] attempt to access beyond end of device [ 2061.648685][T21942] loop1: rw=1, want=144, limit=112 [ 2061.667850][ T2262] loop4: rw=1, want=133, limit=112 [ 2061.679044][T21942] attempt to access beyond end of device [ 2061.703573][T10586] attempt to access beyond end of device [ 2061.710618][ T2262] attempt to access beyond end of device [ 2061.720018][T21942] loop1: rw=1, want=145, limit=112 [ 2061.744886][ T2262] loop4: rw=1, want=142, limit=112 [ 2061.762141][T10586] loop2: rw=1, want=8337, limit=112 [ 2061.798575][ T2262] attempt to access beyond end of device [ 2061.817046][T21942] attempt to access beyond end of device [ 2061.847823][ T2262] loop4: rw=1, want=143, limit=112 [ 2061.865256][T21942] loop1: rw=1, want=4241, limit=112 [ 2061.876270][T10586] attempt to access beyond end of device [ 2061.885774][ T2262] attempt to access beyond end of device [ 2061.921806][T10586] loop2: rw=1, want=12433, limit=112 [ 2061.934039][ T2262] loop4: rw=1, want=144, limit=112 [ 2061.957757][ T2262] attempt to access beyond end of device [ 2061.969907][T21942] attempt to access beyond end of device [ 2061.992436][ T2262] loop4: rw=1, want=145, limit=112 [ 2062.004616][T21942] loop1: rw=1, want=8337, limit=112 [ 2062.014151][T10586] attempt to access beyond end of device [ 2062.067298][ T2262] attempt to access beyond end of device [ 2062.082130][T10586] loop2: rw=1, want=16529, limit=112 17:11:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xca02000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:11:21 executing program 5: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:11:21 executing program 3: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2062.114862][T21942] attempt to access beyond end of device [ 2062.121111][T21942] loop1: rw=1, want=12433, limit=112 [ 2062.126916][ T2262] loop4: rw=1, want=4241, limit=112 [ 2062.138266][T10586] attempt to access beyond end of device [ 2062.189527][T21942] attempt to access beyond end of device [ 2062.192002][T10586] loop2: rw=1, want=20625, limit=112 [ 2062.201638][T21942] loop1: rw=1, want=16529, limit=112 [ 2062.206525][ T2262] attempt to access beyond end of device [ 2062.237381][ T2262] loop4: rw=1, want=8337, limit=112 [ 2062.257879][T10586] attempt to access beyond end of device [ 2062.285787][T10586] loop2: rw=1, want=24721, limit=112 [ 2062.304665][ T2262] attempt to access beyond end of device [ 2062.339521][ T2262] loop4: rw=1, want=12433, limit=112 [ 2062.363570][T10586] attempt to access beyond end of device [ 2062.392396][T10586] loop2: rw=1, want=28817, limit=112 [ 2062.403941][ T2262] attempt to access beyond end of device 17:11:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd002000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2062.442864][T10586] attempt to access beyond end of device [ 2062.454115][ T2262] loop4: rw=1, want=13977, limit=112 [ 2062.460770][ T2262] attempt to access beyond end of device [ 2062.460793][T21942] attempt to access beyond end of device [ 2062.466530][ T2262] loop4: rw=1, want=14006, limit=112 [ 2062.477576][ T2262] attempt to access beyond end of device [ 2062.483515][ T2262] loop4: rw=1, want=14007, limit=112 [ 2062.488928][ T2262] attempt to access beyond end of device [ 2062.493123][T10586] loop2: rw=1, want=32889, limit=112 [ 2062.494698][ T2262] loop4: rw=1, want=14008, limit=112 [ 2062.505644][ T2262] attempt to access beyond end of device [ 2062.511383][ T2262] loop4: rw=1, want=14009, limit=112 [ 2062.517570][ T2262] attempt to access beyond end of device [ 2062.537498][ T2262] loop4: rw=1, want=14030, limit=112 [ 2062.545217][T21942] loop1: rw=1, want=20625, limit=112 [ 2062.554599][ T2262] attempt to access beyond end of device [ 2062.573172][ T2262] loop4: rw=1, want=14031, limit=112 [ 2062.597296][ T2262] attempt to access beyond end of device [ 2062.607121][T21942] attempt to access beyond end of device [ 2062.623070][ T2262] loop4: rw=1, want=14032, limit=112 [ 2062.631848][T21942] loop1: rw=1, want=24721, limit=112 [ 2062.645401][ T2262] attempt to access beyond end of device [ 2062.662978][ T2262] loop4: rw=1, want=14033, limit=112 [ 2062.693110][ T2262] attempt to access beyond end of device [ 2062.693943][T21942] attempt to access beyond end of device [ 2062.711838][ T2262] loop4: rw=1, want=14082, limit=112 [ 2062.717163][ T2262] attempt to access beyond end of device [ 2062.752712][ T2262] loop4: rw=1, want=14083, limit=112 [ 2062.758943][ T2262] attempt to access beyond end of device [ 2062.774121][ T2262] loop4: rw=1, want=14084, limit=112 [ 2062.797198][ T2262] attempt to access beyond end of device [ 2062.811889][T21942] loop1: rw=1, want=28817, limit=112 [ 2062.827895][ T2262] loop4: rw=1, want=14085, limit=112 [ 2062.875563][ T2262] attempt to access beyond end of device [ 2062.929977][ T2262] loop4: rw=1, want=14094, limit=112 [ 2062.940633][T21942] attempt to access beyond end of device [ 2062.976215][ T2262] attempt to access beyond end of device [ 2062.989668][T21942] loop1: rw=1, want=32889, limit=112 [ 2063.017413][ T2262] loop4: rw=1, want=14095, limit=112 [ 2063.052352][ T2262] attempt to access beyond end of device [ 2063.078808][ T2262] loop4: rw=1, want=14096, limit=112 [ 2063.104385][ T2262] attempt to access beyond end of device [ 2063.140876][ T2262] loop4: rw=1, want=14097, limit=112 [ 2063.205553][ T2262] attempt to access beyond end of device [ 2063.240583][ T2262] loop4: rw=1, want=18193, limit=112 [ 2063.319572][ T2262] attempt to access beyond end of device [ 2063.355725][ T2262] loop4: rw=1, want=21921, limit=112 [ 2063.594273][ T2262] attempt to access beyond end of device [ 2063.599950][ T2262] loop3: rw=1, want=130, limit=112 [ 2063.641802][ T2262] attempt to access beyond end of device [ 2063.647471][ T2262] loop3: rw=1, want=131, limit=112 [ 2063.670085][ T2262] attempt to access beyond end of device [ 2063.682119][ T2262] loop3: rw=1, want=132, limit=112 [ 2063.687333][ T2262] attempt to access beyond end of device [ 2063.722412][ T2262] loop3: rw=1, want=133, limit=112 [ 2063.727564][ T2262] attempt to access beyond end of device [ 2063.758669][ T2262] loop3: rw=1, want=142, limit=112 [ 2063.781455][ T2262] attempt to access beyond end of device [ 2063.809958][ T2262] loop3: rw=1, want=143, limit=112 [ 2063.815510][ T2262] attempt to access beyond end of device [ 2063.821147][ T2262] loop3: rw=1, want=144, limit=112 [ 2063.849633][ T2262] attempt to access beyond end of device [ 2063.870871][ T2262] loop3: rw=1, want=145, limit=112 [ 2063.907218][ T2262] attempt to access beyond end of device [ 2064.001106][ T2262] loop3: rw=1, want=4241, limit=112 [ 2064.064227][ T2262] attempt to access beyond end of device [ 2064.069977][ T2262] loop3: rw=1, want=5785, limit=112 [ 2064.156905][ T2262] attempt to access beyond end of device [ 2064.187075][ T2262] loop3: rw=1, want=5814, limit=112 [ 2064.216787][ T2262] attempt to access beyond end of device [ 2064.249311][ T2262] loop3: rw=1, want=5815, limit=112 [ 2064.279299][ T2262] attempt to access beyond end of device [ 2064.311398][ T2262] loop3: rw=1, want=5816, limit=112 [ 2064.340790][ T2262] attempt to access beyond end of device [ 2064.371865][ T2262] loop3: rw=1, want=5817, limit=112 [ 2064.403092][ T2262] attempt to access beyond end of device [ 2064.434164][ T2262] loop3: rw=1, want=5838, limit=112 [ 2064.464401][ T2262] attempt to access beyond end of device [ 2064.496848][ T2262] loop3: rw=1, want=5839, limit=112 [ 2064.520201][ T2262] attempt to access beyond end of device [ 2064.562229][ T2262] loop3: rw=1, want=5840, limit=112 [ 2064.581564][ T2262] attempt to access beyond end of device [ 2064.587426][ T2262] loop3: rw=1, want=5841, limit=112 [ 2064.592884][ T2262] attempt to access beyond end of device [ 2064.598599][ T2262] loop3: rw=1, want=5890, limit=112 [ 2064.604036][ T2262] attempt to access beyond end of device [ 2064.609752][ T2262] loop3: rw=1, want=5891, limit=112 [ 2064.615206][ T2262] attempt to access beyond end of device [ 2064.620928][ T2262] loop3: rw=1, want=5892, limit=112 [ 2064.626453][ T2262] attempt to access beyond end of device [ 2064.632266][ T2262] loop3: rw=1, want=5893, limit=112 [ 2064.637568][ T2262] attempt to access beyond end of device [ 2064.643361][ T2262] loop3: rw=1, want=5902, limit=112 [ 2064.648670][ T2262] attempt to access beyond end of device [ 2064.654608][ T2262] loop3: rw=1, want=5903, limit=112 [ 2064.659947][ T2262] attempt to access beyond end of device [ 2064.665745][ T2262] loop3: rw=1, want=5904, limit=112 [ 2064.671042][ T2262] attempt to access beyond end of device [ 2064.677924][ T2262] loop3: rw=1, want=5905, limit=112 [ 2064.690747][ T2262] attempt to access beyond end of device [ 2064.693939][ T3096] attempt to access beyond end of device [ 2064.696529][ T2262] loop3: rw=1, want=10001, limit=112 [ 2064.732424][ T2262] attempt to access beyond end of device [ 2064.738067][ T2262] loop3: rw=1, want=14097, limit=112 [ 2064.751437][ T3096] loop2: rw=1, want=130, limit=112 [ 2064.756674][ T3096] attempt to access beyond end of device [ 2064.781226][ T2262] attempt to access beyond end of device [ 2064.791916][ T3096] loop2: rw=1, want=131, limit=112 [ 2064.797102][ T3096] attempt to access beyond end of device [ 2064.831887][ T2262] loop3: rw=1, want=18193, limit=112 [ 2064.841780][ T3096] loop2: rw=1, want=132, limit=112 [ 2064.846927][ T3096] attempt to access beyond end of device [ 2064.877619][ T3096] loop2: rw=1, want=133, limit=112 [ 2064.889949][ T2262] attempt to access beyond end of device [ 2064.900357][ T3096] attempt to access beyond end of device [ 2064.916564][ T2262] loop3: rw=1, want=22289, limit=112 17:11:23 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:11:23 executing program 5: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:11:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd201000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:11:23 executing program 3: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:11:23 executing program 2: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2064.927209][ T3096] loop2: rw=1, want=142, limit=112 [ 2065.000909][ T3096] attempt to access beyond end of device [ 2065.041277][ T2262] attempt to access beyond end of device [ 2065.048393][ T2262] loop3: rw=1, want=24489, limit=112 [ 2065.065624][ T3096] loop2: rw=1, want=143, limit=112 [ 2065.245187][ T3096] attempt to access beyond end of device [ 2065.347722][ T3096] loop2: rw=1, want=144, limit=112 [ 2065.420853][ T3096] attempt to access beyond end of device [ 2065.478350][ T3096] loop2: rw=1, want=145, limit=112 [ 2065.483623][ T3096] buffer_io_error: 61 callbacks suppressed [ 2065.483633][ T3096] Buffer I/O error on dev loop2, logical block 144, lost async page write [ 2065.504731][ T3096] attempt to access beyond end of device [ 2065.510388][ T3096] loop2: rw=1, want=4241, limit=112 [ 2065.521556][ T3096] attempt to access beyond end of device [ 2065.527238][ T3096] loop2: rw=1, want=5977, limit=112 [ 2065.533841][ T3096] attempt to access beyond end of device [ 2065.539550][ T3096] loop2: rw=1, want=6006, limit=112 [ 2065.544836][ T3096] Buffer I/O error on dev loop2, logical block 6005, lost async page write [ 2065.554649][ T3096] attempt to access beyond end of device [ 2065.560297][ T3096] loop2: rw=1, want=6007, limit=112 [ 2065.565585][ T3096] Buffer I/O error on dev loop2, logical block 6006, lost async page write 17:11:24 executing program 4: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:11:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf003000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2065.574288][ T3096] attempt to access beyond end of device [ 2065.579924][ T3096] loop2: rw=1, want=6008, limit=112 [ 2065.585200][ T3096] Buffer I/O error on dev loop2, logical block 6007, lost async page write [ 2065.593884][ T3096] attempt to access beyond end of device [ 2065.599518][ T3096] loop2: rw=1, want=6009, limit=112 [ 2065.604791][ T3096] Buffer I/O error on dev loop2, logical block 6008, lost async page write [ 2065.613504][ T3096] attempt to access beyond end of device [ 2065.619180][ T3096] loop2: rw=1, want=6030, limit=112 [ 2065.657743][ T2262] attempt to access beyond end of device [ 2065.676488][ T2262] loop4: rw=1, want=130, limit=112 [ 2065.707633][ T3096] Buffer I/O error on dev loop2, logical block 6029, lost async page write [ 2065.723809][ T2262] Buffer I/O error on dev loop4, logical block 129, lost async page write [ 2065.785986][ T3096] attempt to access beyond end of device [ 2065.807543][ T2262] attempt to access beyond end of device [ 2065.856761][ T3096] loop2: rw=1, want=6031, limit=112 [ 2065.876751][ T2262] loop4: rw=1, want=131, limit=112 [ 2065.910119][ T3096] Buffer I/O error on dev loop2, logical block 6030, lost async page write [ 2065.936247][ T2262] Buffer I/O error on dev loop4, logical block 130, lost async page write 17:11:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2066.006388][ T3096] attempt to access beyond end of device [ 2066.028371][ T2262] attempt to access beyond end of device 17:11:25 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2066.068617][ T3096] loop2: rw=1, want=6032, limit=112 [ 2066.081581][ T2262] loop4: rw=1, want=132, limit=112 [ 2066.106840][ T3096] Buffer I/O error on dev loop2, logical block 6031, lost async page write [ 2066.123748][ T2262] attempt to access beyond end of device [ 2066.148125][ T3096] attempt to access beyond end of device [ 2066.151303][ T2262] loop4: rw=1, want=133, limit=112 17:11:25 executing program 5: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2066.171130][ T2262] attempt to access beyond end of device [ 2066.186509][ T3096] loop2: rw=1, want=6033, limit=112 17:11:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6ffffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2066.214836][ T3096] attempt to access beyond end of device [ 2066.214931][ T2262] loop4: rw=1, want=142, limit=112 [ 2066.385771][ T2262] attempt to access beyond end of device [ 2066.391408][ T2262] loop4: rw=1, want=143, limit=112 [ 2066.396618][ T2262] attempt to access beyond end of device [ 2066.402353][ T2262] loop4: rw=1, want=144, limit=112 [ 2066.407522][ T2262] attempt to access beyond end of device [ 2066.407532][ T2262] loop4: rw=1, want=145, limit=112 [ 2066.413321][ T2262] attempt to access beyond end of device 17:11:25 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2066.431203][ T3096] loop2: rw=1, want=6082, limit=112 [ 2066.443088][ T3096] attempt to access beyond end of device [ 2066.476966][ T3096] loop2: rw=1, want=6083, limit=112 [ 2066.480378][ T2262] loop4: rw=1, want=4241, limit=112 [ 2066.498834][ T3096] attempt to access beyond end of device 17:11:25 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xfffffffffffffffc, 0x600) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f00000000c0)=0x2, 0x4) bind$alg(r0, 0x0, 0xffffffffffffff91) write$P9_RLERROR(r1, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) ioctl$KVM_SET_CLOCK(r4, 0x4030ae7b, 0x0) r5 = accept4(r0, &(0x7f00000001c0)=@tipc=@name, &(0x7f0000000000)=0x80, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, 0x0, &(0x7f0000000280)) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000100)={{0x8}, 'port1\x00', 0x1, 0x0, 0x1, 0x0, 0x0, 0x18f, 0x0, 0x0, 0x2, 0x8}) sendmmsg(r3, 0x0, 0x0, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004006, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r6, 0x0) write$binfmt_misc(r6, &(0x7f0000000440)={'syz1'}, 0x1200e) 17:11:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2066.548096][ T3096] loop2: rw=1, want=6084, limit=112 [ 2066.560582][ T2262] attempt to access beyond end of device [ 2066.612155][ T3096] attempt to access beyond end of device [ 2066.617836][ T3096] loop2: rw=1, want=6085, limit=112 [ 2066.628734][ T2262] loop4: rw=1, want=8337, limit=112 [ 2066.667102][ T3096] attempt to access beyond end of device [ 2066.668862][ T2262] attempt to access beyond end of device [ 2066.695624][ T3096] loop2: rw=1, want=6094, limit=112 [ 2066.736468][ T2262] loop4: rw=1, want=8345, limit=112 [ 2066.766948][ T3096] attempt to access beyond end of device [ 2066.796547][ T2262] attempt to access beyond end of device [ 2066.809044][ T3096] loop2: rw=1, want=6095, limit=112 [ 2066.837449][ T2262] loop4: rw=1, want=8374, limit=112 [ 2066.847823][ T3096] attempt to access beyond end of device 17:11:25 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10) [ 2066.879715][ T2262] attempt to access beyond end of device [ 2066.891284][ T3096] loop2: rw=1, want=6096, limit=112 [ 2066.918786][ T2262] loop4: rw=1, want=8375, limit=112 [ 2066.925182][ T2262] attempt to access beyond end of device [ 2066.930857][ T2262] loop4: rw=1, want=8376, limit=112 [ 2066.936192][ T2262] attempt to access beyond end of device [ 2066.941945][ T2262] loop4: rw=1, want=8377, limit=112 [ 2066.947173][ T2262] attempt to access beyond end of device [ 2066.952886][ T2262] loop4: rw=1, want=8398, limit=112 [ 2066.958119][ T2262] attempt to access beyond end of device [ 2066.967388][ T3096] attempt to access beyond end of device [ 2066.973169][ T3096] loop2: rw=1, want=6097, limit=112 [ 2066.981855][ T2262] loop4: rw=1, want=8399, limit=112 [ 2066.987091][ T2262] attempt to access beyond end of device [ 2066.996595][ T3096] attempt to access beyond end of device [ 2067.002434][ T2262] loop4: rw=1, want=8400, limit=112 [ 2067.007714][ T3096] loop2: rw=1, want=10193, limit=112 [ 2067.013420][ T2262] attempt to access beyond end of device [ 2067.019881][ T2262] loop4: rw=1, want=8401, limit=112 [ 2067.025197][ T2262] attempt to access beyond end of device [ 2067.030833][ T2262] loop4: rw=1, want=8450, limit=112 [ 2067.065386][ T3096] attempt to access beyond end of device [ 2067.071047][ T3096] loop2: rw=1, want=14289, limit=112 [ 2067.076707][ T2262] attempt to access beyond end of device [ 2067.082451][ T2262] loop4: rw=1, want=8451, limit=112 [ 2067.087685][ T2262] attempt to access beyond end of device [ 2067.111923][ T2262] loop4: rw=1, want=8452, limit=112 [ 2067.119938][ T3096] attempt to access beyond end of device [ 2067.126342][ T2262] attempt to access beyond end of device [ 2067.140849][ T2262] loop4: rw=1, want=8453, limit=112 [ 2067.159983][ T3096] loop2: rw=1, want=18385, limit=112 [ 2067.174512][ T2262] attempt to access beyond end of device [ 2067.180162][ T2262] loop4: rw=1, want=8462, limit=112 [ 2067.185873][ T3096] attempt to access beyond end of device [ 2067.191913][ T2262] attempt to access beyond end of device [ 2067.197572][ T2262] loop4: rw=1, want=8463, limit=112 [ 2067.199774][ T3096] loop2: rw=1, want=22481, limit=112 [ 2067.202919][ T2262] attempt to access beyond end of device [ 2067.202932][ T2262] loop4: rw=1, want=8464, limit=112 [ 2067.202968][ T2262] attempt to access beyond end of device [ 2067.202978][ T2262] loop4: rw=1, want=8465, limit=112 [ 2067.209204][ T2262] attempt to access beyond end of device [ 2067.235937][ T2262] loop4: rw=1, want=12561, limit=112 [ 2067.254228][ T3096] attempt to access beyond end of device [ 2067.259278][ T2262] attempt to access beyond end of device [ 2067.266664][ T3096] loop2: rw=1, want=25801, limit=112 [ 2067.273662][ T2262] loop4: rw=1, want=16657, limit=112 [ 2067.307712][ T2262] attempt to access beyond end of device [ 2067.324782][ T2262] loop4: rw=1, want=20753, limit=112 [ 2067.384745][ T2262] attempt to access beyond end of device [ 2067.390391][ T2262] loop4: rw=1, want=21233, limit=112 17:11:27 executing program 3: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2068.038064][T21942] attempt to access beyond end of device [ 2068.051824][T21942] loop3: rw=1, want=130, limit=112 [ 2068.057018][T21942] attempt to access beyond end of device [ 2068.072191][T21942] loop3: rw=1, want=131, limit=112 [ 2068.077348][T21942] attempt to access beyond end of device [ 2068.112110][T21942] loop3: rw=1, want=132, limit=112 [ 2068.117267][T21942] attempt to access beyond end of device [ 2068.136534][T21942] loop3: rw=1, want=133, limit=112 [ 2068.155491][T21942] attempt to access beyond end of device [ 2068.180511][T21942] loop3: rw=1, want=142, limit=112 [ 2068.220731][T21942] attempt to access beyond end of device [ 2068.258809][T21942] loop3: rw=1, want=143, limit=112 [ 2068.321946][T21942] attempt to access beyond end of device [ 2068.375122][T21942] loop3: rw=1, want=144, limit=112 [ 2068.412667][T21942] attempt to access beyond end of device [ 2068.456299][T21942] loop3: rw=1, want=145, limit=112 [ 2068.505149][T21942] attempt to access beyond end of device [ 2068.510913][T21942] loop3: rw=1, want=2905, limit=112 [ 2068.518866][T21942] attempt to access beyond end of device [ 2068.524704][T21942] loop3: rw=1, want=2934, limit=112 [ 2068.530050][T21942] attempt to access beyond end of device [ 2068.535905][T21942] loop3: rw=1, want=2935, limit=112 [ 2068.541292][T21942] attempt to access beyond end of device [ 2068.547160][T21942] loop3: rw=1, want=2936, limit=112 [ 2068.552586][T21942] attempt to access beyond end of device [ 2068.558404][T21942] loop3: rw=1, want=2937, limit=112 [ 2068.563932][T21942] attempt to access beyond end of device [ 2068.569694][T21942] loop3: rw=1, want=2958, limit=112 [ 2068.575157][T21942] attempt to access beyond end of device [ 2068.580919][T21942] loop3: rw=1, want=2959, limit=112 [ 2068.586323][T21942] attempt to access beyond end of device [ 2068.592146][T21942] loop3: rw=1, want=2960, limit=112 [ 2068.597549][T21942] attempt to access beyond end of device [ 2068.604581][T21942] loop3: rw=1, want=2961, limit=112 [ 2068.625383][T21942] attempt to access beyond end of device [ 2068.651864][T21942] loop3: rw=1, want=3010, limit=112 [ 2068.685149][T21942] attempt to access beyond end of device [ 2068.704810][T21942] loop3: rw=1, want=3011, limit=112 [ 2068.721433][T21942] attempt to access beyond end of device [ 2068.752376][T21942] loop3: rw=1, want=3012, limit=112 [ 2068.779849][T21942] attempt to access beyond end of device [ 2068.804495][T21942] loop3: rw=1, want=3013, limit=112 [ 2068.827882][T21942] attempt to access beyond end of device [ 2068.848025][T21942] loop3: rw=1, want=3022, limit=112 [ 2068.866658][T21942] attempt to access beyond end of device [ 2068.896543][T21942] loop3: rw=1, want=3023, limit=112 [ 2068.901846][T21942] attempt to access beyond end of device [ 2068.907475][T21942] loop3: rw=1, want=3024, limit=112 [ 2068.912755][T21942] attempt to access beyond end of device [ 2068.918384][T21942] loop3: rw=1, want=3025, limit=112 [ 2068.929854][T21942] attempt to access beyond end of device [ 2068.935538][T21942] loop3: rw=1, want=7121, limit=112 [ 2068.950361][T21942] attempt to access beyond end of device [ 2068.956108][T21942] loop3: rw=1, want=11217, limit=112 [ 2068.970732][T21942] attempt to access beyond end of device [ 2068.976401][T21942] loop3: rw=1, want=15313, limit=112 [ 2068.986567][T21942] attempt to access beyond end of device [ 2068.992282][T21942] loop3: rw=1, want=16377, limit=112 [ 2069.029869][ T3096] attempt to access beyond end of device [ 2069.051876][ T3096] loop4: rw=1, want=130, limit=112 [ 2069.057046][ T3096] attempt to access beyond end of device [ 2069.080913][ T3096] loop4: rw=1, want=131, limit=112 [ 2069.090738][ T3096] attempt to access beyond end of device [ 2069.116711][ T3096] loop4: rw=1, want=132, limit=112 17:11:28 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000240)={@multicast1, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast1}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") 17:11:28 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:11:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:11:28 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10) 17:11:28 executing program 4: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2069.132286][ T3096] attempt to access beyond end of device [ 2069.153028][ T3096] loop4: rw=1, want=133, limit=112 [ 2069.158187][ T3096] attempt to access beyond end of device [ 2069.209015][ T3096] loop4: rw=1, want=142, limit=112 [ 2069.217314][ T3096] attempt to access beyond end of device [ 2069.239357][ T3096] loop4: rw=1, want=143, limit=112 [ 2069.259430][ T3096] attempt to access beyond end of device [ 2069.278943][ T3096] loop4: rw=1, want=144, limit=112 [ 2069.297503][ T3096] attempt to access beyond end of device [ 2069.331209][ T3096] loop4: rw=1, want=145, limit=112 17:11:28 executing program 5: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000280)=0x6) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) setxattr(0x0, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='\x01', 0x1, 0x2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x1) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000380)={0x401, 0x1, 0x1, r1}) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x400000000, 0x0, @local, 0x4}, 0x1c) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000240)=@srh, 0x8) sendmmsg(r3, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x1c00000000, 0x200) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040)=0x3, 0x4) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, &(0x7f0000904000)) [ 2069.420724][ T3096] attempt to access beyond end of device [ 2069.448455][ T3096] loop4: rw=1, want=4057, limit=112 [ 2069.490373][ T3096] attempt to access beyond end of device [ 2069.520188][ T3096] loop4: rw=1, want=4086, limit=112 17:11:28 executing program 2: mkdir(&(0x7f00000000c0)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000002c0)={0x220}) mknodat(r0, &(0x7f0000000140)='./control\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000003c0)='./control\x00', r0, &(0x7f0000000400)='./file0\x00', 0x0) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f00000008c0)='./control\x00', 0x0) [ 2069.551668][ T3096] attempt to access beyond end of device [ 2069.598745][ T3096] loop4: rw=1, want=4087, limit=112 17:11:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:11:28 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2069.667760][ T3096] attempt to access beyond end of device [ 2069.692016][ T3096] loop4: rw=1, want=4088, limit=112 [ 2069.727350][ T3096] attempt to access beyond end of device [ 2069.757600][ T3096] loop4: rw=1, want=4089, limit=112 17:11:28 executing program 2: mkdir(&(0x7f00000000c0)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000002c0)={0x220}) mknodat(r0, &(0x7f0000000140)='./control\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000003c0)='./control\x00', r0, &(0x7f0000000400)='./file0\x00', 0x0) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f00000008c0)='./control\x00', 0x0) [ 2069.800747][ T3096] attempt to access beyond end of device 17:11:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2069.853343][ T3096] loop4: rw=1, want=4110, limit=112 [ 2070.081318][ T3096] attempt to access beyond end of device [ 2070.139037][ T3096] loop4: rw=1, want=4111, limit=112 [ 2070.239508][ T3096] attempt to access beyond end of device [ 2070.328313][ T3096] loop4: rw=1, want=4112, limit=112 [ 2070.374747][ T3096] attempt to access beyond end of device [ 2070.380430][ T3096] loop4: rw=1, want=4113, limit=112 [ 2070.385762][ T3096] attempt to access beyond end of device [ 2070.391399][ T3096] loop4: rw=1, want=4162, limit=112 [ 2070.396786][ T3096] attempt to access beyond end of device [ 2070.402461][ T3096] loop4: rw=1, want=4163, limit=112 [ 2070.407684][ T3096] attempt to access beyond end of device [ 2070.413393][ T3096] loop4: rw=1, want=4164, limit=112 [ 2070.418615][ T3096] attempt to access beyond end of device [ 2070.424328][ T3096] loop4: rw=1, want=4165, limit=112 [ 2070.424373][ T3096] attempt to access beyond end of device [ 2070.424384][ T3096] loop4: rw=1, want=4174, limit=112 [ 2070.424421][ T3096] attempt to access beyond end of device [ 2070.629226][ T3096] loop4: rw=1, want=4175, limit=112 [ 2070.634723][ T3096] buffer_io_error: 76 callbacks suppressed [ 2070.634732][ T3096] Buffer I/O error on dev loop4, logical block 4174, lost async page write [ 2070.640911][ T3096] attempt to access beyond end of device [ 2070.655139][ T3096] loop4: rw=1, want=4176, limit=112 [ 2070.660533][ T3096] Buffer I/O error on dev loop4, logical block 4175, lost async page write [ 2070.669332][ T3096] attempt to access beyond end of device [ 2070.675073][ T3096] loop4: rw=1, want=4177, limit=112 [ 2070.675089][ T3096] Buffer I/O error on dev loop4, logical block 4176, lost async page write [ 2070.681556][ T3096] attempt to access beyond end of device [ 2070.694746][ T3096] loop4: rw=1, want=8273, limit=112 [ 2070.709833][ T3096] attempt to access beyond end of device [ 2070.715526][ T3096] loop4: rw=1, want=12369, limit=112 [ 2070.730889][ T3096] attempt to access beyond end of device [ 2070.736578][ T3096] loop4: rw=1, want=16465, limit=112 [ 2070.751856][ T3096] attempt to access beyond end of device [ 2070.757500][ T3096] loop4: rw=1, want=20561, limit=112 [ 2070.775237][ T3096] attempt to access beyond end of device 17:11:29 executing program 3: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:11:29 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:11:29 executing program 2: mkdir(&(0x7f00000000c0)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000002c0)={0x220}) mknodat(r0, &(0x7f0000000140)='./control\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000003c0)='./control\x00', r0, &(0x7f0000000400)='./file0\x00', 0x0) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f00000008c0)='./control\x00', 0x0) [ 2070.780881][ T3096] loop4: rw=1, want=21489, limit=112 17:11:29 executing program 5: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000280)=0x6) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) setxattr(0x0, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='\x01', 0x1, 0x2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x1) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000380)={0x401, 0x1, 0x1, r1}) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x400000000, 0x0, @local, 0x4}, 0x1c) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000240)=@srh, 0x8) sendmmsg(r3, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x1c00000000, 0x200) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040)=0x3, 0x4) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, &(0x7f0000904000)) [ 2070.822853][ T2262] attempt to access beyond end of device [ 2070.828502][ T2262] loop3: rw=1, want=130, limit=112 [ 2070.861248][ T2262] Buffer I/O error on dev loop3, logical block 129, lost async page write 17:11:29 executing program 2: mkdir(&(0x7f00000000c0)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000002c0)={0x220}) mknodat(r0, &(0x7f0000000140)='./control\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000003c0)='./control\x00', r0, &(0x7f0000000400)='./file0\x00', 0x0) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f00000008c0)='./control\x00', 0x0) [ 2070.931826][ T2262] attempt to access beyond end of device [ 2070.937465][ T2262] loop3: rw=1, want=131, limit=112 [ 2071.031808][ T2262] Buffer I/O error on dev loop3, logical block 130, lost async page write [ 2071.040370][ T2262] attempt to access beyond end of device [ 2071.085846][ T2262] loop3: rw=1, want=132, limit=112 [ 2071.116212][ T2262] Buffer I/O error on dev loop3, logical block 131, lost async page write [ 2071.174514][ T2262] attempt to access beyond end of device [ 2071.213823][ T2262] loop3: rw=1, want=133, limit=112 [ 2071.232562][ T2262] Buffer I/O error on dev loop3, logical block 132, lost async page write [ 2071.259100][ T2262] attempt to access beyond end of device [ 2071.278366][ T2262] loop3: rw=1, want=142, limit=112 [ 2071.294862][ T2262] Buffer I/O error on dev loop3, logical block 141, lost async page write [ 2071.322693][ T2262] attempt to access beyond end of device [ 2071.339791][ T2262] loop3: rw=1, want=143, limit=112 [ 2071.356346][ T2262] Buffer I/O error on dev loop3, logical block 142, lost async page write [ 2071.383075][ T2262] attempt to access beyond end of device [ 2071.401154][ T2262] loop3: rw=1, want=144, limit=112 [ 2071.417653][ T2262] Buffer I/O error on dev loop3, logical block 143, lost async page write [ 2071.446635][ T2262] attempt to access beyond end of device [ 2071.463797][ T2262] loop3: rw=1, want=145, limit=112 [ 2071.503541][ T2262] attempt to access beyond end of device [ 2071.523171][ T2262] loop3: rw=1, want=4241, limit=112 [ 2071.579827][ T2262] attempt to access beyond end of device [ 2071.598530][ T2262] loop3: rw=1, want=8337, limit=112 [ 2071.643782][ T2262] attempt to access beyond end of device [ 2071.669512][T21942] attempt to access beyond end of device [ 2071.675330][ T2262] loop3: rw=1, want=12433, limit=112 [ 2071.681873][T21942] loop1: rw=1, want=130, limit=112 [ 2071.713066][T21942] attempt to access beyond end of device [ 2071.727851][T21942] loop1: rw=1, want=131, limit=112 [ 2071.740747][ T2262] attempt to access beyond end of device [ 2071.748814][T21942] attempt to access beyond end of device [ 2071.759196][ T2262] loop3: rw=1, want=16529, limit=112 [ 2071.770585][T21942] loop1: rw=1, want=132, limit=112 [ 2071.798904][T21942] attempt to access beyond end of device [ 2071.839710][ T2262] attempt to access beyond end of device [ 2071.855612][T21942] loop1: rw=1, want=133, limit=112 [ 2071.909930][ T4364] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 2071.914182][T21942] attempt to access beyond end of device [ 2071.918579][ T4364] FAT-fs (loop4): Filesystem has been set read-only [ 2071.924749][ T2262] loop3: rw=1, want=17945, limit=112 [ 2071.931867][ T4364] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006641) [ 2071.944279][T21942] loop1: rw=1, want=142, limit=112 [ 2071.949442][T21942] attempt to access beyond end of device [ 2071.955249][T21942] loop1: rw=1, want=143, limit=112 [ 2071.960408][T21942] attempt to access beyond end of device [ 2071.966237][T21942] loop1: rw=1, want=144, limit=112 [ 2071.973113][ T2262] attempt to access beyond end of device [ 2071.976173][T21942] attempt to access beyond end of device [ 2071.978765][ T2262] loop3: rw=1, want=17974, limit=112 [ 2071.978809][ T2262] attempt to access beyond end of device [ 2071.978825][ T2262] loop3: rw=1, want=17975, limit=112 [ 2072.001075][ T2262] attempt to access beyond end of device 17:11:31 executing program 4: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:11:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:11:31 executing program 2: mkdir(&(0x7f00000000c0)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000002c0)={0x220}) mknodat(r0, &(0x7f0000000140)='./control\x00', 0x0, 0x0) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f00000008c0)='./control\x00', 0x0) 17:11:31 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:11:31 executing program 5: mkdir(&(0x7f00000000c0)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000002c0)={0x220}) mknodat(r0, &(0x7f0000000140)='./control\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000003c0)='./control\x00', r0, &(0x7f0000000400)='./file0\x00', 0x0) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f00000008c0)='./control\x00', 0x0) [ 2072.006795][ T2262] loop3: rw=1, want=17976, limit=112 [ 2072.006839][ T2262] attempt to access beyond end of device [ 2072.006851][ T2262] loop3: rw=1, want=17977, limit=112 [ 2072.006888][ T2262] attempt to access beyond end of device [ 2072.037029][T21942] loop1: rw=1, want=145, limit=112 [ 2072.046639][ T2262] loop3: rw=1, want=17998, limit=112 [ 2072.070403][ T2262] attempt to access beyond end of device [ 2072.086584][T21942] attempt to access beyond end of device [ 2072.097522][ T2262] loop3: rw=1, want=17999, limit=112 [ 2072.107557][T21942] loop1: rw=1, want=1177, limit=112 [ 2072.116540][ T2262] attempt to access beyond end of device [ 2072.130225][T21942] attempt to access beyond end of device [ 2072.143356][ T2262] loop3: rw=1, want=18000, limit=112 [ 2072.165872][T21942] loop1: rw=1, want=1206, limit=112 17:11:31 executing program 2: mkdir(&(0x7f00000000c0)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000002c0)={0x220}) renameat2(r0, &(0x7f00000003c0)='./control\x00', r0, &(0x7f0000000400)='./file0\x00', 0x0) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f00000008c0)='./control\x00', 0x0) 17:11:31 executing program 5: mkdir(&(0x7f00000000c0)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000002c0)={0x220}) mknodat(r0, &(0x7f0000000140)='./control\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000003c0)='./control\x00', r0, &(0x7f0000000400)='./file0\x00', 0x0) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f00000008c0)='./control\x00', 0x0) [ 2072.177158][ T2262] attempt to access beyond end of device [ 2072.202111][T21942] attempt to access beyond end of device [ 2072.213534][ T2262] loop3: rw=1, want=18001, limit=112 [ 2072.224995][T21942] loop1: rw=1, want=1207, limit=112 [ 2072.232678][ T2262] attempt to access beyond end of device [ 2072.236021][ T8024] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006641) [ 2072.245723][T21942] attempt to access beyond end of device [ 2072.258561][ T2262] loop3: rw=1, want=18050, limit=112 [ 2072.273358][T21942] loop1: rw=1, want=1208, limit=112 [ 2072.282751][ T2262] attempt to access beyond end of device [ 2072.296143][T21942] attempt to access beyond end of device [ 2072.305415][ T2262] loop3: rw=1, want=18051, limit=112 [ 2072.314583][T21942] loop1: rw=1, want=1209, limit=112 [ 2072.322283][ T2262] attempt to access beyond end of device [ 2072.331246][T21942] attempt to access beyond end of device [ 2072.340509][ T2262] loop3: rw=1, want=18052, limit=112 [ 2072.356422][T21942] loop1: rw=1, want=1230, limit=112 [ 2072.364161][ T2262] attempt to access beyond end of device [ 2072.375594][ T2262] loop3: rw=1, want=18053, limit=112 [ 2072.377682][T21942] attempt to access beyond end of device [ 2072.390168][ T2262] attempt to access beyond end of device [ 2072.400061][ T2262] loop3: rw=1, want=18062, limit=112 [ 2072.400295][T21942] loop1: rw=1, want=1231, limit=112 [ 2072.409676][ T2262] attempt to access beyond end of device [ 2072.418267][T21942] attempt to access beyond end of device [ 2072.427952][ T2262] loop3: rw=1, want=18063, limit=112 [ 2072.440779][ T2262] attempt to access beyond end of device [ 2072.441996][T21942] loop1: rw=1, want=1232, limit=112 [ 2072.460941][ T2262] loop3: rw=1, want=18064, limit=112 [ 2072.466904][ T2262] attempt to access beyond end of device [ 2072.481317][ T2262] loop3: rw=1, want=18065, limit=112 [ 2072.501206][ T2262] attempt to access beyond end of device [ 2072.507809][ T2262] loop3: rw=1, want=22161, limit=112 [ 2072.564042][ T2262] attempt to access beyond end of device [ 2072.569684][ T2262] loop3: rw=1, want=22465, limit=112 [ 2072.629902][T21942] attempt to access beyond end of device [ 2072.662053][T21942] loop1: rw=1, want=1233, limit=112 [ 2072.667352][T21942] attempt to access beyond end of device [ 2072.760360][T21942] loop1: rw=1, want=1282, limit=112 [ 2072.780160][T21942] attempt to access beyond end of device [ 2072.810393][T21942] loop1: rw=1, want=1283, limit=112 [ 2072.816025][T21942] attempt to access beyond end of device [ 2072.821669][T21942] loop1: rw=1, want=1284, limit=112 [ 2072.859138][T21942] attempt to access beyond end of device [ 2072.891857][T21942] loop1: rw=1, want=1285, limit=112 [ 2072.897116][T21942] attempt to access beyond end of device [ 2072.949164][T21942] loop1: rw=1, want=1294, limit=112 [ 2072.961939][T21942] attempt to access beyond end of device [ 2072.967587][T21942] loop1: rw=1, want=1295, limit=112 [ 2073.010333][T21942] attempt to access beyond end of device [ 2073.024767][T21942] loop1: rw=1, want=1296, limit=112 [ 2073.055228][T21942] attempt to access beyond end of device [ 2073.087582][T21942] loop1: rw=1, want=1297, limit=112 [ 2073.145360][T21942] attempt to access beyond end of device [ 2073.173175][T21942] loop1: rw=1, want=5273, limit=112 [ 2073.263555][ T3096] attempt to access beyond end of device [ 2073.269207][ T3096] loop4: rw=1, want=130, limit=112 [ 2073.283564][ T3096] attempt to access beyond end of device [ 2073.289717][ T3096] loop4: rw=1, want=131, limit=112 [ 2073.301164][ T3096] attempt to access beyond end of device [ 2073.310270][ T3096] loop4: rw=1, want=132, limit=112 [ 2073.328421][ T3096] attempt to access beyond end of device [ 2073.340559][ T3096] loop4: rw=1, want=133, limit=112 [ 2073.357365][ T3096] attempt to access beyond end of device [ 2073.388763][ T3096] loop4: rw=1, want=142, limit=112 [ 2073.402688][ T3096] attempt to access beyond end of device [ 2073.414086][ T3096] loop4: rw=1, want=143, limit=112 [ 2073.426506][ T3096] attempt to access beyond end of device [ 2073.437989][ T3096] loop4: rw=1, want=144, limit=112 [ 2073.461634][ T3096] attempt to access beyond end of device [ 2073.475792][ T3096] loop4: rw=1, want=145, limit=112 [ 2073.500563][ T3096] attempt to access beyond end of device [ 2073.512162][ T3096] loop4: rw=1, want=3161, limit=112 [ 2073.529254][ T3096] attempt to access beyond end of device [ 2073.640946][ T3096] loop4: rw=1, want=3190, limit=112 [ 2073.693388][ T3096] attempt to access beyond end of device [ 2073.787673][ T3096] loop4: rw=1, want=3191, limit=112 [ 2073.826600][ T3096] attempt to access beyond end of device [ 2073.971834][ T3096] loop4: rw=1, want=3192, limit=112 [ 2073.997726][ T3096] attempt to access beyond end of device [ 2074.026430][ T3096] loop4: rw=1, want=3193, limit=112 [ 2074.062145][ T3096] attempt to access beyond end of device [ 2074.098566][ T3096] loop4: rw=1, want=3214, limit=112 [ 2074.134484][ T3096] attempt to access beyond end of device [ 2074.161663][ T3096] loop4: rw=1, want=3215, limit=112 [ 2074.187968][ T3096] attempt to access beyond end of device [ 2074.204627][T21942] attempt to access beyond end of device [ 2074.210559][T21942] loop1: rw=1, want=130, limit=112 [ 2074.224309][ T3096] loop4: rw=1, want=3216, limit=112 [ 2074.239712][T21942] attempt to access beyond end of device [ 2074.253648][ T3096] attempt to access beyond end of device [ 2074.267842][T21942] loop1: rw=1, want=131, limit=112 [ 2074.279005][ T3096] loop4: rw=1, want=3217, limit=112 [ 2074.289740][T21942] attempt to access beyond end of device [ 2074.295509][T21942] loop1: rw=1, want=132, limit=112 [ 2074.300662][T21942] attempt to access beyond end of device [ 2074.306402][T21942] loop1: rw=1, want=133, limit=112 [ 2074.311544][T21942] attempt to access beyond end of device [ 2074.313604][ T3096] attempt to access beyond end of device [ 2074.317244][T21942] loop1: rw=1, want=142, limit=112 [ 2074.328039][T21942] attempt to access beyond end of device [ 2074.333771][T21942] loop1: rw=1, want=143, limit=112 17:11:33 executing program 5: mkdir(&(0x7f00000000c0)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000002c0)={0x220}) mknodat(r0, &(0x7f0000000140)='./control\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000003c0)='./control\x00', r0, &(0x7f0000000400)='./file0\x00', 0x0) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f00000008c0)='./control\x00', 0x0) 17:11:33 executing program 2: mkdir(&(0x7f00000000c0)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000140)='./control\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000003c0)='./control\x00', r0, &(0x7f0000000400)='./file0\x00', 0x0) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f00000008c0)='./control\x00', 0x0) 17:11:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:11:33 executing program 3: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:11:33 executing program 4: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:11:33 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2074.338928][T21942] attempt to access beyond end of device [ 2074.351073][T21942] loop1: rw=1, want=144, limit=112 [ 2074.356472][ T3096] loop4: rw=1, want=3266, limit=112 [ 2074.358858][T10586] attempt to access beyond end of device [ 2074.362157][T21942] attempt to access beyond end of device [ 2074.373350][ T3096] attempt to access beyond end of device [ 2074.385030][ T3096] loop4: rw=1, want=3267, limit=112 [ 2074.391431][T10586] loop3: rw=1, want=130, limit=112 [ 2074.391696][T21942] loop1: rw=1, want=145, limit=112 [ 2074.402735][ T3096] attempt to access beyond end of device [ 2074.412410][T10586] attempt to access beyond end of device [ 2074.418994][ T3096] loop4: rw=1, want=3268, limit=112 [ 2074.432662][T21942] attempt to access beyond end of device [ 2074.441526][ T3096] attempt to access beyond end of device [ 2074.447611][T21942] loop1: rw=1, want=985, limit=112 [ 2074.453104][ T3096] loop4: rw=1, want=3269, limit=112 [ 2074.458964][T10586] loop3: rw=1, want=131, limit=112 [ 2074.459389][T21942] attempt to access beyond end of device [ 2074.470326][ T3096] attempt to access beyond end of device [ 2074.477242][T21942] loop1: rw=1, want=1014, limit=112 [ 2074.482729][ T3096] loop4: rw=1, want=3278, limit=112 17:11:33 executing program 2: mkdir(&(0x7f00000000c0)='./control\x00', 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000140)='./control\x00', 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000003c0)='./control\x00', 0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x0) linkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f00000008c0)='./control\x00', 0x0) [ 2074.488125][T21942] attempt to access beyond end of device [ 2074.492617][T10586] attempt to access beyond end of device [ 2074.493995][ T3096] attempt to access beyond end of device [ 2074.505271][T21942] loop1: rw=1, want=1015, limit=112 [ 2074.507384][T10586] loop3: rw=1, want=132, limit=112 [ 2074.510638][T21942] attempt to access beyond end of device [ 2074.521512][ T3096] loop4: rw=1, want=3279, limit=112 [ 2074.528337][T21942] loop1: rw=1, want=1016, limit=112 17:11:33 executing program 5: mkdir(&(0x7f00000000c0)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000002c0)={0x220}) mknodat(r0, &(0x7f0000000140)='./control\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000003c0)='./control\x00', r0, &(0x7f0000000400)='./file0\x00', 0x0) [ 2074.538091][ T3096] attempt to access beyond end of device [ 2074.546772][T21942] attempt to access beyond end of device [ 2074.552908][T10586] attempt to access beyond end of device [ 2074.558889][ T3096] loop4: rw=1, want=3280, limit=112 [ 2074.574677][T21942] loop1: rw=1, want=1017, limit=112 [ 2074.580438][T21942] attempt to access beyond end of device [ 2074.591929][T10586] loop3: rw=1, want=133, limit=112 [ 2074.597128][T10586] attempt to access beyond end of device [ 2074.622479][ T3096] attempt to access beyond end of device [ 2074.628223][ T3096] loop4: rw=1, want=3281, limit=112 17:11:33 executing program 2: r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000140)='./control\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000003c0)='./control\x00', r0, &(0x7f0000000400)='./file0\x00', 0x0) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f00000008c0)='./control\x00', 0x0) [ 2074.640131][T21942] loop1: rw=1, want=1038, limit=112 [ 2074.647981][T10586] loop3: rw=1, want=142, limit=112 [ 2074.663648][T21942] attempt to access beyond end of device [ 2074.667280][T10586] attempt to access beyond end of device [ 2074.678849][ T3096] attempt to access beyond end of device [ 2074.688061][ T3096] loop4: rw=1, want=7377, limit=112 [ 2074.694437][T10586] loop3: rw=1, want=143, limit=112 [ 2074.699947][T10586] attempt to access beyond end of device [ 2074.700413][T21942] loop1: rw=1, want=1039, limit=112 [ 2074.723737][T10586] loop3: rw=1, want=144, limit=112 [ 2074.729005][T21942] attempt to access beyond end of device [ 2074.737282][T21942] loop1: rw=1, want=1040, limit=112 17:11:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:11:33 executing program 5: mkdir(&(0x7f00000000c0)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000002c0)={0x220}) renameat2(r0, &(0x7f00000003c0)='./control\x00', r0, &(0x7f0000000400)='./file0\x00', 0x0) [ 2074.740682][ T3096] attempt to access beyond end of device [ 2074.752347][T10586] attempt to access beyond end of device [ 2074.761269][ T3096] loop4: rw=1, want=11473, limit=112 [ 2074.773721][T21942] attempt to access beyond end of device [ 2074.780111][T10586] loop3: rw=1, want=145, limit=112 [ 2074.796882][T21942] loop1: rw=1, want=1041, limit=112 [ 2074.798881][ T3096] attempt to access beyond end of device [ 2074.820514][T21942] attempt to access beyond end of device [ 2074.828245][T10586] attempt to access beyond end of device 17:11:33 executing program 2: mkdir(0x0, 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000140)='./control\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000003c0)='./control\x00', r0, &(0x7f0000000400)='./file0\x00', 0x0) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f00000008c0)='./control\x00', 0x0) 17:11:33 executing program 5: mkdir(&(0x7f00000000c0)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000140)='./control\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000003c0)='./control\x00', r0, &(0x7f0000000400)='./file0\x00', 0x0) [ 2074.847164][T21942] loop1: rw=1, want=1090, limit=112 [ 2074.855536][T10586] loop3: rw=1, want=4241, limit=112 [ 2074.870883][T10586] attempt to access beyond end of device [ 2074.876633][ T3096] loop4: rw=1, want=15049, limit=112 [ 2074.891583][T21942] attempt to access beyond end of device [ 2074.902083][T21942] loop1: rw=1, want=1091, limit=112 [ 2074.907340][T21942] attempt to access beyond end of device [ 2074.907359][T21942] loop1: rw=1, want=1092, limit=112 [ 2074.926341][T10586] loop3: rw=1, want=8337, limit=112 [ 2074.937561][T21942] attempt to access beyond end of device [ 2074.950994][T10586] attempt to access beyond end of device [ 2074.962236][T21942] loop1: rw=1, want=1093, limit=112 [ 2074.967507][T21942] attempt to access beyond end of device [ 2074.981841][T10586] loop3: rw=1, want=8409, limit=112 [ 2074.987260][T10586] attempt to access beyond end of device [ 2074.993783][T10586] loop3: rw=1, want=8438, limit=112 [ 2074.999034][T10586] attempt to access beyond end of device [ 2075.011846][T21942] loop1: rw=1, want=1102, limit=112 [ 2075.017159][T21942] attempt to access beyond end of device [ 2075.030791][T21942] loop1: rw=1, want=1103, limit=112 [ 2075.036605][T10586] loop3: rw=1, want=8439, limit=112 17:11:34 executing program 2: mkdir(&(0x7f00000000c0)='./control\x00', 0x0) r0 = open(0x0, 0x0, 0x0) mknodat(r0, &(0x7f0000000140)='./control\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000003c0)='./control\x00', r0, &(0x7f0000000400)='./file0\x00', 0x0) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f00000008c0)='./control\x00', 0x0) [ 2075.051265][T21942] attempt to access beyond end of device [ 2075.058409][T10586] attempt to access beyond end of device [ 2075.066104][T21942] loop1: rw=1, want=1104, limit=112 [ 2075.071352][T21942] attempt to access beyond end of device [ 2075.079514][T10586] loop3: rw=1, want=8440, limit=112 [ 2075.092675][T10586] attempt to access beyond end of device [ 2075.098363][T10586] loop3: rw=1, want=8441, limit=112 [ 2075.111006][T21942] loop1: rw=1, want=1105, limit=112 [ 2075.128900][T10586] attempt to access beyond end of device [ 2075.135984][T21942] attempt to access beyond end of device [ 2075.141621][T21942] loop1: rw=1, want=4105, limit=112 [ 2075.156295][T10586] loop3: rw=1, want=8462, limit=112 [ 2075.161525][T10586] attempt to access beyond end of device [ 2075.177020][T10586] loop3: rw=1, want=8463, limit=112 [ 2075.185864][T10586] attempt to access beyond end of device [ 2075.191496][T10586] loop3: rw=1, want=8464, limit=112 [ 2075.211900][T10586] attempt to access beyond end of device [ 2075.217559][T10586] loop3: rw=1, want=8465, limit=112 [ 2075.257150][T10586] attempt to access beyond end of device [ 2075.271841][T10586] loop3: rw=1, want=8514, limit=112 [ 2075.277076][T10586] attempt to access beyond end of device [ 2075.300526][T10586] loop3: rw=1, want=8515, limit=112 [ 2075.311899][T10586] attempt to access beyond end of device [ 2075.317555][T10586] loop3: rw=1, want=8516, limit=112 [ 2075.345536][T10586] attempt to access beyond end of device [ 2075.355765][T10586] loop3: rw=1, want=8517, limit=112 [ 2075.367075][T10586] attempt to access beyond end of device [ 2075.378544][T10586] loop3: rw=1, want=8526, limit=112 [ 2075.390669][T10586] attempt to access beyond end of device [ 2075.401318][T10586] loop3: rw=1, want=8527, limit=112 [ 2075.407811][T10586] attempt to access beyond end of device [ 2075.418188][T10586] loop3: rw=1, want=8528, limit=112 [ 2075.428248][T10586] attempt to access beyond end of device [ 2075.435695][T10586] loop3: rw=1, want=8529, limit=112 [ 2075.474646][T10586] attempt to access beyond end of device [ 2075.534219][T10586] loop3: rw=1, want=12625, limit=112 [ 2075.734170][T10586] attempt to access beyond end of device [ 2075.810891][T10586] loop3: rw=1, want=16721, limit=112 [ 2075.994151][T10586] attempt to access beyond end of device [ 2076.055926][T10586] loop3: rw=1, want=20817, limit=112 [ 2076.187999][T10586] attempt to access beyond end of device [ 2076.247186][T10586] loop3: rw=1, want=22929, limit=112 [ 2076.352744][T21942] attempt to access beyond end of device [ 2076.358533][T21942] loop4: rw=1, want=130, limit=112 [ 2076.378887][T10586] attempt to access beyond end of device [ 2076.388638][T21942] buffer_io_error: 113 callbacks suppressed [ 2076.388646][T21942] Buffer I/O error on dev loop4, logical block 129, lost async page write [ 2076.411378][T10586] loop1: rw=1, want=130, limit=112 [ 2076.416970][T10586] Buffer I/O error on dev loop1, logical block 129, lost async page write [ 2076.434241][T21942] attempt to access beyond end of device [ 2076.439914][T21942] loop4: rw=1, want=131, limit=112 [ 2076.452280][T10586] attempt to access beyond end of device [ 2076.457935][T10586] loop1: rw=1, want=131, limit=112 [ 2076.471466][T21942] Buffer I/O error on dev loop4, logical block 130, lost async page write [ 2076.480369][T10586] Buffer I/O error on dev loop1, logical block 130, lost async page write [ 2076.497292][T21942] attempt to access beyond end of device [ 2076.506124][T10586] attempt to access beyond end of device [ 2076.521555][T21942] loop4: rw=1, want=132, limit=112 [ 2076.527177][T10586] loop1: rw=1, want=132, limit=112 [ 2076.541019][T21942] Buffer I/O error on dev loop4, logical block 131, lost async page write [ 2076.553361][T10586] Buffer I/O error on dev loop1, logical block 131, lost async page write [ 2076.570672][T21942] attempt to access beyond end of device [ 2076.576777][T10586] attempt to access beyond end of device [ 2076.582878][T21942] loop4: rw=1, want=133, limit=112 [ 2076.588029][T21942] Buffer I/O error on dev loop4, logical block 132, lost async page write [ 2076.601839][T10586] loop1: rw=1, want=133, limit=112 [ 2076.606959][T10586] Buffer I/O error on dev loop1, logical block 132, lost async page write [ 2076.623803][T21942] attempt to access beyond end of device [ 2076.629437][T21942] loop4: rw=1, want=142, limit=112 [ 2076.641838][T10586] attempt to access beyond end of device [ 2076.647476][T10586] loop1: rw=1, want=142, limit=112 [ 2076.661579][T21942] Buffer I/O error on dev loop4, logical block 141, lost async page write [ 2076.670413][T10586] Buffer I/O error on dev loop1, logical block 141, lost async page write [ 2076.688078][T10586] attempt to access beyond end of device [ 2076.691839][T21942] attempt to access beyond end of device [ 2076.695383][T10586] loop1: rw=1, want=143, limit=112 [ 2076.711805][T21942] loop4: rw=1, want=143, limit=112 [ 2076.713312][T10586] attempt to access beyond end of device [ 2076.716953][T21942] attempt to access beyond end of device [ 2076.731586][T21942] loop4: rw=1, want=144, limit=112 [ 2076.736835][T21942] attempt to access beyond end of device [ 2076.742565][T21942] loop4: rw=1, want=145, limit=112 [ 2076.743173][T10586] loop1: rw=1, want=144, limit=112 [ 2076.754429][T21942] attempt to access beyond end of device [ 2076.760107][T21942] loop4: rw=1, want=4241, limit=112 [ 2076.762889][T10586] attempt to access beyond end of device [ 2076.771687][T10586] loop1: rw=1, want=145, limit=112 [ 2076.795402][T10586] attempt to access beyond end of device [ 2076.801049][T10586] loop1: rw=1, want=537, limit=112 [ 2076.820959][T21942] attempt to access beyond end of device [ 2076.827147][T10586] attempt to access beyond end of device [ 2076.827162][T10586] loop1: rw=1, want=566, limit=112 [ 2076.827201][T10586] attempt to access beyond end of device [ 2076.827218][T10586] loop1: rw=1, want=567, limit=112 [ 2076.862898][T21942] loop4: rw=1, want=8337, limit=112 [ 2076.888138][T21942] attempt to access beyond end of device [ 2076.912184][T10586] attempt to access beyond end of device [ 2076.924731][T21942] loop4: rw=1, want=11993, limit=112 [ 2076.932110][T10586] loop1: rw=1, want=568, limit=112 [ 2076.949911][T10586] attempt to access beyond end of device [ 2076.963948][T21942] attempt to access beyond end of device [ 2076.995618][T10586] loop1: rw=1, want=569, limit=112 [ 2077.017674][T21942] loop4: rw=1, want=12022, limit=112 [ 2077.051409][T10586] attempt to access beyond end of device [ 2077.072285][T21942] attempt to access beyond end of device [ 2077.085973][T10586] loop1: rw=1, want=590, limit=112 [ 2077.096962][T21942] loop4: rw=1, want=12023, limit=112 [ 2077.109087][T10586] attempt to access beyond end of device [ 2077.181015][T21942] attempt to access beyond end of device [ 2077.234833][T21942] loop4: rw=1, want=12024, limit=112 [ 2077.236826][T10586] loop1: rw=1, want=591, limit=112 [ 2077.245410][T10586] attempt to access beyond end of device [ 2077.251060][T10586] loop1: rw=1, want=592, limit=112 [ 2077.256270][T10586] attempt to access beyond end of device [ 2077.261962][T10586] loop1: rw=1, want=593, limit=112 [ 2077.267148][T10586] attempt to access beyond end of device [ 2077.272864][T10586] loop1: rw=1, want=642, limit=112 [ 2077.278023][T10586] attempt to access beyond end of device [ 2077.278304][T21942] attempt to access beyond end of device [ 2077.283770][T10586] loop1: rw=1, want=643, limit=112 [ 2077.319533][T21942] loop4: rw=1, want=12025, limit=112 [ 2077.331865][T10586] attempt to access beyond end of device [ 2077.337510][T10586] loop1: rw=1, want=644, limit=112 [ 2077.350885][T10586] attempt to access beyond end of device [ 2077.354653][T21942] attempt to access beyond end of device [ 2077.362510][T21942] loop4: rw=1, want=12046, limit=112 [ 2077.367904][T21942] attempt to access beyond end of device [ 2077.373899][T21942] loop4: rw=1, want=12047, limit=112 [ 2077.379954][T21942] attempt to access beyond end of device [ 2077.386474][T21942] loop4: rw=1, want=12048, limit=112 [ 2077.392291][T21942] attempt to access beyond end of device [ 2077.398141][T21942] loop4: rw=1, want=12049, limit=112 [ 2077.403925][T21942] attempt to access beyond end of device [ 2077.409737][T21942] loop4: rw=1, want=12098, limit=112 [ 2077.415643][T21942] attempt to access beyond end of device [ 2077.421400][T21942] loop4: rw=1, want=12099, limit=112 [ 2077.427272][T21942] attempt to access beyond end of device [ 2077.434994][T21942] loop4: rw=1, want=12100, limit=112 [ 2077.440516][T21942] attempt to access beyond end of device [ 2077.446863][T21942] loop4: rw=1, want=12101, limit=112 [ 2077.453548][T21942] attempt to access beyond end of device [ 2077.463892][T10586] loop1: rw=1, want=645, limit=112 [ 2077.471397][T21942] loop4: rw=1, want=12110, limit=112 [ 2077.481583][T10586] attempt to access beyond end of device [ 2077.488634][T21942] attempt to access beyond end of device [ 2077.499001][T10586] loop1: rw=1, want=654, limit=112 [ 2077.506638][T21942] loop4: rw=1, want=12111, limit=112 [ 2077.516699][T10586] attempt to access beyond end of device [ 2077.526121][T21942] attempt to access beyond end of device [ 2077.542121][T10586] loop1: rw=1, want=655, limit=112 [ 2077.549628][T21942] loop4: rw=1, want=12112, limit=112 [ 2077.567648][T10586] attempt to access beyond end of device [ 2077.576937][T21942] attempt to access beyond end of device [ 2077.591916][T10586] loop1: rw=1, want=656, limit=112 [ 2077.607363][T21942] loop4: rw=1, want=12113, limit=112 [ 2077.615584][T10586] attempt to access beyond end of device [ 2077.621241][T10586] loop1: rw=1, want=657, limit=112 [ 2077.629969][T10586] attempt to access beyond end of device [ 2077.635647][T10586] loop1: rw=1, want=2961, limit=112 [ 2077.649668][T21942] attempt to access beyond end of device [ 2077.655532][T21942] loop4: rw=1, want=16209, limit=112 [ 2077.670932][T21942] attempt to access beyond end of device [ 2077.676680][T21942] loop4: rw=1, want=20305, limit=112 [ 2077.702118][T21942] attempt to access beyond end of device [ 2077.707763][T21942] loop4: rw=1, want=24401, limit=112 [ 2077.736012][T21942] attempt to access beyond end of device [ 2077.741663][T21942] loop4: rw=1, want=24913, limit=112 17:11:36 executing program 3: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:11:36 executing program 5: mkdir(&(0x7f00000000c0)='./control\x00', 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000140)='./control\x00', 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000003c0)='./control\x00', 0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x0) 17:11:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:11:36 executing program 2: mkdir(&(0x7f00000000c0)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000140)='./control\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000003c0)='./control\x00', r0, &(0x7f0000000400)='./file0\x00', 0x0) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f00000008c0)='./control\x00', 0x0) 17:11:36 executing program 4: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:11:36 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2077.826877][ T3096] attempt to access beyond end of device [ 2077.851940][ T3096] loop3: rw=1, want=130, limit=112 [ 2077.857097][ T3096] attempt to access beyond end of device [ 2077.890340][ T3096] loop3: rw=1, want=131, limit=112 [ 2077.914098][ T3096] attempt to access beyond end of device [ 2077.919752][ T3096] loop3: rw=1, want=132, limit=112 [ 2077.959665][ T3096] attempt to access beyond end of device [ 2077.976804][ T3096] loop3: rw=1, want=133, limit=112 17:11:37 executing program 2: mkdir(&(0x7f00000000c0)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) mknodat(r0, 0x0, 0x0, 0x0) renameat2(r0, &(0x7f00000003c0)='./control\x00', r0, &(0x7f0000000400)='./file0\x00', 0x0) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f00000008c0)='./control\x00', 0x0) [ 2078.012672][ T3096] attempt to access beyond end of device [ 2078.067420][ T3096] loop3: rw=1, want=142, limit=112 [ 2078.100405][ T3096] attempt to access beyond end of device 17:11:37 executing program 5: r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000140)='./control\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000003c0)='./control\x00', r0, &(0x7f0000000400)='./file0\x00', 0x0) [ 2078.263400][ T3096] loop3: rw=1, want=143, limit=112 17:11:37 executing program 5: mkdir(0x0, 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000140)='./control\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000003c0)='./control\x00', r0, &(0x7f0000000400)='./file0\x00', 0x0) [ 2078.331410][ T3096] attempt to access beyond end of device [ 2078.406330][ T3096] loop3: rw=1, want=144, limit=112 [ 2078.445096][ T3096] attempt to access beyond end of device 17:11:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2078.491381][ T3096] loop3: rw=1, want=145, limit=112 17:11:37 executing program 5: mkdir(&(0x7f00000000c0)='./control\x00', 0x0) r0 = open(0x0, 0x0, 0x0) mknodat(r0, &(0x7f0000000140)='./control\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000003c0)='./control\x00', r0, &(0x7f0000000400)='./file0\x00', 0x0) 17:11:37 executing program 2: mkdir(&(0x7f00000000c0)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000140)='./control\x00', 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000003c0)='./control\x00', r0, &(0x7f0000000400)='./file0\x00', 0x0) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f00000008c0)='./control\x00', 0x0) [ 2078.650816][ T3096] attempt to access beyond end of device [ 2078.679608][ T3096] loop3: rw=1, want=4241, limit=112 [ 2078.694902][ T3096] attempt to access beyond end of device [ 2078.700842][ T3096] loop3: rw=1, want=7193, limit=112 [ 2078.708911][ T3096] attempt to access beyond end of device [ 2078.717325][ T3096] loop3: rw=1, want=7222, limit=112 [ 2078.722837][ T3096] attempt to access beyond end of device [ 2078.728827][ T3096] loop3: rw=1, want=7223, limit=112 [ 2078.734446][ T3096] attempt to access beyond end of device [ 2078.740443][ T3096] loop3: rw=1, want=7224, limit=112 [ 2078.746159][ T3096] attempt to access beyond end of device [ 2078.760796][T10586] attempt to access beyond end of device [ 2078.770313][ T3096] loop3: rw=1, want=7225, limit=112 [ 2078.778612][T10586] loop1: rw=1, want=130, limit=112 [ 2078.781512][ T3096] attempt to access beyond end of device [ 2078.789556][ T3096] loop3: rw=1, want=7246, limit=112 [ 2078.794933][ T3096] attempt to access beyond end of device [ 2078.800660][ T3096] loop3: rw=1, want=7247, limit=112 [ 2078.806058][ T3096] attempt to access beyond end of device [ 2078.808265][T10586] attempt to access beyond end of device [ 2078.814347][ T3096] loop3: rw=1, want=7248, limit=112 [ 2078.841897][ T3096] attempt to access beyond end of device [ 2078.851646][T10586] loop1: rw=1, want=131, limit=112 [ 2078.869492][T10586] attempt to access beyond end of device [ 2078.871818][ T3096] loop3: rw=1, want=7249, limit=112 [ 2078.880419][ T3096] attempt to access beyond end of device [ 2078.886610][ T3096] loop3: rw=1, want=7298, limit=112 [ 2078.891869][T10586] loop1: rw=1, want=132, limit=112 [ 2078.921984][T10586] attempt to access beyond end of device [ 2078.927781][T10586] loop1: rw=1, want=133, limit=112 [ 2078.933154][ T3096] attempt to access beyond end of device [ 2078.938795][ T3096] loop3: rw=1, want=7299, limit=112 [ 2078.944106][T10586] attempt to access beyond end of device [ 2078.949742][T10586] loop1: rw=1, want=142, limit=112 [ 2078.955029][ T3096] attempt to access beyond end of device [ 2078.960664][ T3096] loop3: rw=1, want=7300, limit=112 [ 2078.967468][T10586] attempt to access beyond end of device [ 2078.973281][ T3096] attempt to access beyond end of device [ 2078.978930][ T3096] loop3: rw=1, want=7301, limit=112 [ 2078.984213][T10586] loop1: rw=1, want=143, limit=112 [ 2078.989352][T10586] attempt to access beyond end of device [ 2078.989366][T10586] loop1: rw=1, want=144, limit=112 [ 2078.989395][T10586] attempt to access beyond end of device [ 2078.989404][T10586] loop1: rw=1, want=145, limit=112 [ 2078.991887][ T3096] attempt to access beyond end of device [ 2079.021279][T10586] attempt to access beyond end of device [ 2079.027221][T10586] loop1: rw=1, want=4185, limit=112 [ 2079.035875][T10586] attempt to access beyond end of device [ 2079.041521][T10586] loop1: rw=1, want=4214, limit=112 [ 2079.046842][ T3096] loop3: rw=1, want=7310, limit=112 [ 2079.052196][ T3096] attempt to access beyond end of device [ 2079.057837][ T3096] loop3: rw=1, want=7311, limit=112 [ 2079.066458][T10586] attempt to access beyond end of device [ 2079.072271][T10586] loop1: rw=1, want=4215, limit=112 [ 2079.077603][ T3096] attempt to access beyond end of device [ 2079.084660][T10586] attempt to access beyond end of device [ 2079.090406][T10586] loop1: rw=1, want=4216, limit=112 [ 2079.095832][ T3096] loop3: rw=1, want=7312, limit=112 [ 2079.101147][ T3096] attempt to access beyond end of device [ 2079.107111][T10586] attempt to access beyond end of device [ 2079.113035][ T3096] loop3: rw=1, want=7313, limit=112 [ 2079.125170][ T3096] attempt to access beyond end of device [ 2079.130813][ T3096] loop3: rw=1, want=11409, limit=112 [ 2079.136291][T10586] loop1: rw=1, want=4217, limit=112 [ 2079.141562][T10586] attempt to access beyond end of device [ 2079.147382][T10586] loop1: rw=1, want=4238, limit=112 [ 2079.152986][T10586] attempt to access beyond end of device [ 2079.158679][T10586] loop1: rw=1, want=4239, limit=112 [ 2079.173335][T10586] attempt to access beyond end of device [ 2079.179133][T10586] loop1: rw=1, want=4240, limit=112 [ 2079.191064][ T3096] attempt to access beyond end of device [ 2079.197261][T10586] attempt to access beyond end of device [ 2079.203278][ T3096] loop3: rw=1, want=15505, limit=112 [ 2079.212142][T10586] loop1: rw=1, want=4241, limit=112 [ 2079.217436][T10586] attempt to access beyond end of device [ 2079.230208][T10586] loop1: rw=1, want=4290, limit=112 [ 2079.251647][ T3096] attempt to access beyond end of device [ 2079.271496][T10586] attempt to access beyond end of device [ 2079.306535][ T3096] loop3: rw=1, want=19601, limit=112 [ 2079.315412][T10586] loop1: rw=1, want=4291, limit=112 [ 2079.329254][ T3096] attempt to access beyond end of device [ 2079.336427][T10586] attempt to access beyond end of device [ 2079.338921][ T3096] loop3: rw=1, want=20473, limit=112 [ 2079.353090][T10586] loop1: rw=1, want=4292, limit=112 [ 2079.365388][T10586] attempt to access beyond end of device [ 2079.376886][T10586] loop1: rw=1, want=4293, limit=112 [ 2079.389143][T10586] attempt to access beyond end of device [ 2079.401948][T10586] loop1: rw=1, want=4302, limit=112 [ 2079.413291][T10586] attempt to access beyond end of device [ 2079.435082][T10586] loop1: rw=1, want=4303, limit=112 [ 2079.454179][T10586] attempt to access beyond end of device [ 2079.473563][T10586] loop1: rw=1, want=4304, limit=112 [ 2079.491549][T10586] attempt to access beyond end of device [ 2079.527225][T10586] loop1: rw=1, want=4305, limit=112 [ 2079.596413][T10586] attempt to access beyond end of device [ 2079.622768][T10586] loop1: rw=1, want=8401, limit=112 [ 2079.691882][T10586] attempt to access beyond end of device [ 2079.718266][T10586] loop1: rw=1, want=12497, limit=112 [ 2079.790358][T10586] attempt to access beyond end of device [ 2079.815738][T10586] loop1: rw=1, want=16593, limit=112 [ 2079.875591][T10586] attempt to access beyond end of device [ 2079.881273][T10586] loop1: rw=1, want=20689, limit=112 [ 2079.891437][T10586] attempt to access beyond end of device [ 2079.897130][T10586] loop1: rw=1, want=21593, limit=112 [ 2079.929026][T10586] attempt to access beyond end of device [ 2079.941812][T10586] loop4: rw=1, want=130, limit=112 [ 2079.946963][T10586] attempt to access beyond end of device [ 2079.990600][T10586] loop4: rw=1, want=131, limit=112 [ 2080.010417][T10586] attempt to access beyond end of device [ 2080.031856][T10586] loop4: rw=1, want=132, limit=112 [ 2080.037014][T10586] attempt to access beyond end of device [ 2080.051854][T10586] loop4: rw=1, want=133, limit=112 [ 2080.057011][T10586] attempt to access beyond end of device [ 2080.076670][T10586] loop4: rw=1, want=142, limit=112 [ 2080.085052][T10586] attempt to access beyond end of device [ 2080.090692][T10586] loop4: rw=1, want=143, limit=112 [ 2080.105279][T10586] attempt to access beyond end of device [ 2080.110923][T10586] loop4: rw=1, want=144, limit=112 [ 2080.121039][T10586] attempt to access beyond end of device [ 2080.131337][T10586] loop4: rw=1, want=145, limit=112 [ 2080.151432][T10586] attempt to access beyond end of device [ 2080.161631][T10586] loop4: rw=1, want=3801, limit=112 [ 2080.181266][T10586] attempt to access beyond end of device [ 2080.188665][T10586] loop4: rw=1, want=3830, limit=112 [ 2080.201544][T10586] attempt to access beyond end of device [ 2080.208997][T10586] loop4: rw=1, want=3831, limit=112 [ 2080.221656][T10586] attempt to access beyond end of device [ 2080.229151][T10586] loop4: rw=1, want=3832, limit=112 [ 2080.241122][T10586] attempt to access beyond end of device [ 2080.248350][T10586] loop4: rw=1, want=3833, limit=112 [ 2080.260796][T10586] attempt to access beyond end of device [ 2080.270809][T10586] loop4: rw=1, want=3854, limit=112 [ 2080.293818][T10586] attempt to access beyond end of device [ 2080.312081][T10586] loop4: rw=1, want=3855, limit=112 [ 2080.328675][T10586] attempt to access beyond end of device [ 2080.345722][T10586] loop4: rw=1, want=3856, limit=112 [ 2080.367218][T10586] attempt to access beyond end of device [ 2080.391314][T10586] loop4: rw=1, want=3857, limit=112 [ 2080.420559][T10586] attempt to access beyond end of device [ 2080.466390][T10586] loop4: rw=1, want=3906, limit=112 [ 2080.511865][T10586] attempt to access beyond end of device [ 2080.561270][T10586] loop4: rw=1, want=3907, limit=112 [ 2080.566622][T10586] attempt to access beyond end of device [ 2080.572309][T10586] loop4: rw=1, want=3908, limit=112 [ 2080.577549][T10586] attempt to access beyond end of device [ 2080.583272][T10586] loop4: rw=1, want=3909, limit=112 [ 2080.588505][T10586] attempt to access beyond end of device [ 2080.594247][T10586] loop4: rw=1, want=3918, limit=112 [ 2080.599530][T10586] attempt to access beyond end of device [ 2080.605259][T10586] loop4: rw=1, want=3919, limit=112 [ 2080.610497][T10586] attempt to access beyond end of device [ 2080.616199][T10586] loop4: rw=1, want=3920, limit=112 [ 2080.621429][T10586] attempt to access beyond end of device [ 2080.627176][T10586] loop4: rw=1, want=3921, limit=112 [ 2080.648616][T10586] attempt to access beyond end of device [ 2080.671780][T10586] loop4: rw=1, want=8017, limit=112 [ 2080.697400][T10586] attempt to access beyond end of device [ 2080.711783][T10586] loop4: rw=1, want=12113, limit=112 [ 2080.737302][T10586] attempt to access beyond end of device [ 2080.751955][T10586] loop4: rw=1, want=16209, limit=112 [ 2080.781245][T10586] attempt to access beyond end of device [ 2080.806154][T10586] loop4: rw=1, want=20305, limit=112 [ 2080.857044][T10586] attempt to access beyond end of device [ 2080.869664][T10586] loop4: rw=1, want=21009, limit=112 17:11:40 executing program 3: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:11:40 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:11:40 executing program 2: mkdir(&(0x7f00000000c0)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000140)='./control\x00', 0x0, 0x0) renameat2(r0, 0x0, r0, &(0x7f0000000400)='./file0\x00', 0x0) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f00000008c0)='./control\x00', 0x0) 17:11:40 executing program 5: mkdir(&(0x7f00000000c0)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000140)='./control\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000003c0)='./control\x00', r0, &(0x7f0000000400)='./file0\x00', 0x0) 17:11:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:11:40 executing program 4: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2081.137542][ T3096] attempt to access beyond end of device [ 2081.162061][ T3096] loop3: rw=1, want=130, limit=112 [ 2081.190765][ T3096] attempt to access beyond end of device [ 2081.234767][ T3096] loop3: rw=1, want=131, limit=112 [ 2081.296075][ T3096] attempt to access beyond end of device [ 2081.308142][ T3096] loop3: rw=1, want=132, limit=112 [ 2081.355577][ T3096] attempt to access beyond end of device [ 2081.408585][ T3096] loop3: rw=1, want=133, limit=112 17:11:40 executing program 5: mkdir(&(0x7f00000000c0)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) mknodat(r0, 0x0, 0x0, 0x0) renameat2(r0, &(0x7f00000003c0)='./control\x00', r0, &(0x7f0000000400)='./file0\x00', 0x0) 17:11:40 executing program 2: mkdir(&(0x7f00000000c0)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000140)='./control\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000003c0)='./control\x00', 0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x0) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f00000008c0)='./control\x00', 0x0) [ 2081.452782][ T3096] buffer_io_error: 113 callbacks suppressed [ 2081.452792][ T3096] Buffer I/O error on dev loop3, logical block 132, lost async page write [ 2081.512558][ T3096] attempt to access beyond end of device [ 2081.518368][ T3096] loop3: rw=1, want=142, limit=112 [ 2081.523810][ T3096] Buffer I/O error on dev loop3, logical block 141, lost async page write [ 2081.541867][ T3096] attempt to access beyond end of device [ 2081.547544][ T3096] loop3: rw=1, want=143, limit=112 [ 2081.571847][ T3096] Buffer I/O error on dev loop3, logical block 142, lost async page write [ 2081.580406][ T3096] attempt to access beyond end of device [ 2081.586268][ T3096] loop3: rw=1, want=144, limit=112 [ 2081.591392][ T3096] Buffer I/O error on dev loop3, logical block 143, lost async page write [ 2081.602220][ T3096] attempt to access beyond end of device [ 2081.607865][ T3096] loop3: rw=1, want=145, limit=112 [ 2081.641818][ T3096] Buffer I/O error on dev loop3, logical block 144, lost async page write [ 2081.677231][ T3096] attempt to access beyond end of device [ 2081.696559][ T3096] loop3: rw=1, want=4241, limit=112 [ 2081.726214][ T3096] attempt to access beyond end of device [ 2081.761873][ T3096] loop3: rw=1, want=4889, limit=112 [ 2081.767624][ T3096] attempt to access beyond end of device [ 2081.800750][ T3096] loop3: rw=1, want=4918, limit=112 [ 2081.820052][ T3096] Buffer I/O error on dev loop3, logical block 4917, lost async page write [ 2081.850147][ T3096] attempt to access beyond end of device [ 2081.862416][ T3096] loop3: rw=1, want=4919, limit=112 [ 2081.867626][ T3096] Buffer I/O error on dev loop3, logical block 4918, lost async page write [ 2081.969868][ T3096] attempt to access beyond end of device [ 2082.024290][ T3096] loop3: rw=1, want=4920, limit=112 17:11:41 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2082.094318][ T3096] Buffer I/O error on dev loop3, logical block 4919, lost async page write [ 2082.132201][ T2262] attempt to access beyond end of device [ 2082.137964][ T2262] loop1: rw=1, want=130, limit=112 [ 2082.231410][ T2262] Buffer I/O error on dev loop1, logical block 129, lost async page write [ 2082.243610][ T3096] attempt to access beyond end of device 17:11:41 executing program 5: mkdir(&(0x7f00000000c0)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000140)='./control\x00', 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000003c0)='./control\x00', r0, &(0x7f0000000400)='./file0\x00', 0x0) [ 2082.291452][ T2262] attempt to access beyond end of device [ 2082.297432][ T2262] loop1: rw=1, want=131, limit=112 [ 2082.302652][ T2262] Buffer I/O error on dev loop1, logical block 130, lost async page write [ 2082.311180][ T2262] attempt to access beyond end of device [ 2082.311194][ T2262] loop1: rw=1, want=132, limit=112 [ 2082.311233][ T2262] attempt to access beyond end of device [ 2082.319478][ T3096] loop3: rw=1, want=4921, limit=112 [ 2082.322116][ T2262] loop1: rw=1, want=133, limit=112 17:11:41 executing program 2: mkdir(&(0x7f00000000c0)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000140)='./control\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000003c0)='./control\x00', r0, 0x0, 0x0) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f00000008c0)='./control\x00', 0x0) [ 2082.322161][ T2262] attempt to access beyond end of device [ 2082.343827][ T2262] loop1: rw=1, want=142, limit=112 [ 2082.349186][ T2262] attempt to access beyond end of device [ 2082.354931][ T2262] loop1: rw=1, want=143, limit=112 [ 2082.357190][ T3096] attempt to access beyond end of device [ 2082.360095][ T2262] attempt to access beyond end of device [ 2082.360108][ T2262] loop1: rw=1, want=144, limit=112 [ 2082.360143][ T2262] attempt to access beyond end of device [ 2082.399150][ T3096] loop3: rw=1, want=4942, limit=112 [ 2082.410196][ T3096] attempt to access beyond end of device [ 2082.420933][ T3096] loop3: rw=1, want=4943, limit=112 [ 2082.434499][ T3096] attempt to access beyond end of device [ 2082.447042][ T3096] loop3: rw=1, want=4944, limit=112 [ 2082.452727][ T2262] loop1: rw=1, want=145, limit=112 [ 2082.461340][ T3096] attempt to access beyond end of device [ 2082.487884][ T3096] loop3: rw=1, want=4945, limit=112 [ 2082.493827][ T2262] attempt to access beyond end of device 17:11:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2082.509862][ T3096] attempt to access beyond end of device [ 2082.518420][ T2262] loop1: rw=1, want=3545, limit=112 [ 2082.546698][ T3096] loop3: rw=1, want=4994, limit=112 [ 2082.605020][ T2262] attempt to access beyond end of device [ 2082.615900][ T3096] attempt to access beyond end of device [ 2082.656113][ T2262] loop1: rw=1, want=3574, limit=112 [ 2082.672798][ T3096] loop3: rw=1, want=4995, limit=112 [ 2082.704591][ T2262] attempt to access beyond end of device [ 2082.729962][ T3096] attempt to access beyond end of device [ 2082.753804][ T2262] loop1: rw=1, want=3575, limit=112 [ 2082.770388][ T3096] loop3: rw=1, want=4996, limit=112 [ 2082.788878][ T2262] attempt to access beyond end of device [ 2082.804134][ T3096] attempt to access beyond end of device [ 2082.835594][ T2262] loop1: rw=1, want=3576, limit=112 [ 2082.841593][ T3096] loop3: rw=1, want=4997, limit=112 [ 2082.847038][ T3096] attempt to access beyond end of device [ 2082.852873][ T3096] loop3: rw=1, want=5006, limit=112 [ 2082.858213][ T3096] attempt to access beyond end of device [ 2082.863924][T21942] attempt to access beyond end of device [ 2082.863938][T21942] loop4: rw=1, want=130, limit=112 [ 2082.863989][T21942] attempt to access beyond end of device [ 2082.869632][ T3096] loop3: rw=1, want=5007, limit=112 [ 2082.885803][ T3096] attempt to access beyond end of device [ 2082.891541][ T3096] loop3: rw=1, want=5008, limit=112 [ 2082.891803][ T2262] attempt to access beyond end of device [ 2082.896984][ T3096] attempt to access beyond end of device [ 2082.908184][T21942] loop4: rw=1, want=131, limit=112 [ 2082.913477][ T3096] loop3: rw=1, want=5009, limit=112 [ 2082.918800][T21942] attempt to access beyond end of device [ 2082.921838][ T2262] loop1: rw=1, want=3577, limit=112 [ 2082.926817][T21942] loop4: rw=1, want=132, limit=112 [ 2082.930658][ T2262] attempt to access beyond end of device [ 2082.939724][ T3096] attempt to access beyond end of device [ 2082.946300][T21942] attempt to access beyond end of device [ 2082.952128][ T3096] loop3: rw=1, want=9105, limit=112 [ 2082.955475][T21942] loop4: rw=1, want=133, limit=112 [ 2082.963762][ T2262] loop1: rw=1, want=3598, limit=112 [ 2082.974807][ T2262] attempt to access beyond end of device [ 2082.980601][T21942] attempt to access beyond end of device [ 2082.986646][ T3096] attempt to access beyond end of device [ 2082.992434][ T2262] loop1: rw=1, want=3599, limit=112 [ 2082.997708][T21942] loop4: rw=1, want=142, limit=112 [ 2083.003004][ T3096] loop3: rw=1, want=13201, limit=112 [ 2083.008440][ T2262] attempt to access beyond end of device [ 2083.014252][T21942] attempt to access beyond end of device [ 2083.025572][ T2262] loop1: rw=1, want=3600, limit=112 [ 2083.030852][T21942] loop4: rw=1, want=143, limit=112 [ 2083.039261][ T3096] attempt to access beyond end of device [ 2083.045089][ T2262] attempt to access beyond end of device [ 2083.050846][T21942] attempt to access beyond end of device [ 2083.056637][ T3096] loop3: rw=1, want=16417, limit=112 [ 2083.062119][ T2262] loop1: rw=1, want=3601, limit=112 [ 2083.067416][T21942] loop4: rw=1, want=144, limit=112 [ 2083.074943][ T2262] attempt to access beyond end of device [ 2083.080750][T21942] attempt to access beyond end of device [ 2083.087156][ T2262] loop1: rw=1, want=3650, limit=112 [ 2083.094107][T21942] loop4: rw=1, want=145, limit=112 [ 2083.099407][ T2262] attempt to access beyond end of device [ 2083.121239][T21942] attempt to access beyond end of device [ 2083.129587][ T2262] loop1: rw=1, want=3651, limit=112 [ 2083.136286][ T2262] attempt to access beyond end of device [ 2083.148978][ T2262] loop1: rw=1, want=3652, limit=112 [ 2083.154561][T21942] loop4: rw=1, want=4241, limit=112 [ 2083.156232][ T2262] attempt to access beyond end of device [ 2083.174335][ T2262] loop1: rw=1, want=3653, limit=112 [ 2083.179582][ T2262] attempt to access beyond end of device [ 2083.199031][T21942] attempt to access beyond end of device [ 2083.211811][ T2262] loop1: rw=1, want=3662, limit=112 [ 2083.217105][ T2262] attempt to access beyond end of device [ 2083.231158][T21942] loop4: rw=1, want=8337, limit=112 [ 2083.240074][T21942] attempt to access beyond end of device [ 2083.251817][ T2262] loop1: rw=1, want=3663, limit=112 [ 2083.257047][ T2262] attempt to access beyond end of device [ 2083.270586][ T2262] loop1: rw=1, want=3664, limit=112 [ 2083.275905][ T2262] attempt to access beyond end of device [ 2083.281547][ T2262] loop1: rw=1, want=3665, limit=112 [ 2083.287427][T21942] loop4: rw=1, want=8601, limit=112 [ 2083.301855][T21942] attempt to access beyond end of device [ 2083.307502][T21942] loop4: rw=1, want=8630, limit=112 [ 2083.321424][T21942] attempt to access beyond end of device [ 2083.342849][T21942] loop4: rw=1, want=8631, limit=112 [ 2083.344057][ T2262] attempt to access beyond end of device [ 2083.348093][T21942] attempt to access beyond end of device [ 2083.361108][ T2262] loop1: rw=1, want=7761, limit=112 [ 2083.375643][ T2262] attempt to access beyond end of device [ 2083.381315][ T2262] loop1: rw=1, want=11857, limit=112 [ 2083.400385][T21942] loop4: rw=1, want=8632, limit=112 [ 2083.405950][T21942] attempt to access beyond end of device [ 2083.411588][T21942] loop4: rw=1, want=8633, limit=112 [ 2083.415440][ T2262] attempt to access beyond end of device [ 2083.431788][ T2262] loop1: rw=1, want=12169, limit=112 [ 2083.435446][T21942] attempt to access beyond end of device [ 2083.461799][T21942] loop4: rw=1, want=8654, limit=112 [ 2083.467035][T21942] attempt to access beyond end of device [ 2083.501258][T21942] loop4: rw=1, want=8655, limit=112 [ 2083.511822][T21942] attempt to access beyond end of device [ 2083.517476][T21942] loop4: rw=1, want=8656, limit=112 [ 2083.531389][T21942] attempt to access beyond end of device [ 2083.543281][T21942] loop4: rw=1, want=8657, limit=112 [ 2083.555598][T21942] attempt to access beyond end of device [ 2083.566970][T21942] loop4: rw=1, want=8706, limit=112 [ 2083.579338][T21942] attempt to access beyond end of device [ 2083.590937][T21942] loop4: rw=1, want=8707, limit=112 [ 2083.604158][T21942] attempt to access beyond end of device [ 2083.615685][T21942] loop4: rw=1, want=8708, limit=112 [ 2083.628019][T21942] attempt to access beyond end of device [ 2083.639561][T21942] loop4: rw=1, want=8709, limit=112 [ 2083.652037][T21942] attempt to access beyond end of device [ 2083.664548][T21942] loop4: rw=1, want=8718, limit=112 [ 2083.683845][T21942] attempt to access beyond end of device [ 2083.701872][T21942] loop4: rw=1, want=8719, limit=112 [ 2083.748485][T21942] attempt to access beyond end of device [ 2083.813948][T21942] loop4: rw=1, want=8720, limit=112 [ 2083.848120][T21942] attempt to access beyond end of device [ 2083.876528][T21942] loop4: rw=1, want=8721, limit=112 [ 2083.948782][T21942] attempt to access beyond end of device [ 2083.996793][T21942] loop4: rw=1, want=12817, limit=112 [ 2084.132101][T21942] attempt to access beyond end of device [ 2084.180776][T21942] loop4: rw=1, want=16913, limit=112 17:11:43 executing program 3: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:11:43 executing program 5: mkdir(&(0x7f00000000c0)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000140)='./control\x00', 0x0, 0x0) renameat2(r0, 0x0, r0, &(0x7f0000000400)='./file0\x00', 0x0) 17:11:43 executing program 4: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:11:43 executing program 2: mkdir(&(0x7f00000000c0)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000140)='./control\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000003c0)='./control\x00', r0, &(0x7f0000000400)='./file0\x00', 0x0) linkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', r0, &(0x7f00000008c0)='./control\x00', 0x0) 17:11:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2084.313757][T21942] attempt to access beyond end of device [ 2084.340961][T21942] loop4: rw=1, want=21009, limit=112 [ 2084.351148][T21942] attempt to access beyond end of device [ 2084.356970][T21942] loop4: rw=1, want=22177, limit=112 [ 2084.413632][T21942] attempt to access beyond end of device [ 2084.419280][T21942] loop3: rw=1, want=130, limit=112 17:11:43 executing program 2: mkdir(&(0x7f00000000c0)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000140)='./control\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000003c0)='./control\x00', r0, &(0x7f0000000400)='./file0\x00', 0x0) linkat(r0, 0x0, r0, &(0x7f00000008c0)='./control\x00', 0x0) [ 2084.477528][T21942] attempt to access beyond end of device 17:11:43 executing program 5: mkdir(&(0x7f00000000c0)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000140)='./control\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000003c0)='./control\x00', 0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x0) [ 2084.530500][T21942] loop3: rw=1, want=131, limit=112 [ 2084.540592][T21942] attempt to access beyond end of device [ 2084.550750][T21942] loop3: rw=1, want=132, limit=112 [ 2084.560262][T21942] attempt to access beyond end of device [ 2084.586033][T21942] loop3: rw=1, want=133, limit=112 17:11:43 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2084.610878][T21942] attempt to access beyond end of device [ 2084.632273][T21942] loop3: rw=1, want=142, limit=112 [ 2084.648978][T21942] attempt to access beyond end of device 17:11:43 executing program 2: mkdir(&(0x7f00000000c0)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000140)='./control\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000003c0)='./control\x00', r0, &(0x7f0000000400)='./file0\x00', 0x0) linkat(r0, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f00000008c0)='./control\x00', 0x0) [ 2084.670478][T21942] loop3: rw=1, want=143, limit=112 [ 2084.687153][T21942] attempt to access beyond end of device [ 2084.705444][T21942] loop3: rw=1, want=144, limit=112 17:11:43 executing program 5: mkdir(&(0x7f00000000c0)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000140)='./control\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000003c0)='./control\x00', r0, 0x0, 0x0) [ 2084.741828][T21942] attempt to access beyond end of device [ 2084.761483][T21942] loop3: rw=1, want=145, limit=112 [ 2084.804340][T21942] attempt to access beyond end of device [ 2084.829095][T21942] loop3: rw=1, want=4241, limit=112 17:11:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2084.888799][T21942] attempt to access beyond end of device [ 2084.911033][T21942] loop3: rw=1, want=7769, limit=112 [ 2085.008333][T21942] attempt to access beyond end of device 17:11:44 executing program 2: mkdir(&(0x7f00000000c0)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000140)='./control\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000003c0)='./control\x00', r0, &(0x7f0000000400)='./file0\x00', 0x0) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, 0x0, 0x0) [ 2085.068143][T21942] loop3: rw=1, want=7798, limit=112 [ 2085.141676][T21942] attempt to access beyond end of device [ 2085.206234][T21942] loop3: rw=1, want=7799, limit=112 [ 2085.211634][T21942] attempt to access beyond end of device [ 2085.218080][T21942] loop3: rw=1, want=7800, limit=112 [ 2085.223531][T21942] attempt to access beyond end of device [ 2085.229248][T21942] loop3: rw=1, want=7801, limit=112 [ 2085.433658][T21942] attempt to access beyond end of device [ 2085.492328][T21942] loop3: rw=1, want=7822, limit=112 [ 2085.558994][T21942] attempt to access beyond end of device [ 2085.564773][T21942] loop3: rw=1, want=7823, limit=112 [ 2085.570010][T21942] attempt to access beyond end of device [ 2085.575707][T21942] loop3: rw=1, want=7824, limit=112 [ 2085.580987][T21942] attempt to access beyond end of device [ 2085.586723][T21942] loop3: rw=1, want=7825, limit=112 [ 2085.592063][T21942] attempt to access beyond end of device [ 2085.597704][T21942] loop3: rw=1, want=7874, limit=112 [ 2085.603018][T21942] attempt to access beyond end of device [ 2085.608660][T21942] loop3: rw=1, want=7875, limit=112 [ 2085.613959][T21942] attempt to access beyond end of device [ 2085.619610][T21942] loop3: rw=1, want=7876, limit=112 [ 2085.632124][T21942] attempt to access beyond end of device [ 2085.639063][T21942] loop3: rw=1, want=7877, limit=112 [ 2085.653475][T10586] attempt to access beyond end of device [ 2085.659127][T10586] loop1: rw=1, want=130, limit=112 [ 2085.664604][T21942] attempt to access beyond end of device [ 2085.677095][T21942] loop3: rw=1, want=7886, limit=112 [ 2085.683655][T10586] attempt to access beyond end of device [ 2085.698044][T10586] loop1: rw=1, want=131, limit=112 [ 2085.707165][T10586] attempt to access beyond end of device [ 2085.707732][T21942] attempt to access beyond end of device [ 2085.713016][T10586] loop1: rw=1, want=132, limit=112 [ 2085.723913][T10586] attempt to access beyond end of device [ 2085.729341][T21942] loop3: rw=1, want=7887, limit=112 [ 2085.729631][T10586] loop1: rw=1, want=133, limit=112 [ 2085.740534][T10586] attempt to access beyond end of device [ 2085.749839][T21942] attempt to access beyond end of device [ 2085.755575][T21942] loop3: rw=1, want=7888, limit=112 [ 2085.760820][T21942] attempt to access beyond end of device [ 2085.772495][T10586] loop1: rw=1, want=142, limit=112 [ 2085.777676][T10586] attempt to access beyond end of device [ 2085.787019][T10586] loop1: rw=1, want=143, limit=112 [ 2085.793909][T10586] attempt to access beyond end of device [ 2085.800232][T21942] loop3: rw=1, want=7889, limit=112 [ 2085.803812][T10586] loop1: rw=1, want=144, limit=112 [ 2085.811057][T10586] attempt to access beyond end of device [ 2085.830620][T21942] attempt to access beyond end of device [ 2085.861918][T21942] loop3: rw=1, want=11985, limit=112 [ 2085.885423][T21942] attempt to access beyond end of device [ 2085.891140][T21942] loop3: rw=1, want=16081, limit=112 [ 2085.905308][T10586] loop1: rw=1, want=145, limit=112 [ 2085.946368][T10586] attempt to access beyond end of device [ 2085.992117][T10586] loop1: rw=1, want=4241, limit=112 [ 2086.029676][T21942] attempt to access beyond end of device [ 2086.068088][T21942] loop3: rw=1, want=20177, limit=112 [ 2086.098275][T10586] attempt to access beyond end of device [ 2086.132112][T10586] loop1: rw=1, want=8337, limit=112 [ 2086.156436][T21942] attempt to access beyond end of device [ 2086.185416][T21942] loop3: rw=1, want=24209, limit=112 [ 2086.206312][T10586] attempt to access beyond end of device [ 2086.230639][T10586] loop1: rw=1, want=12433, limit=112 [ 2086.292164][T10586] attempt to access beyond end of device [ 2086.319505][T10586] loop1: rw=1, want=14041, limit=112 [ 2086.346820][T10586] attempt to access beyond end of device [ 2086.373259][T10586] loop1: rw=1, want=14070, limit=112 [ 2086.395885][T10586] attempt to access beyond end of device [ 2086.421016][T10586] loop1: rw=1, want=14071, limit=112 [ 2086.446045][T10586] attempt to access beyond end of device [ 2086.470229][T10586] loop1: rw=1, want=14072, limit=112 [ 2086.493924][T10586] buffer_io_error: 93 callbacks suppressed [ 2086.493934][T10586] Buffer I/O error on dev loop1, logical block 14071, lost async page write [ 2086.556267][T10586] attempt to access beyond end of device [ 2086.582859][T10586] loop1: rw=1, want=14073, limit=112 [ 2086.599005][T10586] Buffer I/O error on dev loop1, logical block 14072, lost async page write [ 2086.607800][T10586] attempt to access beyond end of device [ 2086.613520][T10586] loop1: rw=1, want=14094, limit=112 [ 2086.618805][T10586] Buffer I/O error on dev loop1, logical block 14093, lost async page write [ 2086.627571][T10586] attempt to access beyond end of device [ 2086.633263][T10586] loop1: rw=1, want=14095, limit=112 [ 2086.638554][T10586] Buffer I/O error on dev loop1, logical block 14094, lost async page write [ 2086.647341][T10586] attempt to access beyond end of device [ 2086.653068][T10586] loop1: rw=1, want=14096, limit=112 [ 2086.660109][T10586] Buffer I/O error on dev loop1, logical block 14095, lost async page write [ 2086.660815][T21942] attempt to access beyond end of device [ 2086.672214][T10586] attempt to access beyond end of device [ 2086.680177][T10586] loop1: rw=1, want=14097, limit=112 [ 2086.685616][T10586] Buffer I/O error on dev loop1, logical block 14096, lost async page write [ 2086.694459][T10586] attempt to access beyond end of device [ 2086.700253][T10586] loop1: rw=1, want=14146, limit=112 [ 2086.705731][T10586] Buffer I/O error on dev loop1, logical block 14145, lost async page write [ 2086.705942][T21942] loop4: rw=1, want=130, limit=112 [ 2086.714500][T10586] attempt to access beyond end of device [ 2086.714514][T10586] loop1: rw=1, want=14147, limit=112 [ 2086.714530][T10586] Buffer I/O error on dev loop1, logical block 14146, lost async page write [ 2086.714564][T10586] attempt to access beyond end of device [ 2086.714576][T10586] loop1: rw=1, want=14148, limit=112 [ 2086.714590][T10586] Buffer I/O error on dev loop1, logical block 14147, lost async page write [ 2086.714623][T10586] attempt to access beyond end of device [ 2086.714634][T10586] loop1: rw=1, want=14149, limit=112 [ 2086.714648][T10586] Buffer I/O error on dev loop1, logical block 14148, lost async page write [ 2086.714681][T10586] attempt to access beyond end of device [ 2086.714692][T10586] loop1: rw=1, want=14158, limit=112 [ 2086.714742][T10586] attempt to access beyond end of device [ 2086.751822][T21942] attempt to access beyond end of device [ 2086.768770][T10586] loop1: rw=1, want=14159, limit=112 [ 2086.791781][T21942] loop4: rw=1, want=131, limit=112 [ 2086.803652][T10586] attempt to access beyond end of device [ 2086.825705][T10586] loop1: rw=1, want=14160, limit=112 [ 2086.831059][T10586] attempt to access beyond end of device [ 2086.841029][T21942] attempt to access beyond end of device [ 2086.850752][T10586] loop1: rw=1, want=14161, limit=112 [ 2086.860284][T21942] loop4: rw=1, want=132, limit=112 [ 2086.876536][T10586] attempt to access beyond end of device [ 2086.891849][T21942] attempt to access beyond end of device [ 2086.897509][T21942] loop4: rw=1, want=133, limit=112 [ 2086.902764][T10586] loop1: rw=1, want=18257, limit=112 [ 2086.911944][T21942] attempt to access beyond end of device [ 2086.917590][T21942] loop4: rw=1, want=142, limit=112 [ 2086.929309][T10586] attempt to access beyond end of device [ 2086.935098][T21942] attempt to access beyond end of device [ 2086.940743][T21942] loop4: rw=1, want=143, limit=112 [ 2086.945947][T10586] loop1: rw=1, want=22353, limit=112 [ 2086.956420][T21942] attempt to access beyond end of device [ 2086.981802][T21942] loop4: rw=1, want=144, limit=112 [ 2086.995791][T21942] attempt to access beyond end of device [ 2087.001430][T21942] loop4: rw=1, want=145, limit=112 [ 2087.056310][T21942] attempt to access beyond end of device [ 2087.081863][T21942] loop4: rw=1, want=4241, limit=112 [ 2087.098139][T21942] attempt to access beyond end of device [ 2087.128776][T21942] loop4: rw=1, want=6233, limit=112 [ 2087.135604][T21942] attempt to access beyond end of device [ 2087.141259][T21942] loop4: rw=1, want=6262, limit=112 [ 2087.196213][T21942] attempt to access beyond end of device [ 2087.227091][T21942] loop4: rw=1, want=6263, limit=112 [ 2087.250253][T21942] attempt to access beyond end of device [ 2087.278417][T21942] loop4: rw=1, want=6264, limit=112 [ 2087.309749][T21942] attempt to access beyond end of device [ 2087.337110][T21942] loop4: rw=1, want=6265, limit=112 [ 2087.361986][T21942] attempt to access beyond end of device [ 2087.385975][T21942] loop4: rw=1, want=6286, limit=112 [ 2087.411161][T21942] attempt to access beyond end of device [ 2087.558671][T21942] loop4: rw=1, want=6287, limit=112 [ 2087.581905][T21942] attempt to access beyond end of device [ 2087.606082][T21942] loop4: rw=1, want=6288, limit=112 [ 2087.629863][T21942] attempt to access beyond end of device [ 2087.656463][T21942] loop4: rw=1, want=6289, limit=112 [ 2087.680258][T21942] attempt to access beyond end of device [ 2087.705698][T21942] loop4: rw=1, want=6338, limit=112 [ 2087.728578][T21942] attempt to access beyond end of device [ 2087.747134][T21942] loop4: rw=1, want=6339, limit=112 [ 2087.765435][T21942] attempt to access beyond end of device [ 2087.785023][T21942] loop4: rw=1, want=6340, limit=112 [ 2087.810622][T21942] attempt to access beyond end of device [ 2087.829078][T21942] loop4: rw=1, want=6341, limit=112 [ 2087.847147][T21942] attempt to access beyond end of device [ 2087.866769][T21942] loop4: rw=1, want=6350, limit=112 [ 2087.883064][T21942] attempt to access beyond end of device [ 2087.888730][T21942] loop4: rw=1, want=6351, limit=112 [ 2087.894062][T21942] attempt to access beyond end of device [ 2087.899700][T21942] loop4: rw=1, want=6352, limit=112 [ 2087.905044][T21942] attempt to access beyond end of device [ 2087.910681][T21942] loop4: rw=1, want=6353, limit=112 17:11:46 executing program 3: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:11:46 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$unix(r1, &(0x7f0000000100), 0x14ded905162a6b89, 0x0, 0x0, 0xfffffef2) recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002240)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 17:11:46 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r1) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) getgid() listen(r1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) accept$inet(r2, 0x0, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) getpgid(0xffffffffffffffff) 17:11:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:11:46 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:11:46 executing program 4: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2087.922031][T21942] attempt to access beyond end of device [ 2087.927669][T21942] loop4: rw=1, want=10449, limit=112 [ 2087.942916][T21942] attempt to access beyond end of device [ 2087.948576][T21942] loop4: rw=1, want=14545, limit=112 [ 2087.953866][ T2262] attempt to access beyond end of device [ 2087.953879][ T2262] loop3: rw=1, want=130, limit=112 [ 2087.953916][ T2262] attempt to access beyond end of device [ 2087.953926][ T2262] loop3: rw=1, want=131, limit=112 [ 2087.953960][ T2262] attempt to access beyond end of device [ 2087.972744][T21942] attempt to access beyond end of device [ 2087.986819][T21942] loop4: rw=1, want=18641, limit=112 [ 2088.001657][T21942] attempt to access beyond end of device [ 2088.007589][T21942] loop4: rw=1, want=22737, limit=112 [ 2088.020232][T21942] attempt to access beyond end of device [ 2088.036252][T21942] loop4: rw=1, want=25329, limit=112 [ 2088.047729][ T2262] loop3: rw=1, want=132, limit=112 [ 2088.109385][ T2262] attempt to access beyond end of device [ 2088.160652][ T2262] loop3: rw=1, want=133, limit=112 17:11:47 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") clone(0x6102001dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCGREP(r0, 0x80084503, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$BLKFLSBUF(r1, 0x1261, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 2088.263280][ T2262] attempt to access beyond end of device [ 2088.348957][ T2262] loop3: rw=1, want=142, limit=112 17:11:47 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000340)='\xa0mpfs\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xa0008000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0010000, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@can, 0x80) [ 2088.404902][ T2262] attempt to access beyond end of device [ 2088.467762][ T2262] loop3: rw=1, want=143, limit=112 [ 2088.513171][ T2262] attempt to access beyond end of device [ 2088.573769][ T2262] loop3: rw=1, want=144, limit=112 [ 2088.611843][ T2262] attempt to access beyond end of device [ 2088.651810][ T2262] loop3: rw=1, want=145, limit=112 [ 2088.721487][ T2262] attempt to access beyond end of device [ 2088.755295][ T2262] loop3: rw=1, want=3609, limit=112 17:11:47 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2088.806146][ T2262] attempt to access beyond end of device [ 2088.821311][ T2262] loop3: rw=1, want=3638, limit=112 [ 2088.826980][ T2262] attempt to access beyond end of device [ 2088.829413][T21942] attempt to access beyond end of device [ 2088.832794][ T2262] loop3: rw=1, want=3639, limit=112 [ 2088.832834][ T2262] attempt to access beyond end of device [ 2088.832845][ T2262] loop3: rw=1, want=3640, limit=112 [ 2088.832880][ T2262] attempt to access beyond end of device [ 2088.832891][ T2262] loop3: rw=1, want=3641, limit=112 [ 2088.832932][ T2262] attempt to access beyond end of device [ 2088.840177][T21942] loop1: rw=1, want=130, limit=112 [ 2088.843812][ T2262] loop3: rw=1, want=3662, limit=112 [ 2088.843857][ T2262] attempt to access beyond end of device [ 2088.843869][ T2262] loop3: rw=1, want=3663, limit=112 [ 2088.843905][ T2262] attempt to access beyond end of device [ 2088.861399][T21942] attempt to access beyond end of device [ 2088.865627][ T2262] loop3: rw=1, want=3664, limit=112 [ 2088.865667][ T2262] attempt to access beyond end of device [ 2088.865678][ T2262] loop3: rw=1, want=3665, limit=112 [ 2088.865778][ T2262] attempt to access beyond end of device [ 2088.931807][T21942] loop1: rw=1, want=131, limit=112 [ 2088.936945][T21942] attempt to access beyond end of device [ 2088.951791][T21942] loop1: rw=1, want=132, limit=112 [ 2088.956950][T21942] attempt to access beyond end of device [ 2088.981795][T21942] loop1: rw=1, want=133, limit=112 [ 2088.987000][T21942] attempt to access beyond end of device [ 2089.001792][T21942] loop1: rw=1, want=142, limit=112 17:11:48 executing program 2: syz_open_procfs(0xffffffffffffffff, 0x0) inotify_init1(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000040)) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) [ 2089.006938][T21942] attempt to access beyond end of device [ 2089.021837][T21942] loop1: rw=1, want=143, limit=112 [ 2089.026976][T21942] attempt to access beyond end of device [ 2089.032705][ T2262] loop3: rw=1, want=3714, limit=112 [ 2089.037950][ T2262] attempt to access beyond end of device [ 2089.051814][T21942] loop1: rw=1, want=144, limit=112 17:11:48 executing program 5: socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xee71, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r1, &(0x7f00000092c0), 0x400000000000064, 0x0) [ 2089.056976][T21942] attempt to access beyond end of device [ 2089.075096][ T2262] loop3: rw=1, want=3715, limit=112 [ 2089.080346][ T2262] attempt to access beyond end of device [ 2089.091243][T21942] loop1: rw=1, want=145, limit=112 [ 2089.101830][ T2262] loop3: rw=1, want=3716, limit=112 [ 2089.118511][T21942] attempt to access beyond end of device [ 2089.124299][ T2262] attempt to access beyond end of device [ 2089.129939][ T2262] loop3: rw=1, want=3717, limit=112 [ 2089.151832][ T2262] attempt to access beyond end of device [ 2089.158352][T21942] loop1: rw=1, want=4241, limit=112 [ 2089.163691][ T2262] loop3: rw=1, want=3726, limit=112 17:11:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x110}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2089.169414][ T2262] attempt to access beyond end of device [ 2089.191835][ T2262] loop3: rw=1, want=3727, limit=112 [ 2089.197128][ T2262] attempt to access beyond end of device [ 2089.216439][T21942] attempt to access beyond end of device [ 2089.229032][T21942] loop1: rw=1, want=8281, limit=112 [ 2089.236688][ T2262] loop3: rw=1, want=3728, limit=112 [ 2089.255564][ T2262] attempt to access beyond end of device [ 2089.269223][T21942] attempt to access beyond end of device [ 2089.290738][T21942] loop1: rw=1, want=8310, limit=112 [ 2089.291826][ T2262] loop3: rw=1, want=3729, limit=112 [ 2089.315801][T21942] attempt to access beyond end of device [ 2089.330287][T21942] loop1: rw=1, want=8311, limit=112 [ 2089.337971][T21942] attempt to access beyond end of device [ 2089.343654][ T2262] attempt to access beyond end of device [ 2089.343667][ T2262] loop3: rw=1, want=7825, limit=112 [ 2089.372686][ T2262] attempt to access beyond end of device [ 2089.378329][ T2262] loop3: rw=1, want=11921, limit=112 [ 2089.411079][ T2262] attempt to access beyond end of device [ 2089.420824][T21942] loop1: rw=1, want=8312, limit=112 [ 2089.434289][T21942] attempt to access beyond end of device [ 2089.441852][ T2262] loop3: rw=1, want=16017, limit=112 [ 2089.446738][T21942] loop1: rw=1, want=8313, limit=112 [ 2089.457162][T21942] attempt to access beyond end of device [ 2089.467457][T21942] loop1: rw=1, want=8334, limit=112 [ 2089.476289][ T2262] attempt to access beyond end of device [ 2089.477353][T21942] attempt to access beyond end of device [ 2089.488599][ T2262] loop3: rw=1, want=20113, limit=112 [ 2089.492218][T21942] loop1: rw=1, want=8335, limit=112 [ 2089.499658][T21942] attempt to access beyond end of device [ 2089.519212][ T2262] attempt to access beyond end of device [ 2089.534180][ T2262] loop3: rw=1, want=24209, limit=112 [ 2089.541910][T21942] loop1: rw=1, want=8336, limit=112 [ 2089.556291][T21942] attempt to access beyond end of device [ 2089.563703][ T2262] attempt to access beyond end of device [ 2089.575080][T21942] loop1: rw=1, want=8337, limit=112 [ 2089.581548][ T2262] loop3: rw=1, want=24377, limit=112 [ 2089.591670][T21942] attempt to access beyond end of device [ 2089.626201][T21942] loop1: rw=1, want=8386, limit=112 [ 2089.653350][T21942] attempt to access beyond end of device [ 2089.699956][T21942] loop1: rw=1, want=8387, limit=112 [ 2089.767103][T21942] attempt to access beyond end of device [ 2089.830961][T21942] loop1: rw=1, want=8388, limit=112 [ 2089.836311][T21942] attempt to access beyond end of device [ 2089.842056][T21942] loop1: rw=1, want=8389, limit=112 [ 2089.847301][T21942] attempt to access beyond end of device [ 2089.852986][T21942] loop1: rw=1, want=8398, limit=112 [ 2089.858225][T21942] attempt to access beyond end of device [ 2089.898161][T21942] loop1: rw=1, want=8399, limit=112 [ 2089.951709][T21942] attempt to access beyond end of device [ 2090.016242][T21942] loop1: rw=1, want=8400, limit=112 [ 2090.050845][T21942] attempt to access beyond end of device [ 2090.081909][T21942] loop1: rw=1, want=8401, limit=112 [ 2090.155420][T21942] attempt to access beyond end of device [ 2090.189698][T21942] loop1: rw=1, want=12497, limit=112 [ 2090.258823][T21942] attempt to access beyond end of device [ 2090.285675][T21942] loop1: rw=1, want=16593, limit=112 [ 2090.310398][T21942] attempt to access beyond end of device [ 2090.316084][T21942] loop1: rw=1, want=20689, limit=112 [ 2090.330729][T21942] attempt to access beyond end of device [ 2090.336463][T21942] loop1: rw=1, want=23873, limit=112 [ 2090.365694][T21942] attempt to access beyond end of device [ 2090.371369][T21942] loop4: rw=1, want=130, limit=112 [ 2090.430326][T21942] attempt to access beyond end of device [ 2090.451889][T21942] loop4: rw=1, want=131, limit=112 [ 2090.457043][T21942] attempt to access beyond end of device [ 2090.500619][T21942] loop4: rw=1, want=132, limit=112 [ 2090.512908][T21942] attempt to access beyond end of device [ 2090.518545][T21942] loop4: rw=1, want=133, limit=112 [ 2090.549741][T21942] attempt to access beyond end of device [ 2090.571833][T21942] loop4: rw=1, want=142, limit=112 [ 2090.576981][T21942] attempt to access beyond end of device [ 2090.610189][T21942] loop4: rw=1, want=143, limit=112 [ 2090.618286][T21942] attempt to access beyond end of device [ 2090.641923][T21942] loop4: rw=1, want=144, limit=112 [ 2090.651857][T21942] attempt to access beyond end of device [ 2090.657496][T21942] loop4: rw=1, want=145, limit=112 [ 2090.694811][T21942] attempt to access beyond end of device [ 2090.713578][T21942] loop4: rw=1, want=4241, limit=112 [ 2090.737002][T21942] attempt to access beyond end of device [ 2090.750057][T21942] loop4: rw=1, want=8337, limit=112 [ 2090.842085][T21942] attempt to access beyond end of device [ 2090.860026][T21942] loop4: rw=1, want=12433, limit=112 [ 2090.890523][T21942] attempt to access beyond end of device [ 2090.908809][T21942] loop4: rw=1, want=13017, limit=112 [ 2090.934788][T21942] attempt to access beyond end of device [ 2090.995238][T21942] loop4: rw=1, want=13046, limit=112 [ 2091.020122][T21942] attempt to access beyond end of device [ 2091.025947][T21942] loop4: rw=1, want=13047, limit=112 [ 2091.031286][T21942] attempt to access beyond end of device [ 2091.037029][T21942] loop4: rw=1, want=13048, limit=112 [ 2091.042412][T21942] attempt to access beyond end of device [ 2091.048057][T21942] loop4: rw=1, want=13049, limit=112 [ 2091.053535][T21942] attempt to access beyond end of device [ 2091.059179][T21942] loop4: rw=1, want=13070, limit=112 [ 2091.064578][T21942] attempt to access beyond end of device [ 2091.072594][T21942] loop4: rw=1, want=13071, limit=112 [ 2091.118637][T21942] attempt to access beyond end of device [ 2091.162650][T21942] loop4: rw=1, want=13072, limit=112 [ 2091.204066][T21942] attempt to access beyond end of device [ 2091.252252][T21942] loop4: rw=1, want=13073, limit=112 [ 2091.293677][T21942] attempt to access beyond end of device [ 2091.340354][T21942] loop4: rw=1, want=13122, limit=112 [ 2091.385774][T21942] attempt to access beyond end of device [ 2091.425797][T21942] loop4: rw=1, want=13123, limit=112 [ 2091.463308][T21942] attempt to access beyond end of device [ 2091.503379][T21942] loop4: rw=1, want=13124, limit=112 [ 2091.524990][T21942] buffer_io_error: 94 callbacks suppressed [ 2091.525023][T21942] Buffer I/O error on dev loop4, logical block 13123, lost async page write [ 2091.571330][T21942] attempt to access beyond end of device [ 2091.591822][T21942] loop4: rw=1, want=13125, limit=112 [ 2091.612018][T21942] Buffer I/O error on dev loop4, logical block 13124, lost async page write [ 2091.620832][T21942] attempt to access beyond end of device [ 2091.627906][T21942] loop4: rw=1, want=13134, limit=112 [ 2091.633378][T21942] Buffer I/O error on dev loop4, logical block 13133, lost async page write [ 2091.642162][T21942] attempt to access beyond end of device [ 2091.647861][T21942] loop4: rw=1, want=13135, limit=112 [ 2091.653281][T21942] Buffer I/O error on dev loop4, logical block 13134, lost async page write [ 2091.662152][T21942] attempt to access beyond end of device 17:11:50 executing program 3: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:11:50 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x101000002}) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) flock(r0, 0x2) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00002e2f667f6c65300045990846b8433e9da74301c95c993b52a886ac184253359368657af0991d54c893287664b6794fc777"], 0x1) 17:11:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:11:50 executing program 2: syz_open_procfs(0xffffffffffffffff, 0x0) inotify_init1(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000040)) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) 17:11:50 executing program 4: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:11:50 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2091.667788][T21942] loop4: rw=1, want=13136, limit=112 [ 2091.675333][ T2262] attempt to access beyond end of device [ 2091.687511][ T2262] loop3: rw=1, want=130, limit=112 [ 2091.693027][T21942] Buffer I/O error on dev loop4, logical block 13135, lost async page write [ 2091.726868][T21942] attempt to access beyond end of device [ 2091.740672][ T2262] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 2091.746801][T21942] loop4: rw=1, want=13137, limit=112 [ 2091.787016][T21942] Buffer I/O error on dev loop4, logical block 13136, lost async page write [ 2091.799553][ T2262] attempt to access beyond end of device [ 2091.817094][ T2262] loop3: rw=1, want=131, limit=112 17:11:50 executing program 5: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2091.838016][ T2262] Buffer I/O error on dev loop3, logical block 130, lost async page write [ 2091.868850][T21942] attempt to access beyond end of device [ 2091.904335][ T2262] attempt to access beyond end of device [ 2091.914731][T21942] loop4: rw=1, want=17233, limit=112 [ 2091.937707][ T2262] loop3: rw=1, want=132, limit=112 [ 2091.967774][ T2262] Buffer I/O error on dev loop3, logical block 131, lost async page write [ 2092.050076][T21942] attempt to access beyond end of device [ 2092.098518][ T2262] attempt to access beyond end of device [ 2092.294939][T21942] loop4: rw=1, want=21329, limit=112 [ 2092.346016][ T2262] loop3: rw=1, want=133, limit=112 [ 2092.365182][T21942] attempt to access beyond end of device [ 2092.370882][T21942] loop4: rw=1, want=22337, limit=112 17:11:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x210}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:11:51 executing program 5: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2092.620101][ T2262] Buffer I/O error on dev loop3, logical block 132, lost async page write [ 2092.628803][ T2262] attempt to access beyond end of device [ 2092.634480][ T2262] loop3: rw=1, want=142, limit=112 [ 2092.634532][ T2262] attempt to access beyond end of device [ 2092.634544][ T2262] loop3: rw=1, want=143, limit=112 [ 2092.634587][ T2262] attempt to access beyond end of device [ 2092.634602][ T2262] loop3: rw=1, want=144, limit=112 [ 2092.661566][ T2262] attempt to access beyond end of device [ 2092.667326][ T2262] loop3: rw=1, want=145, limit=112 [ 2092.678141][ T2262] attempt to access beyond end of device [ 2092.683919][ T2262] loop3: rw=1, want=3801, limit=112 [ 2092.692170][ T2262] attempt to access beyond end of device [ 2092.697827][ T2262] loop3: rw=1, want=3830, limit=112 [ 2092.703170][ T2262] attempt to access beyond end of device [ 2092.708810][ T2262] loop3: rw=1, want=3831, limit=112 [ 2092.714146][ T2262] attempt to access beyond end of device 17:11:51 executing program 2: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2092.719793][ T2262] loop3: rw=1, want=3832, limit=112 [ 2092.725148][ T2262] attempt to access beyond end of device [ 2092.725162][ T2262] loop3: rw=1, want=3833, limit=112 [ 2092.725197][ T2262] attempt to access beyond end of device [ 2092.725207][ T2262] loop3: rw=1, want=3854, limit=112 [ 2092.725240][ T2262] attempt to access beyond end of device [ 2092.789233][ T2262] loop3: rw=1, want=3855, limit=112 [ 2092.811918][ T2262] attempt to access beyond end of device [ 2092.817602][ T2262] loop3: rw=1, want=3856, limit=112 17:11:52 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2093.166293][ T2262] attempt to access beyond end of device [ 2093.271416][ T2262] loop3: rw=1, want=3857, limit=112 [ 2093.281244][T21942] attempt to access beyond end of device [ 2093.328456][T21942] loop1: rw=1, want=130, limit=112 17:11:52 executing program 5: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2093.373283][T21942] attempt to access beyond end of device [ 2093.445732][T21942] loop1: rw=1, want=131, limit=112 [ 2093.476803][T21942] attempt to access beyond end of device [ 2093.526316][T21942] loop1: rw=1, want=132, limit=112 [ 2093.851269][ T2262] attempt to access beyond end of device [ 2093.869572][T21942] attempt to access beyond end of device [ 2093.938268][ T2262] loop3: rw=1, want=3906, limit=112 [ 2093.951152][T21942] loop1: rw=1, want=133, limit=112 [ 2094.006041][ T2262] attempt to access beyond end of device [ 2094.012913][T21942] attempt to access beyond end of device [ 2094.018573][T21942] loop1: rw=1, want=142, limit=112 [ 2094.025453][T21942] attempt to access beyond end of device [ 2094.039136][T21942] loop1: rw=1, want=143, limit=112 [ 2094.052660][T21942] attempt to access beyond end of device [ 2094.062890][T21942] loop1: rw=1, want=144, limit=112 [ 2094.068382][ T2262] loop3: rw=1, want=3907, limit=112 [ 2094.073311][T21942] attempt to access beyond end of device [ 2094.079848][T21942] loop1: rw=1, want=145, limit=112 [ 2094.091634][T21942] attempt to access beyond end of device [ 2094.101213][T21942] loop1: rw=1, want=4241, limit=112 [ 2094.106851][ T2262] attempt to access beyond end of device [ 2094.133088][ T2262] loop3: rw=1, want=3908, limit=112 [ 2094.138360][ T2262] attempt to access beyond end of device [ 2094.155128][T21942] attempt to access beyond end of device [ 2094.160787][T21942] loop1: rw=1, want=8337, limit=112 [ 2094.177712][ T2262] loop3: rw=1, want=3909, limit=112 [ 2094.200106][ T2262] attempt to access beyond end of device [ 2094.231538][T21942] attempt to access beyond end of device [ 2094.237572][ T2262] loop3: rw=1, want=3918, limit=112 [ 2094.272199][T10586] attempt to access beyond end of device [ 2094.277850][T10586] loop2: rw=1, want=130, limit=112 [ 2094.291842][ T2262] attempt to access beyond end of device [ 2094.297486][ T2262] loop3: rw=1, want=3919, limit=112 [ 2094.331815][T21942] loop1: rw=1, want=12433, limit=112 [ 2094.337533][T10586] attempt to access beyond end of device [ 2094.343509][ T2262] attempt to access beyond end of device [ 2094.349145][ T2262] loop3: rw=1, want=3920, limit=112 [ 2094.361835][T10586] loop2: rw=1, want=131, limit=112 [ 2094.366982][T10586] attempt to access beyond end of device [ 2094.384586][T21942] attempt to access beyond end of device [ 2094.390234][T21942] loop1: rw=1, want=16529, limit=112 [ 2094.397186][ T2262] attempt to access beyond end of device [ 2094.411846][T10586] loop2: rw=1, want=132, limit=112 [ 2094.417027][T10586] attempt to access beyond end of device [ 2094.422762][ T2262] loop3: rw=1, want=3921, limit=112 [ 2094.444577][ T2262] attempt to access beyond end of device [ 2094.450234][ T2262] loop3: rw=1, want=8017, limit=112 [ 2094.451800][T10586] loop2: rw=1, want=133, limit=112 [ 2094.460752][T10586] attempt to access beyond end of device [ 2094.483017][T21942] attempt to access beyond end of device [ 2094.488730][T21942] loop1: rw=1, want=20625, limit=112 [ 2094.511786][T10586] loop2: rw=1, want=142, limit=112 [ 2094.516940][T10586] attempt to access beyond end of device [ 2094.524801][ T2262] attempt to access beyond end of device [ 2094.530444][ T2262] loop3: rw=1, want=12113, limit=112 [ 2094.554101][T21942] attempt to access beyond end of device [ 2094.559754][T21942] loop1: rw=1, want=23649, limit=112 [ 2094.565927][T10586] loop2: rw=1, want=143, limit=112 [ 2094.595894][T10586] attempt to access beyond end of device [ 2094.661492][T10586] loop2: rw=1, want=144, limit=112 [ 2094.680247][ T2262] attempt to access beyond end of device [ 2094.733145][T10586] attempt to access beyond end of device [ 2094.738833][T10586] loop2: rw=1, want=145, limit=112 [ 2094.761833][ T2262] loop3: rw=1, want=16209, limit=112 [ 2094.774555][T10586] attempt to access beyond end of device [ 2094.780220][T10586] loop2: rw=1, want=4241, limit=112 [ 2094.790678][ T2262] attempt to access beyond end of device [ 2094.999492][ T2262] loop3: rw=1, want=20305, limit=112 [ 2095.034119][T10586] attempt to access beyond end of device [ 2095.068970][ T2262] attempt to access beyond end of device [ 2095.078873][T10586] loop2: rw=1, want=8337, limit=112 [ 2095.113159][ T2262] loop3: rw=1, want=21633, limit=112 [ 2095.187013][T10586] attempt to access beyond end of device [ 2095.221672][T10586] loop2: rw=1, want=12433, limit=112 [ 2095.337886][ T2262] attempt to access beyond end of device [ 2095.344649][T10586] attempt to access beyond end of device [ 2095.350314][T10586] loop2: rw=1, want=14297, limit=112 [ 2095.361857][ T2262] loop4: rw=1, want=130, limit=112 [ 2095.367065][ T2262] attempt to access beyond end of device [ 2095.383478][T10586] attempt to access beyond end of device [ 2095.389170][T10586] loop2: rw=1, want=14326, limit=112 [ 2095.401832][ T2262] loop4: rw=1, want=131, limit=112 [ 2095.407025][ T2262] attempt to access beyond end of device [ 2095.441835][ T2262] loop4: rw=1, want=132, limit=112 [ 2095.447094][ T2262] attempt to access beyond end of device [ 2095.449697][T10586] attempt to access beyond end of device [ 2095.458645][T10586] loop2: rw=1, want=14327, limit=112 [ 2095.464218][T10586] attempt to access beyond end of device [ 2095.469925][T10586] loop2: rw=1, want=14328, limit=112 [ 2095.478405][ T2262] loop4: rw=1, want=133, limit=112 [ 2095.488074][ T2262] attempt to access beyond end of device [ 2095.502544][ T2262] loop4: rw=1, want=142, limit=112 [ 2095.507740][ T2262] attempt to access beyond end of device [ 2095.512034][T10586] attempt to access beyond end of device [ 2095.519063][T10586] loop2: rw=1, want=14329, limit=112 [ 2095.521845][ T2262] loop4: rw=1, want=143, limit=112 [ 2095.531908][T10586] attempt to access beyond end of device [ 2095.537551][T10586] loop2: rw=1, want=14350, limit=112 [ 2095.551057][ T2262] attempt to access beyond end of device [ 2095.563425][ T2262] loop4: rw=1, want=144, limit=112 [ 2095.571015][ T2262] attempt to access beyond end of device [ 2095.576864][T10586] attempt to access beyond end of device [ 2095.583377][ T2262] loop4: rw=1, want=145, limit=112 [ 2095.589065][T10586] loop2: rw=1, want=14351, limit=112 [ 2095.600156][T10586] attempt to access beyond end of device [ 2095.628683][ T2262] attempt to access beyond end of device [ 2095.629360][T10586] loop2: rw=1, want=14352, limit=112 [ 2095.649052][T10586] attempt to access beyond end of device [ 2095.661939][T10586] loop2: rw=1, want=14353, limit=112 [ 2095.667348][T10586] attempt to access beyond end of device [ 2095.699360][T10586] loop2: rw=1, want=14402, limit=112 [ 2095.721308][T10586] attempt to access beyond end of device [ 2095.727075][T10586] loop2: rw=1, want=14403, limit=112 [ 2095.758504][T10586] attempt to access beyond end of device [ 2095.779001][ T2262] loop4: rw=1, want=4241, limit=112 [ 2095.801644][T10586] loop2: rw=1, want=14404, limit=112 [ 2095.838178][T10586] attempt to access beyond end of device [ 2095.872855][T10586] loop2: rw=1, want=14405, limit=112 [ 2095.882545][ T2262] attempt to access beyond end of device [ 2095.904268][T10586] attempt to access beyond end of device [ 2095.913738][ T2262] loop4: rw=1, want=8337, limit=112 [ 2095.932006][T10586] loop2: rw=1, want=14414, limit=112 [ 2095.955973][T10586] attempt to access beyond end of device [ 2095.962941][ T2262] attempt to access beyond end of device [ 2095.981869][T10586] loop2: rw=1, want=14415, limit=112 [ 2095.989642][ T2262] loop4: rw=1, want=9625, limit=112 [ 2096.005607][T10586] attempt to access beyond end of device [ 2096.018529][ T2262] attempt to access beyond end of device [ 2096.031951][T10586] loop2: rw=1, want=14416, limit=112 [ 2096.042485][ T2262] loop4: rw=1, want=9654, limit=112 [ 2096.065708][T10586] attempt to access beyond end of device [ 2096.079712][ T2262] attempt to access beyond end of device [ 2096.097190][T10586] loop2: rw=1, want=14417, limit=112 [ 2096.109923][ T2262] loop4: rw=1, want=9655, limit=112 [ 2096.137917][ T2262] attempt to access beyond end of device [ 2096.162972][T10586] attempt to access beyond end of device [ 2096.171237][ T2262] loop4: rw=1, want=9656, limit=112 [ 2096.691806][ T2262] buffer_io_error: 62 callbacks suppressed [ 2096.691818][ T2262] Buffer I/O error on dev loop4, logical block 9655, lost async page write [ 2096.715679][T10586] loop2: rw=1, want=18513, limit=112 [ 2096.753382][ T2262] attempt to access beyond end of device [ 2096.828327][T10586] attempt to access beyond end of device [ 2096.857522][ T2262] loop4: rw=1, want=9657, limit=112 [ 2096.862912][ T2262] Buffer I/O error on dev loop4, logical block 9656, lost async page write [ 2096.871538][ T2262] attempt to access beyond end of device [ 2096.877319][ T2262] loop4: rw=1, want=9678, limit=112 [ 2096.881201][T10586] loop2: rw=1, want=22609, limit=112 [ 2096.882590][ T2262] Buffer I/O error on dev loop4, logical block 9677, lost async page write [ 2096.882629][ T2262] attempt to access beyond end of device [ 2096.902233][ T2262] loop4: rw=1, want=9679, limit=112 [ 2096.928515][T21942] attempt to access beyond end of device [ 2096.946402][T21942] loop3: rw=1, want=130, limit=112 [ 2096.963144][T21942] Buffer I/O error on dev loop3, logical block 129, lost async page write 17:11:56 executing program 3: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:11:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ca}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:11:56 executing program 5: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:11:56 executing program 2: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:11:56 executing program 4: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2096.974277][T10586] attempt to access beyond end of device [ 2096.989519][ T2262] Buffer I/O error on dev loop4, logical block 9678, lost async page write 17:11:56 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2097.038363][T10586] loop2: rw=1, want=26705, limit=112 [ 2097.051187][T21942] attempt to access beyond end of device [ 2097.060127][ T2262] attempt to access beyond end of device [ 2097.067527][ T2262] loop4: rw=1, want=9680, limit=112 [ 2097.090649][T27989] attempt to access beyond end of device [ 2097.091374][T21942] loop3: rw=1, want=131, limit=112 [ 2097.103424][ T2262] Buffer I/O error on dev loop4, logical block 9679, lost async page write [ 2097.125604][T27989] loop1: rw=1, want=130, limit=112 [ 2097.132399][T10586] attempt to access beyond end of device [ 2097.140397][ T2262] attempt to access beyond end of device [ 2097.151875][T27989] Buffer I/O error on dev loop1, logical block 129, lost async page write [ 2097.164969][T10586] loop2: rw=1, want=30801, limit=112 [ 2097.173687][ T2262] loop4: rw=1, want=9681, limit=112 [ 2097.191360][T27989] attempt to access beyond end of device [ 2097.199542][ T2262] Buffer I/O error on dev loop4, logical block 9680, lost async page write [ 2097.222420][T10586] attempt to access beyond end of device [ 2097.230509][T27989] loop1: rw=1, want=131, limit=112 17:11:56 executing program 5: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2097.256653][T21942] Buffer I/O error on dev loop3, logical block 130, lost async page write [ 2097.257898][ T2262] attempt to access beyond end of device [ 2097.276705][T10586] loop2: rw=1, want=32993, limit=112 [ 2097.282595][T27989] Buffer I/O error on dev loop1, logical block 130, lost async page write [ 2097.284069][T21942] attempt to access beyond end of device [ 2097.306671][ T2262] loop4: rw=1, want=9730, limit=112 [ 2097.307719][T21942] loop3: rw=1, want=132, limit=112 [ 2097.319931][T21942] attempt to access beyond end of device [ 2097.329085][T27989] attempt to access beyond end of device [ 2097.346848][ T2262] attempt to access beyond end of device [ 2097.360596][T21942] loop3: rw=1, want=133, limit=112 [ 2097.377140][ T2262] loop4: rw=1, want=9731, limit=112 [ 2097.388291][T21942] attempt to access beyond end of device [ 2097.406543][ T2262] attempt to access beyond end of device [ 2097.420365][T21942] loop3: rw=1, want=142, limit=112 [ 2097.439396][ T2262] loop4: rw=1, want=9732, limit=112 [ 2097.449372][T21942] attempt to access beyond end of device [ 2097.459054][T27989] loop1: rw=1, want=132, limit=112 [ 2097.474666][ T2262] attempt to access beyond end of device [ 2097.486044][T21942] loop3: rw=1, want=143, limit=112 17:11:56 executing program 5: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2097.510712][T27989] attempt to access beyond end of device [ 2097.529161][ T2262] loop4: rw=1, want=9733, limit=112 [ 2097.534830][T21942] attempt to access beyond end of device [ 2097.540476][T21942] loop3: rw=1, want=144, limit=112 [ 2097.546571][ T2262] attempt to access beyond end of device [ 2097.550274][T27989] loop1: rw=1, want=133, limit=112 [ 2097.552490][ T2262] loop4: rw=1, want=9742, limit=112 [ 2097.562914][T21942] attempt to access beyond end of device [ 2097.565756][T27989] attempt to access beyond end of device [ 2097.568549][T21942] loop3: rw=1, want=145, limit=112 [ 2097.571866][ T2262] attempt to access beyond end of device [ 2097.587181][T21942] attempt to access beyond end of device [ 2097.592958][T21942] loop3: rw=1, want=3353, limit=112 [ 2097.598554][ T2262] loop4: rw=1, want=9743, limit=112 [ 2097.609304][T27989] loop1: rw=1, want=142, limit=112 [ 2097.609566][T21942] attempt to access beyond end of device [ 2097.620219][ T2262] attempt to access beyond end of device [ 2097.631151][T21942] loop3: rw=1, want=3382, limit=112 [ 2097.632584][T27989] attempt to access beyond end of device [ 2097.676803][T27989] loop1: rw=1, want=143, limit=112 [ 2097.692708][ T2262] loop4: rw=1, want=9744, limit=112 [ 2097.705288][T27989] attempt to access beyond end of device [ 2097.722999][ T2262] attempt to access beyond end of device [ 2097.735875][T27989] loop1: rw=1, want=144, limit=112 [ 2097.754240][ T2262] loop4: rw=1, want=9745, limit=112 [ 2097.765648][T27989] attempt to access beyond end of device [ 2097.796240][T27989] loop1: rw=1, want=145, limit=112 [ 2097.821227][ T2262] attempt to access beyond end of device [ 2097.874623][ T2262] loop4: rw=1, want=13841, limit=112 [ 2097.881909][T21942] attempt to access beyond end of device [ 2097.886575][T27989] attempt to access beyond end of device [ 2097.887831][T21942] loop3: rw=1, want=3383, limit=112 [ 2097.898854][T21942] attempt to access beyond end of device [ 2097.904610][T21942] loop3: rw=1, want=3384, limit=112 [ 2097.910207][T21942] attempt to access beyond end of device [ 2097.915950][T21942] loop3: rw=1, want=3385, limit=112 17:11:56 executing program 5: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2097.931483][T27989] loop1: rw=1, want=4241, limit=112 [ 2097.939080][T21942] attempt to access beyond end of device [ 2097.944798][T21942] loop3: rw=1, want=3406, limit=112 [ 2097.950326][T21942] attempt to access beyond end of device [ 2097.957201][T21942] loop3: rw=1, want=3407, limit=112 [ 2097.962758][T21942] attempt to access beyond end of device [ 2097.968414][T21942] loop3: rw=1, want=3408, limit=112 [ 2097.975572][T21942] attempt to access beyond end of device 17:11:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2097.983517][ T2262] attempt to access beyond end of device [ 2097.996639][T21942] loop3: rw=1, want=3409, limit=112 [ 2098.002621][T27989] attempt to access beyond end of device [ 2098.009100][T21942] attempt to access beyond end of device [ 2098.009599][ T2262] loop4: rw=1, want=17937, limit=112 [ 2098.016223][T27989] loop1: rw=1, want=8337, limit=112 [ 2098.026303][T21942] loop3: rw=1, want=3458, limit=112 [ 2098.032289][T21942] attempt to access beyond end of device [ 2098.042331][T21942] loop3: rw=1, want=3459, limit=112 [ 2098.057362][T21942] attempt to access beyond end of device [ 2098.069322][T27989] attempt to access beyond end of device [ 2098.078659][T21942] loop3: rw=1, want=3460, limit=112 [ 2098.086509][ T2262] attempt to access beyond end of device [ 2098.092303][T27989] loop1: rw=1, want=12433, limit=112 [ 2098.097779][T21942] attempt to access beyond end of device [ 2098.104076][ T2262] loop4: rw=1, want=21969, limit=112 [ 2098.113085][T21942] loop3: rw=1, want=3461, limit=112 [ 2098.139892][T21942] attempt to access beyond end of device [ 2098.166671][T27989] attempt to access beyond end of device [ 2098.206054][T21942] loop3: rw=1, want=3470, limit=112 [ 2098.222209][T27989] loop1: rw=1, want=16529, limit=112 [ 2098.242163][T21942] attempt to access beyond end of device 17:11:57 executing program 5: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2098.311810][T21942] loop3: rw=1, want=3471, limit=112 [ 2098.317122][T21942] attempt to access beyond end of device [ 2098.323286][T27989] attempt to access beyond end of device [ 2098.359572][T27989] loop1: rw=1, want=20625, limit=112 [ 2098.364963][T21942] loop3: rw=1, want=3472, limit=112 [ 2098.370212][T21942] attempt to access beyond end of device [ 2098.386974][T27989] attempt to access beyond end of device [ 2098.411851][T21942] loop3: rw=1, want=3473, limit=112 [ 2098.421890][T27989] loop1: rw=1, want=21593, limit=112 [ 2098.428241][T27989] attempt to access beyond end of device [ 2098.443679][T21942] attempt to access beyond end of device [ 2098.449359][T21942] loop3: rw=1, want=7569, limit=112 [ 2098.461811][T27989] loop1: rw=1, want=21622, limit=112 [ 2098.467136][T27989] attempt to access beyond end of device [ 2098.501505][T21942] attempt to access beyond end of device [ 2098.511866][T27989] loop1: rw=1, want=21623, limit=112 [ 2098.517212][T27989] attempt to access beyond end of device [ 2098.541799][T27989] loop1: rw=1, want=21624, limit=112 [ 2098.547145][T27989] attempt to access beyond end of device [ 2098.552970][T21942] loop3: rw=1, want=11665, limit=112 17:11:57 executing program 5: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2098.621879][T27989] loop1: rw=1, want=21625, limit=112 [ 2098.627247][T27989] attempt to access beyond end of device [ 2098.638064][T27989] loop1: rw=1, want=21646, limit=112 [ 2098.647084][T27989] attempt to access beyond end of device [ 2098.655827][T27989] loop1: rw=1, want=21647, limit=112 [ 2098.657292][T21942] attempt to access beyond end of device [ 2098.712761][T21942] loop3: rw=1, want=15761, limit=112 [ 2098.772107][T27989] attempt to access beyond end of device [ 2098.812128][T27989] loop1: rw=1, want=21648, limit=112 [ 2098.818458][T21942] attempt to access beyond end of device [ 2098.848000][T27989] attempt to access beyond end of device [ 2098.858714][T21942] loop3: rw=1, want=19857, limit=112 [ 2098.890832][T27989] loop1: rw=1, want=21649, limit=112 [ 2098.896283][T27989] attempt to access beyond end of device [ 2098.901981][T27989] loop1: rw=1, want=21698, limit=112 [ 2098.907308][T27989] attempt to access beyond end of device [ 2098.913094][T27989] loop1: rw=1, want=21699, limit=112 [ 2098.918422][T27989] attempt to access beyond end of device [ 2098.924141][T27989] loop1: rw=1, want=21700, limit=112 [ 2098.929459][T27989] attempt to access beyond end of device [ 2098.935159][T27989] loop1: rw=1, want=21701, limit=112 [ 2098.940481][T27989] attempt to access beyond end of device [ 2098.946223][T27989] loop1: rw=1, want=21710, limit=112 [ 2098.951565][T27989] attempt to access beyond end of device [ 2098.957277][T27989] loop1: rw=1, want=21711, limit=112 [ 2098.962669][T27989] attempt to access beyond end of device [ 2098.968317][T27989] loop1: rw=1, want=21712, limit=112 [ 2098.983092][T27989] attempt to access beyond end of device [ 2098.992995][T21942] attempt to access beyond end of device [ 2098.998675][T21942] loop3: rw=1, want=23953, limit=112 [ 2099.021899][T27989] loop1: rw=1, want=21713, limit=112 [ 2099.030991][T27989] attempt to access beyond end of device [ 2099.031238][T21942] attempt to access beyond end of device [ 2099.054440][T21942] loop3: rw=1, want=28049, limit=112 [ 2099.074847][T21942] attempt to access beyond end of device [ 2099.080494][T21942] loop3: rw=1, want=32145, limit=112 [ 2099.086329][T27989] loop1: rw=1, want=24073, limit=112 [ 2099.152665][T21942] attempt to access beyond end of device [ 2099.158481][T21942] loop3: rw=1, want=32993, limit=112 [ 2100.075112][T21942] attempt to access beyond end of device [ 2100.080796][T21942] loop2: rw=1, want=130, limit=112 [ 2100.087559][T21942] attempt to access beyond end of device [ 2100.093296][T21942] loop2: rw=1, want=131, limit=112 [ 2100.098432][T21942] attempt to access beyond end of device [ 2100.104171][T21942] loop2: rw=1, want=132, limit=112 [ 2100.109314][T21942] attempt to access beyond end of device [ 2100.115173][T21942] loop2: rw=1, want=133, limit=112 [ 2100.120326][T21942] attempt to access beyond end of device [ 2100.151830][T21942] loop2: rw=1, want=142, limit=112 [ 2100.157080][T21942] attempt to access beyond end of device [ 2100.169738][T21942] loop2: rw=1, want=143, limit=112 [ 2100.180662][T21942] attempt to access beyond end of device [ 2100.193433][T21942] loop2: rw=1, want=144, limit=112 [ 2100.204284][T21942] attempt to access beyond end of device [ 2100.215642][T21942] loop2: rw=1, want=145, limit=112 [ 2100.240922][T21942] attempt to access beyond end of device [ 2100.253485][T21942] loop2: rw=1, want=4241, limit=112 [ 2100.285453][T21942] attempt to access beyond end of device [ 2100.297946][T21942] loop2: rw=1, want=8337, limit=112 [ 2100.334105][T21942] attempt to access beyond end of device [ 2100.360321][T21942] loop2: rw=1, want=11097, limit=112 [ 2100.425679][T21942] attempt to access beyond end of device [ 2100.477966][T21942] loop2: rw=1, want=11126, limit=112 [ 2100.483484][T21942] attempt to access beyond end of device [ 2100.489165][T21942] loop2: rw=1, want=11127, limit=112 [ 2100.494549][T21942] attempt to access beyond end of device [ 2100.500191][T21942] loop2: rw=1, want=11128, limit=112 [ 2100.505605][T21942] attempt to access beyond end of device [ 2100.523673][T21942] loop2: rw=1, want=11129, limit=112 [ 2100.552189][T21942] attempt to access beyond end of device [ 2100.586603][T21942] loop2: rw=1, want=11150, limit=112 [ 2100.615357][T21942] attempt to access beyond end of device [ 2100.640715][T21942] loop2: rw=1, want=11151, limit=112 [ 2100.665784][T21942] attempt to access beyond end of device [ 2100.689906][T21942] loop2: rw=1, want=11152, limit=112 [ 2100.713876][T21942] attempt to access beyond end of device [ 2100.739631][T21942] loop2: rw=1, want=11153, limit=112 [ 2100.763637][T21942] attempt to access beyond end of device [ 2100.789941][T21942] loop2: rw=1, want=11202, limit=112 [ 2100.814003][T21942] attempt to access beyond end of device [ 2100.839596][T21942] loop2: rw=1, want=11203, limit=112 [ 2100.861123][T21942] attempt to access beyond end of device [ 2100.880998][T21942] loop2: rw=1, want=11204, limit=112 [ 2100.899295][T21942] attempt to access beyond end of device [ 2100.931985][T21942] loop2: rw=1, want=11205, limit=112 [ 2100.954862][T21942] attempt to access beyond end of device [ 2100.979503][T21942] loop2: rw=1, want=11214, limit=112 [ 2100.985092][T21942] attempt to access beyond end of device [ 2100.990772][T21942] loop2: rw=1, want=11215, limit=112 [ 2100.996443][T21942] attempt to access beyond end of device [ 2101.002431][T21942] loop2: rw=1, want=11216, limit=112 [ 2101.007808][T21942] attempt to access beyond end of device [ 2101.013773][T21942] loop2: rw=1, want=11217, limit=112 [ 2101.028726][T21942] attempt to access beyond end of device [ 2101.034632][T21942] loop2: rw=1, want=15313, limit=112 [ 2101.051035][T21942] attempt to access beyond end of device [ 2101.057862][T21942] loop2: rw=1, want=19409, limit=112 [ 2101.059013][ T2262] attempt to access beyond end of device [ 2101.072881][T21942] attempt to access beyond end of device [ 2101.078539][T21942] loop2: rw=1, want=23505, limit=112 [ 2101.089229][T21942] attempt to access beyond end of device [ 2101.094988][T21942] loop2: rw=1, want=24801, limit=112 [ 2101.113118][ T2262] loop1: rw=1, want=130, limit=112 [ 2101.132158][ T2262] attempt to access beyond end of device [ 2101.157268][ T2262] loop1: rw=1, want=131, limit=112 [ 2101.179607][ T2262] attempt to access beyond end of device [ 2101.205880][ T2262] loop1: rw=1, want=132, limit=112 [ 2101.228175][ T2262] attempt to access beyond end of device [ 2101.314652][ T2262] loop1: rw=1, want=133, limit=112 [ 2101.332935][ T2262] attempt to access beyond end of device [ 2101.338724][ T2262] loop1: rw=1, want=142, limit=112 [ 2101.344343][ T2262] attempt to access beyond end of device [ 2101.350009][ T2262] loop1: rw=1, want=143, limit=112 [ 2101.355247][ T2262] attempt to access beyond end of device [ 2101.361069][ T2262] loop1: rw=1, want=144, limit=112 [ 2101.366295][ T2262] attempt to access beyond end of device [ 2101.372247][ T2262] loop1: rw=1, want=145, limit=112 [ 2101.383977][ T2262] attempt to access beyond end of device [ 2101.389628][ T2262] loop1: rw=1, want=4241, limit=112 [ 2101.404368][ T2262] attempt to access beyond end of device [ 2101.410021][ T2262] loop1: rw=1, want=8153, limit=112 [ 2101.418749][ T2262] attempt to access beyond end of device [ 2101.424469][ T2262] loop1: rw=1, want=8182, limit=112 [ 2101.429704][ T2262] attempt to access beyond end of device [ 2101.435468][ T2262] loop1: rw=1, want=8183, limit=112 [ 2101.441097][ T2262] attempt to access beyond end of device [ 2101.446866][ T2262] loop1: rw=1, want=8184, limit=112 [ 2101.452358][ T2262] attempt to access beyond end of device [ 2101.458011][ T2262] loop1: rw=1, want=8185, limit=112 [ 2101.463385][ T2262] attempt to access beyond end of device [ 2101.469286][ T2262] loop1: rw=1, want=8206, limit=112 [ 2101.491913][ T2262] attempt to access beyond end of device [ 2101.497561][ T2262] loop1: rw=1, want=8207, limit=112 [ 2101.521990][ T2262] attempt to access beyond end of device [ 2101.527688][ T2262] loop1: rw=1, want=8208, limit=112 [ 2101.622362][ T2262] attempt to access beyond end of device [ 2101.628017][ T2262] loop1: rw=1, want=8209, limit=112 [ 2101.808422][ T2262] buffer_io_error: 91 callbacks suppressed [ 2101.808433][ T2262] Buffer I/O error on dev loop1, logical block 8208, lost async page write [ 2101.878604][ T2262] attempt to access beyond end of device [ 2101.913609][ T2262] loop1: rw=1, want=8258, limit=112 [ 2101.943102][ T2262] Buffer I/O error on dev loop1, logical block 8257, lost async page write [ 2101.965887][ T2262] attempt to access beyond end of device [ 2101.971556][ T2262] loop1: rw=1, want=8259, limit=112 [ 2101.976837][ T2262] Buffer I/O error on dev loop1, logical block 8258, lost async page write [ 2101.985537][ T2262] attempt to access beyond end of device 17:12:01 executing program 3: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:12:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:12:01 executing program 5: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:12:01 executing program 4: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:12:01 executing program 2: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:12:01 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2101.991167][ T2262] loop1: rw=1, want=8260, limit=112 [ 2101.996432][ T2262] Buffer I/O error on dev loop1, logical block 8259, lost async page write [ 2102.005133][ T2262] attempt to access beyond end of device [ 2102.010794][ T2262] loop1: rw=1, want=8261, limit=112 [ 2102.016035][ T2262] Buffer I/O error on dev loop1, logical block 8260, lost async page write [ 2102.026825][ T7] attempt to access beyond end of device [ 2102.036619][ T2262] attempt to access beyond end of device [ 2102.042481][ T2262] loop1: rw=1, want=8270, limit=112 [ 2102.047905][ T2262] Buffer I/O error on dev loop1, logical block 8269, lost async page write [ 2102.055206][ T7] loop3: rw=1, want=130, limit=112 [ 2102.056774][ T2262] attempt to access beyond end of device [ 2102.066510][ T7] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 2102.067782][ T2262] loop1: rw=1, want=8271, limit=112 [ 2102.081201][ T2262] Buffer I/O error on dev loop1, logical block 8270, lost async page write [ 2102.090227][ T2262] attempt to access beyond end of device [ 2102.096366][ T2262] loop1: rw=1, want=8272, limit=112 [ 2102.120434][ T2262] Buffer I/O error on dev loop1, logical block 8271, lost async page write [ 2102.137363][ T7] attempt to access beyond end of device [ 2102.525598][ T7] loop3: rw=1, want=131, limit=112 [ 2102.619544][ T2262] attempt to access beyond end of device [ 2102.625797][ T7] Buffer I/O error on dev loop3, logical block 130, lost async page write [ 2102.706978][ T2262] loop1: rw=1, want=8273, limit=112 [ 2102.743615][ T7] attempt to access beyond end of device 17:12:01 executing program 5: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2102.856150][ T7] loop3: rw=1, want=132, limit=112 [ 2102.905854][ T2262] attempt to access beyond end of device [ 2102.917671][ T7] attempt to access beyond end of device [ 2102.934915][ T2262] loop1: rw=1, want=12369, limit=112 17:12:02 executing program 4: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:12:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x324}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2102.967859][T21942] attempt to access beyond end of device [ 2102.971811][ T7] loop3: rw=1, want=133, limit=112 [ 2102.978627][T21942] loop4: rw=1, want=130, limit=112 [ 2102.978708][ T7] attempt to access beyond end of device [ 2102.994187][T21942] attempt to access beyond end of device [ 2102.999995][ T2262] attempt to access beyond end of device [ 2103.009098][ T7] loop3: rw=1, want=142, limit=112 [ 2103.208446][T21942] loop4: rw=1, want=131, limit=112 [ 2103.214394][ T2262] loop1: rw=1, want=16465, limit=112 [ 2103.220207][ T7] attempt to access beyond end of device [ 2103.248487][T21942] attempt to access beyond end of device [ 2103.263341][ T7] loop3: rw=1, want=143, limit=112 [ 2103.321369][T21942] loop4: rw=1, want=132, limit=112 [ 2103.345011][ T7] attempt to access beyond end of device [ 2103.395391][ T2262] attempt to access beyond end of device [ 2103.416603][T21942] attempt to access beyond end of device [ 2103.422364][T21942] loop4: rw=1, want=133, limit=112 [ 2103.427513][T21942] attempt to access beyond end of device [ 2103.433221][T21942] loop4: rw=1, want=142, limit=112 [ 2103.437294][ T7] loop3: rw=1, want=144, limit=112 [ 2103.438389][T21942] attempt to access beyond end of device [ 2103.438402][T21942] loop4: rw=1, want=143, limit=112 [ 2103.438436][T21942] attempt to access beyond end of device [ 2103.488106][ T7] attempt to access beyond end of device 17:12:02 executing program 5: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2103.555445][ T7] loop3: rw=1, want=145, limit=112 [ 2103.599053][T21942] loop4: rw=1, want=144, limit=112 [ 2103.663788][T21942] attempt to access beyond end of device [ 2103.676138][ T2262] loop1: rw=1, want=20561, limit=112 [ 2103.684057][ T7] attempt to access beyond end of device 17:12:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2104.019204][T21942] loop4: rw=1, want=145, limit=112 [ 2104.052015][ T7] loop3: rw=1, want=4241, limit=112 [ 2104.093205][ T2262] attempt to access beyond end of device [ 2104.117570][ T7] attempt to access beyond end of device [ 2104.123291][ T7] loop3: rw=1, want=6553, limit=112 [ 2104.130449][ T7] attempt to access beyond end of device [ 2104.136216][ T7] loop3: rw=1, want=6582, limit=112 17:12:03 executing program 2: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2104.136788][T21942] attempt to access beyond end of device [ 2104.141463][ T7] attempt to access beyond end of device [ 2104.141477][ T7] loop3: rw=1, want=6583, limit=112 [ 2104.141513][ T7] attempt to access beyond end of device [ 2104.181794][ T2262] loop1: rw=1, want=23169, limit=112 [ 2104.184565][T21942] loop4: rw=1, want=4241, limit=112 [ 2104.211313][T28929] attempt to access beyond end of device [ 2104.232166][T28929] loop2: rw=1, want=130, limit=112 [ 2104.232992][ T7] loop3: rw=1, want=6584, limit=112 [ 2104.247701][T28929] attempt to access beyond end of device [ 2104.266031][T28929] loop2: rw=1, want=131, limit=112 [ 2104.272197][ T7] attempt to access beyond end of device [ 2104.277658][T21942] attempt to access beyond end of device [ 2104.278001][ T7] loop3: rw=1, want=6585, limit=112 [ 2104.301848][ T7] attempt to access beyond end of device [ 2104.302604][T28929] attempt to access beyond end of device [ 2104.307528][ T7] loop3: rw=1, want=6606, limit=112 [ 2104.307584][ T7] attempt to access beyond end of device [ 2104.315588][T21942] loop4: rw=1, want=8337, limit=112 [ 2104.339395][T28929] loop2: rw=1, want=132, limit=112 [ 2104.358455][T28929] attempt to access beyond end of device [ 2104.361803][ T7] loop3: rw=1, want=6607, limit=112 [ 2104.369339][ T7] attempt to access beyond end of device [ 2104.381795][ T7] loop3: rw=1, want=6608, limit=112 [ 2104.386656][T21942] attempt to access beyond end of device [ 2104.393919][T28929] loop2: rw=1, want=133, limit=112 [ 2104.404796][T28929] attempt to access beyond end of device [ 2104.410548][T21942] loop4: rw=1, want=12433, limit=112 [ 2104.411849][ T7] attempt to access beyond end of device [ 2104.425270][T28929] loop2: rw=1, want=142, limit=112 [ 2104.431926][ T7] loop3: rw=1, want=6609, limit=112 [ 2104.437266][ T7] attempt to access beyond end of device [ 2104.440644][T28929] attempt to access beyond end of device [ 2104.461302][T21942] attempt to access beyond end of device [ 2104.467193][T28929] loop2: rw=1, want=143, limit=112 [ 2104.471844][ T7] loop3: rw=1, want=6658, limit=112 [ 2104.477051][T28929] attempt to access beyond end of device [ 2104.477612][ T7] attempt to access beyond end of device [ 2104.487865][T21942] loop4: rw=1, want=16529, limit=112 [ 2104.497818][T28929] loop2: rw=1, want=144, limit=112 [ 2104.511071][T28929] attempt to access beyond end of device [ 2104.512909][ T7] loop3: rw=1, want=6659, limit=112 [ 2104.539468][T28929] loop2: rw=1, want=145, limit=112 [ 2104.541842][ T7] attempt to access beyond end of device [ 2104.547185][T21942] attempt to access beyond end of device [ 2104.555965][ T7] loop3: rw=1, want=6660, limit=112 [ 2104.561224][ T7] attempt to access beyond end of device [ 2104.570849][T28929] attempt to access beyond end of device [ 2104.581875][T21942] loop4: rw=1, want=20625, limit=112 [ 2104.591947][ T7] loop3: rw=1, want=6661, limit=112 [ 2104.597216][ T7] attempt to access beyond end of device [ 2104.600092][T28929] loop2: rw=1, want=4241, limit=112 [ 2104.612967][T21942] attempt to access beyond end of device [ 2104.618635][T21942] loop4: rw=1, want=21977, limit=112 [ 2104.621805][ T7] loop3: rw=1, want=6670, limit=112 [ 2104.629156][ T7] attempt to access beyond end of device [ 2104.640016][T28929] attempt to access beyond end of device [ 2104.654074][T21942] attempt to access beyond end of device [ 2104.659713][T21942] loop4: rw=1, want=22006, limit=112 [ 2104.671806][ T7] loop3: rw=1, want=6671, limit=112 [ 2104.671868][T28929] loop2: rw=1, want=8337, limit=112 [ 2104.677057][ T7] attempt to access beyond end of device [ 2104.690269][T21942] attempt to access beyond end of device [ 2104.710421][T21942] loop4: rw=1, want=22007, limit=112 [ 2104.711792][ T7] loop3: rw=1, want=6672, limit=112 [ 2104.721096][ T7] attempt to access beyond end of device [ 2104.721299][T28929] attempt to access beyond end of device [ 2104.741444][T21942] attempt to access beyond end of device [ 2104.747708][T21942] loop4: rw=1, want=22008, limit=112 [ 2104.758255][T28929] loop2: rw=1, want=12433, limit=112 [ 2104.758797][ T7] loop3: rw=1, want=6673, limit=112 [ 2104.767552][T21942] attempt to access beyond end of device [ 2104.791917][T21942] loop4: rw=1, want=22009, limit=112 [ 2104.797293][T21942] attempt to access beyond end of device [ 2104.798268][ T7] attempt to access beyond end of device [ 2104.814683][T28929] attempt to access beyond end of device [ 2104.828058][T28929] loop2: rw=1, want=16529, limit=112 [ 2104.831884][ T7] loop3: rw=1, want=10769, limit=112 [ 2104.833951][T21942] loop4: rw=1, want=22030, limit=112 [ 2104.856546][T28929] attempt to access beyond end of device [ 2104.858442][ T7] attempt to access beyond end of device [ 2104.862938][T21942] attempt to access beyond end of device [ 2104.881419][T28929] loop2: rw=1, want=17433, limit=112 [ 2104.881885][ T7] loop3: rw=1, want=14865, limit=112 [ 2104.887325][T21942] loop4: rw=1, want=22031, limit=112 [ 2104.903428][T28929] attempt to access beyond end of device [ 2104.918503][T21942] attempt to access beyond end of device [ 2104.924722][T28929] loop2: rw=1, want=17462, limit=112 [ 2104.930158][T28929] attempt to access beyond end of device [ 2104.931158][ T7] attempt to access beyond end of device [ 2104.941890][T21942] loop4: rw=1, want=22032, limit=112 [ 2104.947291][T21942] attempt to access beyond end of device [ 2104.961450][T28929] loop2: rw=1, want=17463, limit=112 [ 2104.962839][ T7] loop3: rw=1, want=18961, limit=112 [ 2104.967514][T21942] loop4: rw=1, want=22033, limit=112 [ 2104.978561][T28929] attempt to access beyond end of device [ 2104.990815][ T7] attempt to access beyond end of device [ 2104.991907][T21942] attempt to access beyond end of device [ 2105.003785][ T7] loop3: rw=1, want=19145, limit=112 [ 2105.006023][T28929] loop2: rw=1, want=17464, limit=112 [ 2105.029101][T28929] attempt to access beyond end of device [ 2105.035297][T21942] loop4: rw=1, want=22082, limit=112 [ 2105.040645][T21942] attempt to access beyond end of device [ 2105.062128][T28929] loop2: rw=1, want=17465, limit=112 [ 2105.085504][T28929] attempt to access beyond end of device [ 2105.166999][T28929] loop2: rw=1, want=17486, limit=112 [ 2105.177329][T21942] loop4: rw=1, want=22083, limit=112 [ 2105.183084][T21942] attempt to access beyond end of device [ 2105.188722][T21942] loop4: rw=1, want=22084, limit=112 [ 2105.194573][T21942] attempt to access beyond end of device [ 2105.200209][T21942] loop4: rw=1, want=22085, limit=112 [ 2105.206006][T21942] attempt to access beyond end of device [ 2105.211660][T21942] loop4: rw=1, want=22094, limit=112 [ 2105.217421][T21942] attempt to access beyond end of device [ 2105.218019][T28929] attempt to access beyond end of device [ 2105.223514][T21942] loop4: rw=1, want=22095, limit=112 [ 2105.234974][T21942] attempt to access beyond end of device [ 2105.240618][T21942] loop4: rw=1, want=22096, limit=112 [ 2105.246440][T21942] attempt to access beyond end of device [ 2105.252541][T21942] loop4: rw=1, want=22097, limit=112 [ 2105.260497][T21942] attempt to access beyond end of device [ 2105.271812][T28929] loop2: rw=1, want=17487, limit=112 [ 2105.277169][T28929] attempt to access beyond end of device [ 2105.291825][T28929] loop2: rw=1, want=17488, limit=112 [ 2105.297227][T28929] attempt to access beyond end of device [ 2105.303414][T21942] loop4: rw=1, want=23545, limit=112 [ 2105.360482][T28929] loop2: rw=1, want=17489, limit=112 [ 2105.379672][T28929] attempt to access beyond end of device [ 2105.566919][T28929] loop2: rw=1, want=17538, limit=112 [ 2105.595364][T28929] attempt to access beyond end of device [ 2105.626384][T28929] loop2: rw=1, want=17539, limit=112 [ 2105.657095][T28929] attempt to access beyond end of device [ 2105.687886][T28929] loop2: rw=1, want=17540, limit=112 [ 2105.718465][T28929] attempt to access beyond end of device [ 2105.754686][T28929] loop2: rw=1, want=17541, limit=112 [ 2105.760044][T28929] attempt to access beyond end of device [ 2105.765819][T28929] loop2: rw=1, want=17550, limit=112 [ 2105.771185][T28929] attempt to access beyond end of device [ 2105.777014][T28929] loop2: rw=1, want=17551, limit=112 [ 2105.782457][T28929] attempt to access beyond end of device [ 2105.788093][T28929] loop2: rw=1, want=17552, limit=112 [ 2105.793537][T28929] attempt to access beyond end of device [ 2105.799190][T28929] loop2: rw=1, want=17553, limit=112 [ 2105.811433][T28929] attempt to access beyond end of device [ 2105.817169][T28929] loop2: rw=1, want=21649, limit=112 [ 2105.832722][T28929] attempt to access beyond end of device [ 2105.838376][T28929] loop2: rw=1, want=25745, limit=112 [ 2105.845790][T27989] attempt to access beyond end of device [ 2105.851501][T27989] loop1: rw=1, want=130, limit=112 [ 2105.853711][T28929] attempt to access beyond end of device [ 2105.862299][T28929] loop2: rw=1, want=29841, limit=112 [ 2105.875661][T28929] attempt to access beyond end of device [ 2105.881302][T28929] loop2: rw=1, want=32633, limit=112 [ 2105.901795][T27989] attempt to access beyond end of device [ 2105.907455][T27989] loop1: rw=1, want=131, limit=112 [ 2105.932445][T27989] attempt to access beyond end of device [ 2105.938087][T27989] loop1: rw=1, want=132, limit=112 [ 2105.979875][T27989] attempt to access beyond end of device [ 2105.985903][T27989] loop1: rw=1, want=133, limit=112 [ 2105.991041][T27989] attempt to access beyond end of device [ 2106.030187][T27989] loop1: rw=1, want=142, limit=112 [ 2106.041966][T27989] attempt to access beyond end of device [ 2106.047618][T27989] loop1: rw=1, want=143, limit=112 [ 2106.090340][T27989] attempt to access beyond end of device [ 2106.112132][T27989] loop1: rw=1, want=144, limit=112 [ 2106.139033][T27989] attempt to access beyond end of device [ 2106.184128][T27989] loop1: rw=1, want=145, limit=112 [ 2106.264806][T27989] attempt to access beyond end of device [ 2106.321526][T27989] loop1: rw=1, want=2073, limit=112 [ 2106.328281][T27989] attempt to access beyond end of device [ 2106.334031][T27989] loop1: rw=1, want=2102, limit=112 [ 2106.339280][T27989] attempt to access beyond end of device [ 2106.345003][T27989] loop1: rw=1, want=2103, limit=112 [ 2106.350240][T27989] attempt to access beyond end of device [ 2106.356021][T27989] loop1: rw=1, want=2104, limit=112 [ 2106.361262][T27989] attempt to access beyond end of device [ 2106.367025][T27989] loop1: rw=1, want=2105, limit=112 [ 2106.372382][T27989] attempt to access beyond end of device [ 2106.378043][T27989] loop1: rw=1, want=2126, limit=112 [ 2106.383354][T27989] attempt to access beyond end of device [ 2106.388992][T27989] loop1: rw=1, want=2127, limit=112 [ 2106.394316][T27989] attempt to access beyond end of device [ 2106.399947][T27989] loop1: rw=1, want=2128, limit=112 [ 2106.405259][T27989] attempt to access beyond end of device [ 2106.410897][T27989] loop1: rw=1, want=2129, limit=112 [ 2106.416259][T27989] attempt to access beyond end of device [ 2106.421966][T27989] loop1: rw=1, want=2178, limit=112 [ 2106.427202][T27989] attempt to access beyond end of device [ 2106.432908][T27989] loop1: rw=1, want=2179, limit=112 [ 2106.438143][T27989] attempt to access beyond end of device [ 2106.443901][T27989] loop1: rw=1, want=2180, limit=112 [ 2106.449141][T27989] attempt to access beyond end of device [ 2106.454945][T27989] loop1: rw=1, want=2181, limit=112 [ 2106.460195][T27989] attempt to access beyond end of device [ 2106.491862][T27989] loop1: rw=1, want=2190, limit=112 [ 2106.497163][T27989] attempt to access beyond end of device [ 2106.513033][T27989] loop1: rw=1, want=2191, limit=112 [ 2106.518306][T27989] attempt to access beyond end of device [ 2106.554506][T27989] loop1: rw=1, want=2192, limit=112 [ 2106.566992][T27989] attempt to access beyond end of device [ 2106.595705][T27989] loop1: rw=1, want=2193, limit=112 [ 2106.608910][T27989] attempt to access beyond end of device [ 2106.616068][T27989] loop1: rw=1, want=6289, limit=112 [ 2106.633520][T27989] attempt to access beyond end of device [ 2106.639345][T27989] loop1: rw=1, want=10385, limit=112 [ 2106.665896][T27989] attempt to access beyond end of device [ 2106.685450][T27989] loop1: rw=1, want=14481, limit=112 [ 2106.718267][T27989] attempt to access beyond end of device [ 2106.755765][T27989] loop1: rw=1, want=15577, limit=112 17:12:05 executing program 5: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:12:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x378}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:12:05 executing program 3: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:12:05 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2106.964938][T27989] attempt to access beyond end of device [ 2106.970767][T27989] loop3: rw=1, want=130, limit=112 [ 2107.007352][T27989] buffer_io_error: 95 callbacks suppressed [ 2107.007364][T27989] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 2107.056442][T27989] attempt to access beyond end of device [ 2107.079063][T27989] loop3: rw=1, want=131, limit=112 [ 2107.102187][T27989] Buffer I/O error on dev loop3, logical block 130, lost async page write [ 2107.138998][T27989] attempt to access beyond end of device 17:12:06 executing program 4: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2107.185693][T27989] loop3: rw=1, want=132, limit=112 [ 2107.216048][T27989] Buffer I/O error on dev loop3, logical block 131, lost async page write [ 2107.231277][T27989] attempt to access beyond end of device [ 2107.236999][T27989] loop3: rw=1, want=133, limit=112 [ 2107.242171][T27989] Buffer I/O error on dev loop3, logical block 132, lost async page write [ 2107.250706][T27989] attempt to access beyond end of device [ 2107.256469][T27989] loop3: rw=1, want=142, limit=112 [ 2107.261582][T27989] Buffer I/O error on dev loop3, logical block 141, lost async page write [ 2107.270163][T27989] attempt to access beyond end of device [ 2107.275831][T27989] loop3: rw=1, want=143, limit=112 [ 2107.280953][T27989] Buffer I/O error on dev loop3, logical block 142, lost async page write [ 2107.281042][T27989] attempt to access beyond end of device [ 2107.281056][T27989] loop3: rw=1, want=144, limit=112 [ 2107.300976][T27989] Buffer I/O error on dev loop3, logical block 143, lost async page write [ 2107.309555][T27989] attempt to access beyond end of device [ 2107.315219][T27989] loop3: rw=1, want=145, limit=112 [ 2107.315234][T27989] Buffer I/O error on dev loop3, logical block 144, lost async page write [ 2107.321146][T27989] attempt to access beyond end of device [ 2107.335185][T27989] loop3: rw=1, want=4241, limit=112 [ 2107.346550][T27989] attempt to access beyond end of device [ 2107.353735][T27989] loop3: rw=1, want=6041, limit=112 [ 2107.360629][T27989] attempt to access beyond end of device 17:12:06 executing program 5: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2107.366444][T27989] loop3: rw=1, want=6070, limit=112 [ 2107.371667][T27989] Buffer I/O error on dev loop3, logical block 6069, lost async page write [ 2107.395090][T27989] attempt to access beyond end of device [ 2107.411831][T27989] loop3: rw=1, want=6071, limit=112 [ 2107.417123][T27989] Buffer I/O error on dev loop3, logical block 6070, lost async page write [ 2107.453723][T27989] attempt to access beyond end of device [ 2107.486440][T27989] loop3: rw=1, want=6072, limit=112 [ 2107.496652][T27989] attempt to access beyond end of device [ 2107.525287][T27989] loop3: rw=1, want=6073, limit=112 [ 2107.547611][T27989] attempt to access beyond end of device [ 2107.603981][T27989] loop3: rw=1, want=6094, limit=112 [ 2107.673889][T27989] attempt to access beyond end of device [ 2107.720910][T27989] loop3: rw=1, want=6095, limit=112 [ 2107.726356][T27989] attempt to access beyond end of device [ 2107.732048][T27989] loop3: rw=1, want=6096, limit=112 [ 2107.737303][T27989] attempt to access beyond end of device [ 2107.743099][T27989] loop3: rw=1, want=6097, limit=112 [ 2107.748388][T27989] attempt to access beyond end of device [ 2107.754121][T27989] loop3: rw=1, want=6146, limit=112 [ 2107.759365][T27989] attempt to access beyond end of device [ 2107.759378][T27989] loop3: rw=1, want=6147, limit=112 [ 2107.759412][T27989] attempt to access beyond end of device [ 2107.759427][T27989] loop3: rw=1, want=6148, limit=112 [ 2107.770357][T27989] attempt to access beyond end of device [ 2107.787983][T27989] loop3: rw=1, want=6149, limit=112 [ 2107.796616][T27989] attempt to access beyond end of device [ 2107.802387][T27989] loop3: rw=1, want=6158, limit=112 [ 2107.815485][T27989] attempt to access beyond end of device [ 2107.821482][T27989] loop3: rw=1, want=6159, limit=112 [ 2107.827025][T27989] attempt to access beyond end of device [ 2107.832990][T27989] loop3: rw=1, want=6160, limit=112 [ 2107.838422][T27989] attempt to access beyond end of device [ 2107.844368][T27989] loop3: rw=1, want=6161, limit=112 17:12:06 executing program 5: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2107.895137][T27989] attempt to access beyond end of device [ 2107.900824][T27989] loop3: rw=1, want=10257, limit=112 [ 2107.961340][T27989] attempt to access beyond end of device [ 2108.035449][T27989] loop3: rw=1, want=14353, limit=112 [ 2108.069795][T27989] attempt to access beyond end of device [ 2108.101880][T27989] loop3: rw=1, want=16897, limit=112 17:12:07 executing program 4: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780), 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:12:07 executing program 5: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:12:08 executing program 2: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:12:08 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:12:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:12:08 executing program 5: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2109.580355][T21942] attempt to access beyond end of device [ 2109.605041][T21942] loop4: rw=1, want=130, limit=112 17:12:08 executing program 4: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe", 0x47) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2109.886750][T21942] attempt to access beyond end of device [ 2109.920555][T21942] loop4: rw=1, want=131, limit=112 [ 2109.925871][T21942] attempt to access beyond end of device [ 2109.931522][T21942] loop4: rw=1, want=132, limit=112 [ 2109.936737][T21942] attempt to access beyond end of device [ 2109.956278][T21942] loop4: rw=1, want=133, limit=112 [ 2110.008297][T21942] attempt to access beyond end of device [ 2110.590488][T21942] loop4: rw=1, want=142, limit=112 [ 2110.596217][T21942] attempt to access beyond end of device [ 2110.602193][T21942] loop4: rw=1, want=143, limit=112 [ 2110.607340][T21942] attempt to access beyond end of device [ 2110.613396][T21942] loop4: rw=1, want=144, limit=112 [ 2110.618582][T21942] attempt to access beyond end of device [ 2110.624766][T21942] loop4: rw=1, want=145, limit=112 [ 2110.750623][T21942] attempt to access beyond end of device [ 2110.800898][T21942] loop4: rw=1, want=4241, limit=112 [ 2110.824771][T21942] attempt to access beyond end of device [ 2110.830511][T21942] loop4: rw=1, want=8337, limit=112 [ 2111.030397][T21942] attempt to access beyond end of device [ 2111.080536][T27989] attempt to access beyond end of device [ 2111.098100][T21942] loop4: rw=1, want=12433, limit=112 [ 2111.114181][T21942] attempt to access beyond end of device [ 2111.119877][T21942] loop4: rw=1, want=16529, limit=112 [ 2111.141814][T27989] loop2: rw=1, want=130, limit=112 [ 2111.147041][T27989] attempt to access beyond end of device [ 2111.165593][T21942] attempt to access beyond end of device [ 2111.171303][T21942] loop4: rw=1, want=20625, limit=112 [ 2111.203316][T27989] loop2: rw=1, want=131, limit=112 [ 2111.203782][T28929] attempt to access beyond end of device [ 2111.208565][T27989] attempt to access beyond end of device [ 2111.229542][T21942] attempt to access beyond end of device [ 2111.241818][T27989] loop2: rw=1, want=132, limit=112 [ 2111.246992][T27989] attempt to access beyond end of device [ 2111.260560][T28929] loop1: rw=1, want=130, limit=112 [ 2111.271865][T21942] loop4: rw=1, want=23609, limit=112 [ 2111.280394][T27989] loop2: rw=1, want=133, limit=112 [ 2111.291871][T28929] attempt to access beyond end of device [ 2111.297520][T28929] loop1: rw=1, want=131, limit=112 [ 2111.321896][T27989] attempt to access beyond end of device [ 2111.327575][T27989] loop2: rw=1, want=142, limit=112 [ 2111.353042][T28929] attempt to access beyond end of device [ 2111.358725][T28929] loop1: rw=1, want=132, limit=112 [ 2111.381878][T27989] attempt to access beyond end of device [ 2111.387552][T27989] loop2: rw=1, want=143, limit=112 [ 2111.410193][T28929] attempt to access beyond end of device [ 2111.431897][T27989] attempt to access beyond end of device [ 2111.437577][T27989] loop2: rw=1, want=144, limit=112 [ 2111.442806][T28929] loop1: rw=1, want=133, limit=112 [ 2111.447977][T28929] attempt to access beyond end of device [ 2111.471923][T27989] attempt to access beyond end of device [ 2111.477602][T27989] loop2: rw=1, want=145, limit=112 [ 2111.501827][T28929] loop1: rw=1, want=142, limit=112 [ 2111.507042][T28929] attempt to access beyond end of device [ 2111.538773][T27989] attempt to access beyond end of device [ 2111.551650][T27989] loop2: rw=1, want=4241, limit=112 [ 2111.560384][T28929] loop1: rw=1, want=143, limit=112 [ 2111.569808][T28929] attempt to access beyond end of device 17:12:10 executing program 3: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:12:10 executing program 5: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:12:10 executing program 2: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:12:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:12:10 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2111.591834][T28929] loop1: rw=1, want=144, limit=112 [ 2111.594735][T27989] attempt to access beyond end of device [ 2111.597023][T28929] attempt to access beyond end of device [ 2111.623717][T27989] loop2: rw=1, want=8337, limit=112 [ 2111.641372][T28929] loop1: rw=1, want=145, limit=112 [ 2111.690846][T27989] attempt to access beyond end of device [ 2111.691846][T28929] attempt to access beyond end of device [ 2111.719342][T27989] loop2: rw=1, want=12433, limit=112 [ 2111.726679][T28929] loop1: rw=1, want=4241, limit=112 17:12:10 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2111.944417][T28929] attempt to access beyond end of device [ 2111.950110][T28929] loop1: rw=1, want=8337, limit=112 [ 2112.004211][T27989] attempt to access beyond end of device [ 2112.009895][T27989] loop2: rw=1, want=16529, limit=112 [ 2112.043666][T28929] attempt to access beyond end of device [ 2112.067451][T28929] loop1: rw=1, want=12433, limit=112 [ 2112.106638][T27989] attempt to access beyond end of device [ 2112.140538][T27989] loop2: rw=1, want=20625, limit=112 17:12:11 executing program 5: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2112.155223][T28929] attempt to access beyond end of device 17:12:11 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2112.260710][T28929] loop1: rw=1, want=16529, limit=112 [ 2112.276907][T27989] attempt to access beyond end of device [ 2112.372054][T27989] loop2: rw=1, want=24721, limit=112 [ 2112.699986][T28929] attempt to access beyond end of device [ 2112.738386][T28929] loop1: rw=1, want=20625, limit=112 [ 2112.848556][T27989] attempt to access beyond end of device [ 2112.856175][T28929] attempt to access beyond end of device 17:12:12 executing program 5: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:12:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:12:12 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2113.104994][T27989] loop2: rw=1, want=28817, limit=112 [ 2113.152258][T28929] loop1: rw=1, want=22553, limit=112 [ 2113.159304][T28929] attempt to access beyond end of device [ 2113.187290][ T7] attempt to access beyond end of device [ 2113.193162][T28929] loop1: rw=1, want=22582, limit=112 [ 2113.193838][ T7] loop3: rw=1, want=130, limit=112 [ 2113.227689][T28929] buffer_io_error: 38 callbacks suppressed [ 2113.227716][T28929] Buffer I/O error on dev loop1, logical block 22581, lost async page write [ 2113.444950][T27989] attempt to access beyond end of device [ 2113.472416][ T7] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 2113.483106][T28929] attempt to access beyond end of device [ 2113.488898][T28929] loop1: rw=1, want=22583, limit=112 [ 2113.495358][T28929] Buffer I/O error on dev loop1, logical block 22582, lost async page write [ 2113.504850][T28929] attempt to access beyond end of device [ 2113.508260][T27989] loop2: rw=1, want=32889, limit=112 [ 2113.510683][T28929] loop1: rw=1, want=22584, limit=112 [ 2113.516609][ T7] attempt to access beyond end of device [ 2113.525194][T28929] Buffer I/O error on dev loop1, logical block 22583, lost async page write [ 2113.536122][T28929] attempt to access beyond end of device [ 2113.542049][T28929] loop1: rw=1, want=22585, limit=112 [ 2113.547637][T28929] Buffer I/O error on dev loop1, logical block 22584, lost async page write [ 2113.557578][T28929] attempt to access beyond end of device [ 2113.564611][T28929] loop1: rw=1, want=22606, limit=112 [ 2113.570080][T28929] Buffer I/O error on dev loop1, logical block 22605, lost async page write [ 2113.579051][T28929] attempt to access beyond end of device [ 2113.584952][T28929] loop1: rw=1, want=22607, limit=112 [ 2113.590445][T28929] Buffer I/O error on dev loop1, logical block 22606, lost async page write [ 2113.599362][T28929] attempt to access beyond end of device [ 2113.605316][T28929] loop1: rw=1, want=22608, limit=112 [ 2113.610843][T28929] Buffer I/O error on dev loop1, logical block 22607, lost async page write [ 2113.611090][ T7] loop3: rw=1, want=131, limit=112 [ 2113.619782][T28929] attempt to access beyond end of device [ 2113.630669][T28929] loop1: rw=1, want=22609, limit=112 [ 2113.637790][T28929] Buffer I/O error on dev loop1, logical block 22608, lost async page write [ 2113.646811][T28929] attempt to access beyond end of device [ 2113.652819][T28929] loop1: rw=1, want=22658, limit=112 [ 2113.658328][T28929] Buffer I/O error on dev loop1, logical block 22657, lost async page write [ 2113.667273][T28929] attempt to access beyond end of device [ 2113.673107][T28929] loop1: rw=1, want=22659, limit=112 [ 2113.678502][T28929] attempt to access beyond end of device [ 2113.684314][T28929] loop1: rw=1, want=22660, limit=112 [ 2113.689882][T28929] attempt to access beyond end of device [ 2113.696872][T28929] loop1: rw=1, want=22661, limit=112 [ 2113.702391][T28929] attempt to access beyond end of device [ 2113.708124][T28929] loop1: rw=1, want=22670, limit=112 [ 2113.714868][T28929] attempt to access beyond end of device [ 2113.728452][T28929] loop1: rw=1, want=22671, limit=112 [ 2113.737374][ T7] attempt to access beyond end of device [ 2113.751116][T28929] attempt to access beyond end of device [ 2113.761406][ T7] loop3: rw=1, want=132, limit=112 [ 2113.776079][T28929] loop1: rw=1, want=22672, limit=112 [ 2113.784917][ T7] attempt to access beyond end of device [ 2113.798708][T28929] attempt to access beyond end of device [ 2113.807834][ T7] loop3: rw=1, want=133, limit=112 [ 2113.821903][T28929] loop1: rw=1, want=22673, limit=112 [ 2113.829546][ T7] attempt to access beyond end of device [ 2113.851078][ T7] loop3: rw=1, want=142, limit=112 [ 2113.871197][T28929] attempt to access beyond end of device [ 2113.878168][ T7] attempt to access beyond end of device [ 2113.895208][T28929] loop1: rw=1, want=26769, limit=112 [ 2113.901697][ T7] loop3: rw=1, want=143, limit=112 [ 2113.919447][ T7] attempt to access beyond end of device [ 2113.946306][T28929] attempt to access beyond end of device [ 2113.954396][ T7] loop3: rw=1, want=144, limit=112 [ 2113.976716][ T7] attempt to access beyond end of device [ 2113.985957][T28929] loop1: rw=1, want=28345, limit=112 [ 2114.007771][ T7] loop3: rw=1, want=145, limit=112 [ 2114.082197][ T7] attempt to access beyond end of device [ 2114.101588][ T7] loop3: rw=1, want=4241, limit=112 [ 2114.154394][ T7] attempt to access beyond end of device [ 2114.173900][ T7] loop3: rw=1, want=8337, limit=112 [ 2114.211262][ T7] attempt to access beyond end of device [ 2114.237364][ T7] loop3: rw=1, want=12121, limit=112 [ 2114.268518][ T7] attempt to access beyond end of device [ 2114.280279][ T7] loop3: rw=1, want=12150, limit=112 [ 2114.298942][ T7] attempt to access beyond end of device 17:12:13 executing program 4: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe", 0x47) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:12:13 executing program 5: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:12:13 executing program 3: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2114.316948][ T7] loop3: rw=1, want=12151, limit=112 [ 2114.334802][ T7] attempt to access beyond end of device [ 2114.358577][ T7] loop3: rw=1, want=12152, limit=112 [ 2114.371039][ T7] attempt to access beyond end of device [ 2114.388186][ T7] loop3: rw=1, want=12153, limit=112 [ 2114.538341][ T7] attempt to access beyond end of device [ 2114.570813][ T7] loop3: rw=1, want=12174, limit=112 [ 2114.605544][ T7] attempt to access beyond end of device [ 2114.642468][ T7] loop3: rw=1, want=12175, limit=112 [ 2114.686904][ T7] attempt to access beyond end of device [ 2114.706214][ T7] loop3: rw=1, want=12176, limit=112 [ 2114.711585][ T7] attempt to access beyond end of device [ 2114.717292][ T7] loop3: rw=1, want=12177, limit=112 [ 2114.722708][ T7] attempt to access beyond end of device [ 2114.728347][ T7] loop3: rw=1, want=12226, limit=112 [ 2114.733710][ T7] attempt to access beyond end of device [ 2114.739352][ T7] loop3: rw=1, want=12227, limit=112 [ 2114.744787][ T7] attempt to access beyond end of device [ 2114.750436][ T7] loop3: rw=1, want=12228, limit=112 [ 2114.755877][ T7] attempt to access beyond end of device [ 2114.761513][ T7] loop3: rw=1, want=12229, limit=112 [ 2114.766897][ T7] attempt to access beyond end of device [ 2114.790116][ T7] loop3: rw=1, want=12238, limit=112 [ 2114.796217][ T7] attempt to access beyond end of device [ 2114.801958][ T7] loop3: rw=1, want=12239, limit=112 [ 2114.807273][ T7] attempt to access beyond end of device [ 2114.812992][ T7] loop3: rw=1, want=12240, limit=112 [ 2114.818333][ T7] attempt to access beyond end of device [ 2114.824065][ T7] loop3: rw=1, want=12241, limit=112 [ 2114.847599][ T7] attempt to access beyond end of device [ 2114.877702][ T7] loop3: rw=1, want=16337, limit=112 [ 2114.942030][ T7] attempt to access beyond end of device [ 2114.947702][ T7] loop3: rw=1, want=20433, limit=112 [ 2115.016888][ T7] attempt to access beyond end of device [ 2115.041865][ T7] loop3: rw=1, want=24529, limit=112 [ 2115.115202][ T7] attempt to access beyond end of device [ 2115.146894][ T7] loop3: rw=1, want=26473, limit=112 17:12:15 executing program 2: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) 17:12:15 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:12:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:12:15 executing program 5: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe", 0x47) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:12:15 executing program 4: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe", 0x47) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2116.209539][T27989] attempt to access beyond end of device [ 2116.237058][T27989] loop2: rw=1, want=130, limit=112 [ 2116.274338][T27989] attempt to access beyond end of device [ 2116.521469][T27989] loop2: rw=1, want=131, limit=112 [ 2117.415872][T27989] attempt to access beyond end of device [ 2117.545829][T27989] loop2: rw=1, want=132, limit=112 [ 2117.551068][T27989] attempt to access beyond end of device [ 2117.556956][T27989] loop2: rw=1, want=133, limit=112 [ 2117.562219][T27989] attempt to access beyond end of device [ 2117.567902][T27989] loop2: rw=1, want=142, limit=112 [ 2117.581082][T27989] attempt to access beyond end of device [ 2117.586896][T27989] loop2: rw=1, want=143, limit=112 17:12:16 executing program 5: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2117.592154][T27989] attempt to access beyond end of device [ 2117.597797][T27989] loop2: rw=1, want=144, limit=112 [ 2117.603701][T27989] attempt to access beyond end of device [ 2117.609397][T27989] loop2: rw=1, want=145, limit=112 [ 2117.623650][T27989] attempt to access beyond end of device [ 2117.629323][T27989] loop2: rw=1, want=4241, limit=112 17:12:16 executing program 4: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269", 0x6b) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2117.701377][T27989] attempt to access beyond end of device [ 2117.727035][T27989] loop2: rw=1, want=8337, limit=112 [ 2117.737464][ T7] attempt to access beyond end of device [ 2117.746562][T27989] attempt to access beyond end of device [ 2117.761862][T27989] loop2: rw=1, want=9177, limit=112 [ 2117.767790][T27989] attempt to access beyond end of device [ 2117.791902][T27989] loop2: rw=1, want=9206, limit=112 [ 2117.797211][T27989] attempt to access beyond end of device [ 2117.811816][T27989] loop2: rw=1, want=9207, limit=112 [ 2117.817093][T27989] attempt to access beyond end of device [ 2117.861826][ T7] loop4: rw=1, want=130, limit=112 [ 2117.867027][ T7] attempt to access beyond end of device [ 2117.872964][T27989] loop2: rw=1, want=9208, limit=112 [ 2117.878230][T27989] attempt to access beyond end of device 17:12:16 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:12:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2117.907831][T28929] attempt to access beyond end of device [ 2117.925550][ T7] loop4: rw=1, want=131, limit=112 [ 2117.930863][ T7] attempt to access beyond end of device [ 2117.936721][ T7] loop4: rw=1, want=132, limit=112 [ 2117.942109][T27989] loop2: rw=1, want=9209, limit=112 [ 2117.947237][T28929] loop1: rw=1, want=130, limit=112 [ 2117.947451][ T7] attempt to access beyond end of device [ 2117.958284][T27989] attempt to access beyond end of device [ 2117.964157][ T7] loop4: rw=1, want=133, limit=112 [ 2117.969461][ T7] attempt to access beyond end of device [ 2117.975323][T27989] loop2: rw=1, want=9230, limit=112 [ 2117.978091][T28929] attempt to access beyond end of device [ 2117.980673][T27989] attempt to access beyond end of device 17:12:17 executing program 5: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2118.009725][ T7] loop4: rw=1, want=142, limit=112 [ 2118.016156][T28929] loop1: rw=1, want=131, limit=112 [ 2118.021526][ T7] attempt to access beyond end of device [ 2118.027397][T28929] attempt to access beyond end of device [ 2118.033259][T27989] loop2: rw=1, want=9231, limit=112 [ 2118.038574][ T7] loop4: rw=1, want=143, limit=112 [ 2118.045155][T28929] loop1: rw=1, want=132, limit=112 [ 2118.050407][T27989] attempt to access beyond end of device [ 2118.056381][ T7] attempt to access beyond end of device [ 2118.062193][T28929] attempt to access beyond end of device [ 2118.067973][T27989] loop2: rw=1, want=9232, limit=112 [ 2118.073304][ T7] loop4: rw=1, want=144, limit=112 [ 2118.079637][T28929] loop1: rw=1, want=133, limit=112 [ 2118.095951][T27989] attempt to access beyond end of device [ 2118.102184][ T7] attempt to access beyond end of device [ 2118.113847][T28929] attempt to access beyond end of device [ 2118.131693][T27989] loop2: rw=1, want=9233, limit=112 [ 2118.137459][ T7] loop4: rw=1, want=145, limit=112 [ 2118.153142][T28929] loop1: rw=1, want=142, limit=112 [ 2118.167283][T27989] attempt to access beyond end of device [ 2118.185734][T28929] attempt to access beyond end of device [ 2118.204729][T27989] loop2: rw=1, want=9282, limit=112 [ 2118.210054][T27989] attempt to access beyond end of device [ 2118.215880][T27989] loop2: rw=1, want=9283, limit=112 [ 2118.221169][T27989] attempt to access beyond end of device [ 2118.226959][T27989] loop2: rw=1, want=9284, limit=112 [ 2118.249164][T27989] buffer_io_error: 61 callbacks suppressed [ 2118.249174][T27989] Buffer I/O error on dev loop2, logical block 9283, lost async page write [ 2118.263814][T27989] attempt to access beyond end of device [ 2118.269439][T27989] loop2: rw=1, want=9285, limit=112 [ 2118.274711][T27989] Buffer I/O error on dev loop2, logical block 9284, lost async page write [ 2118.283390][T27989] attempt to access beyond end of device [ 2118.289034][T27989] loop2: rw=1, want=9294, limit=112 [ 2118.294291][T27989] Buffer I/O error on dev loop2, logical block 9293, lost async page write [ 2118.302944][T27989] attempt to access beyond end of device [ 2118.308574][T27989] loop2: rw=1, want=9295, limit=112 17:12:17 executing program 3: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2118.313875][T27989] Buffer I/O error on dev loop2, logical block 9294, lost async page write [ 2118.322540][T27989] attempt to access beyond end of device [ 2118.328170][T27989] loop2: rw=1, want=9296, limit=112 [ 2118.333425][T27989] Buffer I/O error on dev loop2, logical block 9295, lost async page write [ 2118.343743][ T7] attempt to access beyond end of device [ 2118.349403][ T7] loop4: rw=1, want=4241, limit=112 [ 2118.354682][T27989] attempt to access beyond end of device [ 2118.360314][T27989] loop2: rw=1, want=9297, limit=112 [ 2118.395358][T28929] loop1: rw=1, want=143, limit=112 [ 2118.400691][T28929] Buffer I/O error on dev loop1, logical block 142, lost async page write [ 2118.409808][T28929] attempt to access beyond end of device [ 2118.416096][T28929] loop1: rw=1, want=144, limit=112 [ 2118.421390][T28929] Buffer I/O error on dev loop1, logical block 143, lost async page write [ 2118.431504][T28929] attempt to access beyond end of device [ 2118.431840][T27989] Buffer I/O error on dev loop2, logical block 9296, lost async page write [ 2118.437703][T28929] loop1: rw=1, want=145, limit=112 [ 2118.469407][T28929] Buffer I/O error on dev loop1, logical block 144, lost async page write [ 2118.484317][ T7] attempt to access beyond end of device [ 2118.489988][ T7] loop4: rw=1, want=8337, limit=112 [ 2118.508180][T27989] attempt to access beyond end of device 17:12:17 executing program 5: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2118.526171][T28929] attempt to access beyond end of device [ 2118.532283][T28929] loop1: rw=1, want=4241, limit=112 [ 2118.573923][T28929] attempt to access beyond end of device [ 2118.579812][T28929] loop1: rw=1, want=8337, limit=112 [ 2118.601003][T28929] attempt to access beyond end of device [ 2118.607003][T28929] loop1: rw=1, want=12433, limit=112 [ 2118.617243][T27989] loop2: rw=1, want=13393, limit=112 [ 2118.663135][T28929] attempt to access beyond end of device [ 2118.678143][T27989] attempt to access beyond end of device [ 2118.691348][T28929] loop1: rw=1, want=16529, limit=112 [ 2118.702949][T27989] loop2: rw=1, want=17489, limit=112 [ 2118.760267][T28929] attempt to access beyond end of device [ 2118.777771][T27989] attempt to access beyond end of device [ 2118.787463][T28929] loop1: rw=1, want=20625, limit=112 [ 2118.814202][ T7] attempt to access beyond end of device [ 2118.819849][ T7] loop4: rw=1, want=12433, limit=112 [ 2118.834703][ T7] attempt to access beyond end of device [ 2118.840367][ T7] loop4: rw=1, want=16529, limit=112 [ 2118.855808][ T7] attempt to access beyond end of device [ 2118.861446][ T7] loop4: rw=1, want=20625, limit=112 [ 2118.881392][T27989] loop2: rw=1, want=21585, limit=112 [ 2118.889355][ T7] attempt to access beyond end of device [ 2118.911982][ T7] loop4: rw=1, want=24721, limit=112 [ 2118.933315][T28929] attempt to access beyond end of device [ 2118.942866][T27989] attempt to access beyond end of device [ 2118.956836][T28929] loop1: rw=1, want=24721, limit=112 [ 2118.971397][T28929] attempt to access beyond end of device [ 2118.987723][T28929] loop1: rw=1, want=28817, limit=112 [ 2118.989725][T27989] loop2: rw=1, want=23993, limit=112 [ 2119.013804][T28929] attempt to access beyond end of device [ 2119.019447][T28929] loop1: rw=1, want=32889, limit=112 [ 2119.028937][ T7] attempt to access beyond end of device [ 2119.081902][ T7] loop4: rw=1, want=28817, limit=112 [ 2119.117312][ T7] attempt to access beyond end of device [ 2119.131907][ T7] loop4: rw=1, want=32889, limit=112 17:12:20 executing program 2: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:12:20 executing program 3: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:12:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:12:20 executing program 5: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:12:20 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2121.506983][T28929] attempt to access beyond end of device [ 2121.524370][ T7] attempt to access beyond end of device [ 2121.535288][T28929] loop1: rw=1, want=130, limit=112 [ 2121.546281][ T7] loop2: rw=1, want=130, limit=112 [ 2121.556878][T28929] Buffer I/O error on dev loop1, logical block 129, lost async page write [ 2121.568575][ T7] attempt to access beyond end of device [ 2121.635610][ T7] loop2: rw=1, want=131, limit=112 [ 2121.644376][T28929] attempt to access beyond end of device [ 2121.650317][T28929] loop1: rw=1, want=131, limit=112 [ 2121.655798][T28929] attempt to access beyond end of device [ 2121.661602][T28929] loop1: rw=1, want=132, limit=112 [ 2121.673786][T28929] attempt to access beyond end of device [ 2121.679476][ T7] attempt to access beyond end of device [ 2121.680390][T28929] loop1: rw=1, want=133, limit=112 [ 2121.691343][T28929] attempt to access beyond end of device [ 2121.697366][T28929] loop1: rw=1, want=142, limit=112 [ 2121.702786][T28929] attempt to access beyond end of device [ 2121.708441][T28929] loop1: rw=1, want=143, limit=112 [ 2121.713667][T28929] attempt to access beyond end of device [ 2121.719303][T28929] loop1: rw=1, want=144, limit=112 [ 2121.724554][T28929] attempt to access beyond end of device [ 2121.730204][T28929] loop1: rw=1, want=145, limit=112 [ 2121.742056][ T7] loop2: rw=1, want=132, limit=112 [ 2121.747242][ T7] attempt to access beyond end of device [ 2121.767706][T28929] attempt to access beyond end of device [ 2121.781864][ T7] loop2: rw=1, want=133, limit=112 [ 2121.787551][ T7] attempt to access beyond end of device [ 2121.806623][T28929] loop1: rw=1, want=4241, limit=112 [ 2121.831972][ T7] loop2: rw=1, want=142, limit=112 [ 2121.837122][ T7] attempt to access beyond end of device 17:12:20 executing program 4: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269", 0x6b) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2121.885473][T21942] attempt to access beyond end of device [ 2121.891131][T21942] loop4: rw=1, want=114, limit=112 [ 2121.962322][T21942] attempt to access beyond end of device [ 2121.981829][T21942] loop4: rw=1, want=115, limit=112 [ 2121.986986][T21942] attempt to access beyond end of device [ 2121.991538][ T7] loop2: rw=1, want=143, limit=112 [ 2122.002070][ T7] attempt to access beyond end of device 17:12:21 executing program 3: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:12:21 executing program 5: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2122.008058][T28929] attempt to access beyond end of device [ 2122.022011][ T7] loop2: rw=1, want=144, limit=112 [ 2122.027414][T28929] loop1: rw=1, want=8337, limit=112 [ 2122.036185][T21942] loop4: rw=1, want=116, limit=112 [ 2122.041507][T21942] attempt to access beyond end of device [ 2122.041871][ T7] attempt to access beyond end of device [ 2122.061851][T21942] loop4: rw=1, want=117, limit=112 [ 2122.067740][T21942] attempt to access beyond end of device [ 2122.080810][T21942] loop4: rw=1, want=130, limit=112 [ 2122.086387][T21942] attempt to access beyond end of device [ 2122.093354][T28929] attempt to access beyond end of device [ 2122.106961][T28929] loop1: rw=1, want=12433, limit=112 [ 2122.110824][ T7] loop2: rw=1, want=145, limit=112 [ 2122.147576][T28929] attempt to access beyond end of device [ 2122.148606][ T7] attempt to access beyond end of device [ 2122.166615][T28929] loop1: rw=1, want=16529, limit=112 [ 2122.172389][T21942] loop4: rw=1, want=131, limit=112 [ 2122.184498][T21942] attempt to access beyond end of device [ 2122.398538][ T7] loop2: rw=1, want=4241, limit=112 17:12:21 executing program 3: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2122.426297][T21942] loop4: rw=1, want=132, limit=112 [ 2122.435842][T21942] attempt to access beyond end of device [ 2122.454575][T28929] attempt to access beyond end of device [ 2122.461195][ T7] attempt to access beyond end of device [ 2122.466970][T21942] loop4: rw=1, want=133, limit=112 [ 2122.476684][T28929] loop1: rw=1, want=20625, limit=112 17:12:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2122.499886][T21942] attempt to access beyond end of device [ 2122.510657][ T7] loop2: rw=1, want=8337, limit=112 17:12:21 executing program 5: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2122.540895][T21942] loop4: rw=1, want=4237, limit=112 [ 2122.563278][T28929] attempt to access beyond end of device [ 2122.596121][T28929] loop1: rw=1, want=24721, limit=112 [ 2122.610441][ T7] attempt to access beyond end of device [ 2122.635995][ T7] loop2: rw=1, want=12433, limit=112 [ 2122.644164][T21942] attempt to access beyond end of device [ 2122.673598][T21942] loop4: rw=1, want=8333, limit=112 [ 2122.687574][T28929] attempt to access beyond end of device [ 2122.719219][T28929] loop1: rw=1, want=28817, limit=112 [ 2122.740606][ T7] attempt to access beyond end of device [ 2122.774715][T21942] attempt to access beyond end of device [ 2122.781988][ T7] loop2: rw=1, want=16529, limit=112 17:12:21 executing program 3: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2122.812000][T21942] loop4: rw=1, want=12429, limit=112 [ 2122.824199][T28929] attempt to access beyond end of device [ 2122.863515][T21942] attempt to access beyond end of device [ 2122.869207][T21942] loop4: rw=1, want=16525, limit=112 [ 2122.874659][T28929] loop1: rw=1, want=32889, limit=112 [ 2122.887695][T21942] attempt to access beyond end of device [ 2122.895005][T21942] loop4: rw=1, want=16533, limit=112 [ 2122.900371][T21942] attempt to access beyond end of device [ 2122.906205][T21942] loop4: rw=1, want=16534, limit=112 [ 2122.912100][T21942] attempt to access beyond end of device [ 2122.917781][T21942] loop4: rw=1, want=16535, limit=112 [ 2122.919375][ T7] attempt to access beyond end of device [ 2122.923286][T21942] attempt to access beyond end of device [ 2122.942867][ T7] loop2: rw=1, want=20625, limit=112 [ 2122.950547][T21942] loop4: rw=1, want=16536, limit=112 [ 2122.967413][T21942] attempt to access beyond end of device [ 2122.992835][T21942] loop4: rw=1, want=16537, limit=112 [ 2123.007172][ T7] attempt to access beyond end of device [ 2123.018818][T21942] attempt to access beyond end of device [ 2123.218581][ T7] loop2: rw=1, want=24721, limit=112 [ 2123.231844][T21942] loop4: rw=1, want=16566, limit=112 [ 2123.264653][ T7] attempt to access beyond end of device [ 2123.270351][ T7] loop2: rw=1, want=28817, limit=112 [ 2123.275868][T21942] buffer_io_error: 27 callbacks suppressed [ 2123.275878][T21942] Buffer I/O error on dev loop4, logical block 16565, lost async page write [ 2123.311818][T21942] attempt to access beyond end of device [ 2123.317672][T21942] loop4: rw=1, want=16567, limit=112 [ 2123.329600][ T7] attempt to access beyond end of device [ 2123.335434][T21942] Buffer I/O error on dev loop4, logical block 16566, lost async page write [ 2123.378833][ T7] loop2: rw=1, want=32889, limit=112 [ 2123.381991][T21942] attempt to access beyond end of device [ 2123.391862][T21942] loop4: rw=1, want=16568, limit=112 [ 2123.397162][T21942] Buffer I/O error on dev loop4, logical block 16567, lost async page write [ 2123.419608][T21942] attempt to access beyond end of device [ 2123.431018][T21942] loop4: rw=1, want=16569, limit=112 [ 2123.439090][T21942] Buffer I/O error on dev loop4, logical block 16568, lost async page write [ 2123.456593][T21942] attempt to access beyond end of device [ 2123.465472][T21942] loop4: rw=1, want=16590, limit=112 [ 2123.470785][T21942] Buffer I/O error on dev loop4, logical block 16589, lost async page write [ 2123.509141][T21942] attempt to access beyond end of device [ 2123.528572][T21942] loop4: rw=1, want=16591, limit=112 [ 2123.549047][T21942] Buffer I/O error on dev loop4, logical block 16590, lost async page write [ 2123.581920][T21942] attempt to access beyond end of device [ 2123.587646][T21942] loop4: rw=1, want=16592, limit=112 [ 2123.623098][T21942] Buffer I/O error on dev loop4, logical block 16591, lost async page write [ 2123.651905][T21942] attempt to access beyond end of device [ 2123.657610][T21942] loop4: rw=1, want=16593, limit=112 [ 2123.691968][T21942] Buffer I/O error on dev loop4, logical block 16592, lost async page write [ 2123.700742][T21942] attempt to access beyond end of device [ 2123.726109][T21942] loop4: rw=1, want=16642, limit=112 [ 2123.731447][T21942] Buffer I/O error on dev loop4, logical block 16641, lost async page write [ 2123.761906][T21942] attempt to access beyond end of device [ 2123.767583][T21942] loop4: rw=1, want=16643, limit=112 [ 2123.791878][T21942] Buffer I/O error on dev loop4, logical block 16642, lost async page write [ 2123.800687][T21942] attempt to access beyond end of device [ 2123.821828][T21942] loop4: rw=1, want=16644, limit=112 [ 2123.827204][T21942] attempt to access beyond end of device [ 2123.841822][T21942] loop4: rw=1, want=16645, limit=112 [ 2123.862658][T21942] attempt to access beyond end of device [ 2123.868335][T21942] loop4: rw=1, want=20085, limit=112 [ 2125.490110][T27989] attempt to access beyond end of device [ 2125.512048][T27989] loop1: rw=1, want=130, limit=112 [ 2125.583140][T27989] attempt to access beyond end of device [ 2125.598567][T27989] loop1: rw=1, want=131, limit=112 [ 2125.614343][T27989] attempt to access beyond end of device [ 2125.640436][T27989] loop1: rw=1, want=132, limit=112 17:12:24 executing program 2: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:12:24 executing program 3: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:12:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:12:24 executing program 5: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:12:24 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2125.682379][T27989] attempt to access beyond end of device [ 2125.718696][T27989] loop1: rw=1, want=133, limit=112 [ 2125.739285][ T7] attempt to access beyond end of device [ 2125.748013][T27989] attempt to access beyond end of device [ 2125.757459][T27989] loop1: rw=1, want=142, limit=112 [ 2125.764516][ T7] loop2: rw=1, want=130, limit=112 [ 2125.769889][T27989] attempt to access beyond end of device [ 2125.781489][T27989] loop1: rw=1, want=143, limit=112 [ 2125.789734][T27989] attempt to access beyond end of device [ 2125.798208][ T7] attempt to access beyond end of device [ 2125.811931][T27989] loop1: rw=1, want=144, limit=112 [ 2125.818547][ T7] loop2: rw=1, want=131, limit=112 [ 2125.829583][T27989] attempt to access beyond end of device [ 2125.852636][ T7] attempt to access beyond end of device [ 2125.878565][T27989] loop1: rw=1, want=145, limit=112 [ 2125.887569][ T7] loop2: rw=1, want=132, limit=112 [ 2125.903308][ T7] attempt to access beyond end of device [ 2125.922876][T27989] attempt to access beyond end of device [ 2125.930034][ T7] loop2: rw=1, want=133, limit=112 [ 2125.941694][ T7] attempt to access beyond end of device [ 2125.949035][T27989] loop1: rw=1, want=4241, limit=112 [ 2125.963249][ T7] loop2: rw=1, want=142, limit=112 [ 2125.981611][T27989] attempt to access beyond end of device [ 2125.988880][ T7] attempt to access beyond end of device [ 2126.002277][T27989] loop1: rw=1, want=5273, limit=112 [ 2126.007823][ T7] loop2: rw=1, want=143, limit=112 [ 2126.046545][T27989] attempt to access beyond end of device [ 2126.061832][T27989] loop1: rw=1, want=5302, limit=112 [ 2126.075309][T27989] attempt to access beyond end of device [ 2126.089629][T27989] loop1: rw=1, want=5303, limit=112 [ 2126.103022][T27989] attempt to access beyond end of device 17:12:25 executing program 4: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269", 0x6b) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:12:25 executing program 3: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2126.400617][T27989] loop1: rw=1, want=5304, limit=112 [ 2126.416562][T27989] attempt to access beyond end of device [ 2126.425926][ T7] attempt to access beyond end of device [ 2126.470485][T27989] loop1: rw=1, want=5305, limit=112 [ 2126.485698][ T7] loop2: rw=1, want=144, limit=112 [ 2126.490854][ T7] attempt to access beyond end of device [ 2126.498328][T27989] attempt to access beyond end of device [ 2126.520059][T27989] loop1: rw=1, want=5326, limit=112 [ 2126.520936][ T2262] attempt to access beyond end of device [ 2126.532305][ T2262] loop4: rw=1, want=130, limit=112 [ 2126.537479][ T2262] attempt to access beyond end of device [ 2126.544802][T27989] attempt to access beyond end of device 17:12:25 executing program 5: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2126.570087][ T7] loop2: rw=1, want=145, limit=112 [ 2126.575933][T27989] loop1: rw=1, want=5327, limit=112 [ 2126.580245][ T2262] loop4: rw=1, want=131, limit=112 [ 2126.603202][ T2262] attempt to access beyond end of device [ 2126.616348][T27989] attempt to access beyond end of device [ 2126.665704][T27989] loop1: rw=1, want=5328, limit=112 [ 2126.710080][T27989] attempt to access beyond end of device [ 2126.757476][T27989] loop1: rw=1, want=5329, limit=112 17:12:25 executing program 4: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d", 0x7d) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2126.786370][ T7] attempt to access beyond end of device 17:12:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2126.833128][ T2262] loop4: rw=1, want=132, limit=112 [ 2126.840324][T27989] attempt to access beyond end of device [ 2126.851939][ T2262] attempt to access beyond end of device [ 2126.859207][T27989] loop1: rw=1, want=5378, limit=112 [ 2126.870841][ T2262] loop4: rw=1, want=133, limit=112 [ 2126.878057][T27989] attempt to access beyond end of device [ 2126.884328][ T2262] attempt to access beyond end of device [ 2126.890076][T27989] loop1: rw=1, want=5379, limit=112 [ 2126.895720][ T2262] loop4: rw=1, want=142, limit=112 [ 2126.900963][T27989] attempt to access beyond end of device [ 2126.907387][ T2262] attempt to access beyond end of device [ 2126.917857][ T7] loop2: rw=1, want=4241, limit=112 [ 2126.925663][T27989] loop1: rw=1, want=5380, limit=112 [ 2126.943197][ T2262] loop4: rw=1, want=143, limit=112 [ 2126.955989][T27989] attempt to access beyond end of device [ 2126.976180][ T2262] attempt to access beyond end of device [ 2126.995233][T27989] loop1: rw=1, want=5381, limit=112 [ 2127.051222][ T2262] loop4: rw=1, want=144, limit=112 [ 2127.061957][ T7] attempt to access beyond end of device [ 2127.078986][T27989] attempt to access beyond end of device [ 2127.104563][ T2262] attempt to access beyond end of device [ 2127.114137][ T7] loop2: rw=1, want=8337, limit=112 [ 2127.129424][T27989] loop1: rw=1, want=5390, limit=112 17:12:26 executing program 4: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f72", 0x86) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2127.156699][ T2262] loop4: rw=1, want=145, limit=112 17:12:26 executing program 5: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2127.193274][ T7] attempt to access beyond end of device [ 2127.198956][ T7] loop2: rw=1, want=12433, limit=112 [ 2127.218984][T27989] attempt to access beyond end of device [ 2127.229800][ T7] attempt to access beyond end of device [ 2127.249786][ T2262] attempt to access beyond end of device [ 2127.257705][T27989] loop1: rw=1, want=5391, limit=112 [ 2127.260011][ T7] loop2: rw=1, want=16529, limit=112 [ 2127.283030][T27989] attempt to access beyond end of device [ 2127.319434][T27989] loop1: rw=1, want=5392, limit=112 [ 2127.336516][ T2262] loop4: rw=1, want=3097, limit=112 [ 2127.357389][T27989] attempt to access beyond end of device [ 2127.382264][ T2262] attempt to access beyond end of device [ 2127.396289][T27989] loop1: rw=1, want=5393, limit=112 [ 2127.427740][T28929] attempt to access beyond end of device [ 2127.435865][T28929] loop3: rw=1, want=130, limit=112 [ 2127.444895][ T2262] loop4: rw=1, want=3126, limit=112 [ 2127.472143][T28929] attempt to access beyond end of device [ 2127.489995][ T2262] attempt to access beyond end of device [ 2127.508508][T27989] attempt to access beyond end of device [ 2127.526448][T28929] loop3: rw=1, want=131, limit=112 [ 2127.535131][ T2262] loop4: rw=1, want=3127, limit=112 [ 2127.540946][ T7] attempt to access beyond end of device [ 2127.555946][T27989] loop1: rw=1, want=9489, limit=112 [ 2127.578896][T28929] attempt to access beyond end of device [ 2127.589554][ T2262] attempt to access beyond end of device [ 2127.597771][ T7] loop2: rw=1, want=20625, limit=112 [ 2127.612550][T28929] loop3: rw=1, want=132, limit=112 [ 2127.613310][ T7] attempt to access beyond end of device [ 2127.623336][ T7] loop2: rw=1, want=24721, limit=112 [ 2127.624545][ T2262] loop4: rw=1, want=3128, limit=112 [ 2127.638417][ T7] attempt to access beyond end of device [ 2127.644525][ T7] loop2: rw=1, want=28817, limit=112 [ 2127.651888][T28929] attempt to access beyond end of device [ 2127.657529][T28929] loop3: rw=1, want=133, limit=112 [ 2127.658403][T27989] attempt to access beyond end of device [ 2127.670592][ T7] attempt to access beyond end of device [ 2127.676351][T28929] attempt to access beyond end of device [ 2127.677542][ T2262] attempt to access beyond end of device [ 2127.682358][T28929] loop3: rw=1, want=142, limit=112 [ 2127.691904][T27989] loop1: rw=1, want=13585, limit=112 [ 2127.694178][ T7] loop2: rw=1, want=32889, limit=112 [ 2127.703667][T28929] attempt to access beyond end of device [ 2127.709422][T28929] loop3: rw=1, want=143, limit=112 [ 2127.714697][ T2262] loop4: rw=1, want=3129, limit=112 [ 2127.719928][ T2262] attempt to access beyond end of device [ 2127.729280][T28929] attempt to access beyond end of device [ 2127.735127][T28929] loop3: rw=1, want=144, limit=112 [ 2127.740280][T28929] attempt to access beyond end of device [ 2127.742496][T27989] attempt to access beyond end of device [ 2127.745992][ T2262] loop4: rw=1, want=3150, limit=112 [ 2127.756831][T28929] loop3: rw=1, want=145, limit=112 [ 2127.763141][T28929] attempt to access beyond end of device [ 2127.768783][T28929] loop3: rw=1, want=793, limit=112 [ 2127.772825][T27989] loop1: rw=1, want=17681, limit=112 [ 2127.774009][ T2262] attempt to access beyond end of device [ 2127.784928][ T2262] loop4: rw=1, want=3151, limit=112 [ 2127.790167][ T2262] attempt to access beyond end of device [ 2127.812387][T28929] attempt to access beyond end of device [ 2127.818043][T28929] loop3: rw=1, want=822, limit=112 [ 2127.818356][T27989] attempt to access beyond end of device [ 2127.831788][ T2262] loop4: rw=1, want=3152, limit=112 [ 2127.837026][ T2262] attempt to access beyond end of device [ 2127.851835][T28929] attempt to access beyond end of device [ 2127.857479][T28929] loop3: rw=1, want=823, limit=112 [ 2127.861917][T27989] loop1: rw=1, want=21777, limit=112 [ 2127.871862][ T2262] loop4: rw=1, want=3153, limit=112 [ 2127.877172][ T2262] attempt to access beyond end of device [ 2127.881549][T27989] attempt to access beyond end of device [ 2127.882934][T28929] attempt to access beyond end of device [ 2127.901795][ T2262] loop4: rw=1, want=3202, limit=112 [ 2127.907078][ T2262] attempt to access beyond end of device [ 2127.911881][T27989] loop1: rw=1, want=25873, limit=112 [ 2127.912828][T28929] loop3: rw=1, want=824, limit=112 [ 2127.931136][T27989] attempt to access beyond end of device [ 2127.931783][ T2262] loop4: rw=1, want=3203, limit=112 [ 2127.953045][T28929] attempt to access beyond end of device [ 2127.958680][T28929] loop3: rw=1, want=825, limit=112 [ 2127.963900][ T2262] attempt to access beyond end of device [ 2127.969554][ T2262] loop4: rw=1, want=3204, limit=112 [ 2127.971823][T27989] loop1: rw=1, want=29969, limit=112 [ 2127.981835][T28929] attempt to access beyond end of device [ 2127.987466][T28929] loop3: rw=1, want=846, limit=112 [ 2128.001267][T27989] attempt to access beyond end of device [ 2128.001802][ T2262] attempt to access beyond end of device [ 2128.012630][T28929] attempt to access beyond end of device [ 2128.018305][T28929] loop3: rw=1, want=847, limit=112 [ 2128.026272][T27989] loop1: rw=1, want=32993, limit=112 [ 2128.031813][ T2262] loop4: rw=1, want=3205, limit=112 [ 2128.037061][ T2262] attempt to access beyond end of device [ 2128.042812][T28929] attempt to access beyond end of device [ 2128.048556][T28929] loop3: rw=1, want=848, limit=112 [ 2128.081822][ T2262] loop4: rw=1, want=3214, limit=112 [ 2128.087107][ T2262] attempt to access beyond end of device [ 2128.101831][T28929] attempt to access beyond end of device [ 2128.107467][T28929] loop3: rw=1, want=849, limit=112 [ 2128.121802][ T2262] loop4: rw=1, want=3215, limit=112 [ 2128.127036][ T2262] attempt to access beyond end of device [ 2128.151835][T28929] attempt to access beyond end of device [ 2128.157715][T28929] loop3: rw=1, want=898, limit=112 [ 2128.171808][ T2262] loop4: rw=1, want=3216, limit=112 [ 2128.177046][ T2262] attempt to access beyond end of device [ 2128.182837][T28929] attempt to access beyond end of device [ 2128.188468][T28929] loop3: rw=1, want=899, limit=112 [ 2128.201796][ T2262] loop4: rw=1, want=3217, limit=112 [ 2128.211882][T28929] attempt to access beyond end of device [ 2128.217533][T28929] loop3: rw=1, want=900, limit=112 [ 2128.234050][ T2262] attempt to access beyond end of device [ 2128.239689][ T2262] loop4: rw=1, want=7313, limit=112 [ 2128.251812][T28929] attempt to access beyond end of device [ 2128.257452][T28929] loop3: rw=1, want=901, limit=112 [ 2128.271888][T28929] attempt to access beyond end of device [ 2128.277526][T28929] loop3: rw=1, want=910, limit=112 [ 2128.291829][T28929] buffer_io_error: 78 callbacks suppressed [ 2128.291854][T28929] Buffer I/O error on dev loop3, logical block 909, lost async page write [ 2128.314822][ T2262] attempt to access beyond end of device [ 2128.320465][ T2262] loop4: rw=1, want=11409, limit=112 [ 2128.331878][T28929] attempt to access beyond end of device [ 2128.337513][T28929] loop3: rw=1, want=911, limit=112 [ 2128.361824][T28929] Buffer I/O error on dev loop3, logical block 910, lost async page write [ 2128.370363][T28929] attempt to access beyond end of device [ 2128.375893][ T2262] attempt to access beyond end of device [ 2128.391814][ T2262] loop4: rw=1, want=15505, limit=112 [ 2128.401800][T28929] loop3: rw=1, want=912, limit=112 [ 2128.406966][T28929] Buffer I/O error on dev loop3, logical block 911, lost async page write [ 2128.421195][ T2262] attempt to access beyond end of device [ 2128.441834][ T2262] loop4: rw=1, want=16569, limit=112 [ 2128.450458][T28929] attempt to access beyond end of device [ 2128.481806][T28929] loop3: rw=1, want=913, limit=112 [ 2128.487082][T28929] Buffer I/O error on dev loop3, logical block 912, lost async page write [ 2128.544274][T28929] attempt to access beyond end of device [ 2128.549961][T28929] loop3: rw=1, want=2409, limit=112 17:12:28 executing program 2: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:12:28 executing program 3: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:12:28 executing program 5: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:12:28 executing program 4: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940", 0x8a) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2129.978429][ T2262] attempt to access beyond end of device [ 2130.017090][ T2262] loop2: rw=1, want=130, limit=112 [ 2130.077694][ T2262] Buffer I/O error on dev loop2, logical block 129, lost async page write [ 2130.092392][ T2262] attempt to access beyond end of device [ 2130.098136][ T2262] loop2: rw=1, want=131, limit=112 [ 2130.103328][ T2262] Buffer I/O error on dev loop2, logical block 130, lost async page write [ 2130.111988][ T2262] attempt to access beyond end of device [ 2130.117640][ T2262] loop2: rw=1, want=132, limit=112 [ 2130.122856][ T2262] Buffer I/O error on dev loop2, logical block 131, lost async page write [ 2130.131380][ T2262] attempt to access beyond end of device [ 2130.137185][ T2262] loop2: rw=1, want=133, limit=112 [ 2130.311280][ T2262] Buffer I/O error on dev loop2, logical block 132, lost async page write [ 2130.399189][ T2262] attempt to access beyond end of device [ 2130.405882][ T2262] loop2: rw=1, want=142, limit=112 [ 2130.476281][ T2262] Buffer I/O error on dev loop2, logical block 141, lost async page write [ 2130.541921][ T2262] attempt to access beyond end of device [ 2130.630098][ T2262] loop2: rw=1, want=143, limit=112 17:12:29 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:12:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:12:29 executing program 3: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2130.669636][ T2262] Buffer I/O error on dev loop2, logical block 142, lost async page write [ 2130.711411][T21942] attempt to access beyond end of device [ 2130.734588][T21942] loop1: rw=1, want=130, limit=112 [ 2130.741267][ T2262] attempt to access beyond end of device [ 2130.774442][T21942] attempt to access beyond end of device [ 2130.785372][ T2262] loop2: rw=1, want=144, limit=112 17:12:29 executing program 5: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2130.821078][ T2262] attempt to access beyond end of device [ 2130.831256][T21942] loop1: rw=1, want=131, limit=112 [ 2130.864522][T21942] attempt to access beyond end of device [ 2130.887344][T21942] loop1: rw=1, want=132, limit=112 [ 2130.916010][ T2262] loop2: rw=1, want=145, limit=112 [ 2130.932209][T21942] attempt to access beyond end of device [ 2131.169260][T21942] loop1: rw=1, want=133, limit=112 17:12:30 executing program 4: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5", 0x8c) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2131.205264][ T2262] attempt to access beyond end of device [ 2131.241444][T21942] attempt to access beyond end of device [ 2131.265821][ T2262] loop2: rw=1, want=2585, limit=112 [ 2131.320380][T21942] loop1: rw=1, want=142, limit=112 [ 2131.344350][ T2262] attempt to access beyond end of device 17:12:30 executing program 5: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2131.389487][T21942] attempt to access beyond end of device [ 2131.440454][ T2262] loop2: rw=1, want=2614, limit=112 [ 2131.451067][T21942] loop1: rw=1, want=143, limit=112 [ 2131.875863][ T2262] attempt to access beyond end of device [ 2131.908794][ T7] attempt to access beyond end of device 17:12:30 executing program 3: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2131.933935][T21942] attempt to access beyond end of device [ 2131.943426][ T7] loop3: rw=1, want=130, limit=112 [ 2131.973850][ T2262] loop2: rw=1, want=2615, limit=112 [ 2131.998239][T21942] loop1: rw=1, want=144, limit=112 [ 2132.007341][ T7] attempt to access beyond end of device 17:12:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2403}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2132.076707][ T2262] attempt to access beyond end of device [ 2132.099416][T21942] attempt to access beyond end of device [ 2132.106213][ T7] loop3: rw=1, want=131, limit=112 [ 2132.111409][ T7] attempt to access beyond end of device [ 2132.120174][ T7] loop3: rw=1, want=132, limit=112 [ 2132.125452][ T2262] loop2: rw=1, want=2616, limit=112 [ 2132.130801][ T7] attempt to access beyond end of device [ 2132.136668][ T2262] attempt to access beyond end of device [ 2132.142406][ T7] loop3: rw=1, want=133, limit=112 [ 2132.175942][T21942] loop1: rw=1, want=145, limit=112 [ 2132.222710][ T2262] loop2: rw=1, want=2617, limit=112 [ 2132.251993][ T7] attempt to access beyond end of device [ 2132.265585][ T7] loop3: rw=1, want=142, limit=112 [ 2132.277334][ T7] attempt to access beyond end of device [ 2132.287553][ T7] loop3: rw=1, want=143, limit=112 [ 2132.292954][ T7] attempt to access beyond end of device [ 2132.298686][ T7] loop3: rw=1, want=144, limit=112 [ 2132.304045][ T7] attempt to access beyond end of device [ 2132.304175][ T2262] attempt to access beyond end of device [ 2132.309796][ T7] loop3: rw=1, want=145, limit=112 [ 2132.317461][ T7] attempt to access beyond end of device [ 2132.335277][T21942] attempt to access beyond end of device [ 2132.355922][T27989] attempt to access beyond end of device [ 2132.361400][ T2262] loop2: rw=1, want=2638, limit=112 [ 2132.361579][T27989] loop4: rw=1, want=130, limit=112 [ 2132.380950][ T2262] attempt to access beyond end of device [ 2132.385835][ T7] loop3: rw=1, want=4241, limit=112 [ 2132.397020][T21942] loop1: rw=1, want=4241, limit=112 [ 2132.400904][ T2262] loop2: rw=1, want=2639, limit=112 [ 2132.411237][ T2262] attempt to access beyond end of device [ 2132.430253][ T2262] loop2: rw=1, want=2640, limit=112 [ 2132.437011][T27989] attempt to access beyond end of device [ 2132.466105][ T2262] attempt to access beyond end of device [ 2132.475149][ T7] attempt to access beyond end of device [ 2132.476511][T27989] loop4: rw=1, want=131, limit=112 [ 2132.482175][T21942] attempt to access beyond end of device [ 2132.492101][ T7] loop3: rw=1, want=8337, limit=112 [ 2132.497396][T21942] loop1: rw=1, want=8337, limit=112 [ 2132.513327][ T2262] loop2: rw=1, want=2641, limit=112 [ 2132.538996][ T7] attempt to access beyond end of device [ 2132.544643][ T2262] attempt to access beyond end of device [ 2132.544656][ T2262] loop2: rw=1, want=2690, limit=112 [ 2132.544692][ T2262] attempt to access beyond end of device [ 2132.544703][ T2262] loop2: rw=1, want=2691, limit=112 [ 2132.544797][ T2262] attempt to access beyond end of device [ 2132.556194][T27989] attempt to access beyond end of device [ 2132.581690][T21942] attempt to access beyond end of device [ 2132.590124][ T7] loop3: rw=1, want=10777, limit=112 [ 2132.600272][T21942] loop1: rw=1, want=12433, limit=112 [ 2132.605693][ T2262] loop2: rw=1, want=2692, limit=112 [ 2132.609207][ T7] attempt to access beyond end of device [ 2132.610963][ T2262] attempt to access beyond end of device [ 2132.620062][T27989] loop4: rw=1, want=132, limit=112 [ 2132.633290][T27989] attempt to access beyond end of device [ 2132.639023][ T7] loop3: rw=1, want=10806, limit=112 [ 2132.647837][T27989] loop4: rw=1, want=133, limit=112 [ 2132.653287][ T2262] loop2: rw=1, want=2693, limit=112 [ 2132.653411][T21942] attempt to access beyond end of device [ 2132.658528][ T2262] attempt to access beyond end of device [ 2132.664294][ T7] attempt to access beyond end of device [ 2132.675744][T27989] attempt to access beyond end of device [ 2132.681513][T27989] loop4: rw=1, want=142, limit=112 [ 2132.686788][T21942] loop1: rw=1, want=16529, limit=112 [ 2132.690431][ T2262] loop2: rw=1, want=2702, limit=112 [ 2132.692514][T27989] attempt to access beyond end of device [ 2132.698032][ T7] loop3: rw=1, want=10807, limit=112 [ 2132.717780][T21942] attempt to access beyond end of device [ 2132.723537][T27989] loop4: rw=1, want=143, limit=112 [ 2132.728686][T27989] attempt to access beyond end of device [ 2132.731874][ T7] attempt to access beyond end of device [ 2132.734476][ T2262] attempt to access beyond end of device [ 2132.745698][T21942] loop1: rw=1, want=20625, limit=112 [ 2132.749813][ T7] loop3: rw=1, want=10808, limit=112 [ 2132.751842][T27989] loop4: rw=1, want=144, limit=112 [ 2132.761462][T27989] attempt to access beyond end of device [ 2132.768948][ T7] attempt to access beyond end of device [ 2132.777861][T21942] attempt to access beyond end of device [ 2132.783557][ T2262] loop2: rw=1, want=2703, limit=112 [ 2132.787116][ T7] loop3: rw=1, want=10809, limit=112 [ 2132.788792][ T2262] attempt to access beyond end of device [ 2132.799770][T21942] loop1: rw=1, want=24721, limit=112 [ 2132.805194][T27989] loop4: rw=1, want=145, limit=112 [ 2132.805484][ T7] attempt to access beyond end of device [ 2132.811836][ T2262] loop2: rw=1, want=2704, limit=112 [ 2132.821165][ T2262] attempt to access beyond end of device [ 2132.837146][T27989] attempt to access beyond end of device [ 2132.848260][T21942] attempt to access beyond end of device [ 2132.850139][ T7] loop3: rw=1, want=10830, limit=112 [ 2132.853945][ T2262] loop2: rw=1, want=2705, limit=112 [ 2132.860432][ T2262] attempt to access beyond end of device [ 2132.870103][T27989] loop4: rw=1, want=4241, limit=112 [ 2132.875400][T21942] loop1: rw=1, want=28817, limit=112 [ 2132.890073][ T7] attempt to access beyond end of device [ 2132.891443][T27989] attempt to access beyond end of device [ 2132.901867][ T7] loop3: rw=1, want=10831, limit=112 [ 2132.907203][ T7] attempt to access beyond end of device [ 2132.907985][T21942] attempt to access beyond end of device [ 2132.918546][T27989] loop4: rw=1, want=8337, limit=112 [ 2132.931784][ T2262] loop2: rw=1, want=6801, limit=112 [ 2132.940186][ T7] loop3: rw=1, want=10832, limit=112 [ 2132.941798][T21942] loop1: rw=1, want=30937, limit=112 [ 2132.951896][ T7] attempt to access beyond end of device [ 2132.953788][T27989] attempt to access beyond end of device [ 2132.957544][ T7] loop3: rw=1, want=10833, limit=112 [ 2132.967979][ T2262] attempt to access beyond end of device [ 2132.974259][T27989] loop4: rw=1, want=12433, limit=112 [ 2132.977672][T21942] attempt to access beyond end of device [ 2132.981853][ T2262] loop2: rw=1, want=10897, limit=112 [ 2132.999470][T27989] attempt to access beyond end of device [ 2133.005293][ T7] attempt to access beyond end of device [ 2133.010923][ T7] loop3: rw=1, want=10882, limit=112 [ 2133.011781][T21942] loop1: rw=1, want=30966, limit=112 [ 2133.022617][T21942] attempt to access beyond end of device [ 2133.024030][ T2262] attempt to access beyond end of device [ 2133.028260][T21942] loop1: rw=1, want=30967, limit=112 [ 2133.035012][T27989] loop4: rw=1, want=16529, limit=112 [ 2133.044673][ T7] attempt to access beyond end of device [ 2133.050325][ T7] loop3: rw=1, want=10883, limit=112 [ 2133.055650][ T2262] loop2: rw=1, want=14993, limit=112 [ 2133.061854][T21942] attempt to access beyond end of device [ 2133.067515][T21942] loop1: rw=1, want=30968, limit=112 [ 2133.071098][T27989] attempt to access beyond end of device [ 2133.078573][ T7] attempt to access beyond end of device [ 2133.091779][ T7] loop3: rw=1, want=10884, limit=112 [ 2133.097091][ T7] attempt to access beyond end of device [ 2133.098796][T21942] attempt to access beyond end of device [ 2133.103884][ T2262] attempt to access beyond end of device [ 2133.114087][T27989] loop4: rw=1, want=20625, limit=112 [ 2133.121798][ T7] loop3: rw=1, want=10885, limit=112 [ 2133.122380][T21942] loop1: rw=1, want=30969, limit=112 [ 2133.127114][ T7] attempt to access beyond end of device [ 2133.138109][ T2262] loop2: rw=1, want=19089, limit=112 [ 2133.140666][T21942] attempt to access beyond end of device [ 2133.145508][T27989] attempt to access beyond end of device [ 2133.159738][T21942] loop1: rw=1, want=30990, limit=112 [ 2133.164633][ T2262] attempt to access beyond end of device [ 2133.170671][ T2262] loop2: rw=1, want=23185, limit=112 [ 2133.177240][T27989] loop4: rw=1, want=21337, limit=112 [ 2133.181798][ T7] loop3: rw=1, want=10894, limit=112 [ 2133.183131][T27989] attempt to access beyond end of device [ 2133.187835][ T7] attempt to access beyond end of device [ 2133.201783][T27989] loop4: rw=1, want=21366, limit=112 [ 2133.207103][T27989] attempt to access beyond end of device [ 2133.212850][T21942] attempt to access beyond end of device [ 2133.218504][T21942] loop1: rw=1, want=30991, limit=112 [ 2133.224864][ T2262] attempt to access beyond end of device [ 2133.230241][ T7] loop3: rw=1, want=10895, limit=112 [ 2133.230504][ T2262] loop2: rw=1, want=27281, limit=112 [ 2133.236189][T27989] loop4: rw=1, want=21367, limit=112 [ 2133.241166][T21942] attempt to access beyond end of device [ 2133.251845][ T7] attempt to access beyond end of device [ 2133.252141][T21942] loop1: rw=1, want=30992, limit=112 [ 2133.257724][ T7] loop3: rw=1, want=10896, limit=112 [ 2133.276345][T27989] attempt to access beyond end of device [ 2133.282357][ T2262] attempt to access beyond end of device [ 2133.284819][ T7] attempt to access beyond end of device [ 2133.287995][ T2262] loop2: rw=1, want=31377, limit=112 [ 2133.299053][T27989] loop4: rw=1, want=21368, limit=112 [ 2133.307666][ T7] loop3: rw=1, want=10897, limit=112 [ 2133.318575][T21942] buffer_io_error: 65 callbacks suppressed [ 2133.318584][T21942] Buffer I/O error on dev loop1, logical block 30991, lost async page write [ 2133.327557][ T2262] attempt to access beyond end of device [ 2133.341042][ T7] Buffer I/O error on dev loop3, logical block 10896, lost async page write [ 2133.341790][T27989] Buffer I/O error on dev loop4, logical block 21367, lost async page write [ 2133.350586][T21942] attempt to access beyond end of device [ 2133.358959][ T2262] loop2: rw=1, want=32801, limit=112 [ 2133.388109][ T7] attempt to access beyond end of device [ 2133.389114][T27989] attempt to access beyond end of device [ 2133.399447][T27989] loop4: rw=1, want=21369, limit=112 [ 2133.401850][ T7] loop3: rw=1, want=14993, limit=112 [ 2133.411879][T21942] loop1: rw=1, want=30993, limit=112 [ 2133.417178][T21942] Buffer I/O error on dev loop1, logical block 30992, lost async page write [ 2133.440972][T27989] Buffer I/O error on dev loop4, logical block 21368, lost async page write [ 2133.441295][ T7] attempt to access beyond end of device [ 2133.469392][T27989] attempt to access beyond end of device [ 2133.471898][T21942] attempt to access beyond end of device [ 2133.477758][T27989] loop4: rw=1, want=21390, limit=112 [ 2133.481568][T21942] loop1: rw=1, want=31042, limit=112 [ 2133.501877][T21942] Buffer I/O error on dev loop1, logical block 31041, lost async page write [ 2133.503697][T27989] Buffer I/O error on dev loop4, logical block 21389, lost async page write [ 2133.510587][T21942] attempt to access beyond end of device [ 2133.529509][ T7] loop3: rw=1, want=19089, limit=112 [ 2133.545108][ T7] attempt to access beyond end of device [ 2133.549420][T27989] attempt to access beyond end of device [ 2133.550745][ T7] loop3: rw=1, want=23185, limit=112 [ 2133.565379][T21942] loop1: rw=1, want=31043, limit=112 [ 2133.570693][T21942] Buffer I/O error on dev loop1, logical block 31042, lost async page write [ 2133.589824][ T7] attempt to access beyond end of device [ 2133.591794][T27989] loop4: rw=1, want=21391, limit=112 [ 2133.595608][T21942] attempt to access beyond end of device [ 2133.600748][T27989] Buffer I/O error on dev loop4, logical block 21390, lost async page write [ 2133.606829][T21942] loop1: rw=1, want=31044, limit=112 [ 2133.620716][ T7] loop3: rw=1, want=27281, limit=112 [ 2133.632146][T21942] Buffer I/O error on dev loop1, logical block 31043, lost async page write [ 2133.640842][T21942] attempt to access beyond end of device [ 2133.650996][ T7] attempt to access beyond end of device [ 2133.656690][ T7] loop3: rw=1, want=31377, limit=112 [ 2133.662396][T27989] attempt to access beyond end of device [ 2133.668029][T27989] loop4: rw=1, want=21392, limit=112 [ 2133.673776][T21942] loop1: rw=1, want=31045, limit=112 [ 2133.679157][T21942] attempt to access beyond end of device [ 2133.691001][ T7] attempt to access beyond end of device [ 2133.697182][T27989] attempt to access beyond end of device [ 2133.703334][T21942] loop1: rw=1, want=31054, limit=112 [ 2133.708652][T21942] attempt to access beyond end of device [ 2133.714705][ T7] loop3: rw=1, want=32801, limit=112 [ 2133.721673][T27989] loop4: rw=1, want=21393, limit=112 [ 2133.729103][T27989] attempt to access beyond end of device [ 2133.741884][T21942] loop1: rw=1, want=31055, limit=112 [ 2133.747215][T21942] attempt to access beyond end of device [ 2133.761915][T27989] loop4: rw=1, want=21442, limit=112 [ 2133.767231][T27989] attempt to access beyond end of device [ 2133.791829][T21942] loop1: rw=1, want=31056, limit=112 [ 2133.797146][T21942] attempt to access beyond end of device [ 2133.799899][T27989] loop4: rw=1, want=21443, limit=112 [ 2133.809215][T27989] attempt to access beyond end of device [ 2133.821793][T21942] loop1: rw=1, want=31057, limit=112 [ 2133.830137][T21942] attempt to access beyond end of device [ 2133.831892][T27989] loop4: rw=1, want=21444, limit=112 [ 2133.842204][T27989] attempt to access beyond end of device [ 2133.847844][T27989] loop4: rw=1, want=21445, limit=112 [ 2133.861798][T21942] loop1: rw=1, want=32993, limit=112 [ 2133.869232][T27989] attempt to access beyond end of device [ 2133.894235][T27989] loop4: rw=1, want=21454, limit=112 [ 2133.899584][T27989] attempt to access beyond end of device [ 2133.931987][T27989] loop4: rw=1, want=21455, limit=112 [ 2133.937322][T27989] attempt to access beyond end of device [ 2133.969155][T27989] loop4: rw=1, want=21456, limit=112 [ 2133.977845][T27989] attempt to access beyond end of device [ 2134.001951][T27989] loop4: rw=1, want=21457, limit=112 [ 2134.011493][T27989] attempt to access beyond end of device [ 2134.045722][T27989] loop4: rw=1, want=24033, limit=112 17:12:35 executing program 2: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:12:35 executing program 4: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5", 0x8c) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:12:35 executing program 5: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:12:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c03}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2136.339984][ T2262] attempt to access beyond end of device [ 2136.355629][ T2262] loop3: rw=1, want=130, limit=112 [ 2136.378852][ T2262] attempt to access beyond end of device [ 2136.384599][ T2262] loop3: rw=1, want=131, limit=112 17:12:35 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00'}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:12:35 executing program 3: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2136.395462][ T2262] attempt to access beyond end of device [ 2136.408487][T27989] attempt to access beyond end of device [ 2136.409171][ T2262] loop3: rw=1, want=132, limit=112 [ 2136.421893][T27989] loop2: rw=1, want=130, limit=112 [ 2136.430422][ T2262] attempt to access beyond end of device [ 2136.445398][ T7] attempt to access beyond end of device [ 2136.453665][ T7] loop1: rw=1, want=130, limit=112 [ 2136.456201][T27989] attempt to access beyond end of device [ 2136.481530][ T7] attempt to access beyond end of device [ 2136.483833][ T2262] loop3: rw=1, want=133, limit=112 [ 2136.517563][T27989] loop2: rw=1, want=131, limit=112 [ 2136.544907][ T2262] attempt to access beyond end of device [ 2136.555693][T27989] attempt to access beyond end of device [ 2136.588847][ T2262] loop3: rw=1, want=142, limit=112 [ 2136.602806][T27989] loop2: rw=1, want=132, limit=112 [ 2136.633035][ T7] loop1: rw=1, want=131, limit=112 [ 2136.648749][ T2262] attempt to access beyond end of device [ 2136.665463][T27989] attempt to access beyond end of device [ 2136.697688][ T7] attempt to access beyond end of device [ 2136.717337][ T2262] loop3: rw=1, want=143, limit=112 [ 2136.728916][T27989] loop2: rw=1, want=133, limit=112 [ 2136.762888][ T7] loop1: rw=1, want=132, limit=112 [ 2136.801647][ T2262] attempt to access beyond end of device [ 2136.807972][T27989] attempt to access beyond end of device [ 2136.862187][ T7] attempt to access beyond end of device [ 2136.888502][ T2262] loop3: rw=1, want=144, limit=112 [ 2136.905899][T27989] loop2: rw=1, want=142, limit=112 [ 2136.954865][ T2262] attempt to access beyond end of device [ 2136.978528][T27989] attempt to access beyond end of device [ 2137.066467][ T2262] loop3: rw=1, want=145, limit=112 [ 2137.072364][T27989] loop2: rw=1, want=143, limit=112 [ 2137.100830][ T7] loop1: rw=1, want=133, limit=112 [ 2137.168548][T27989] attempt to access beyond end of device [ 2137.179087][ T7] attempt to access beyond end of device [ 2137.244849][T27989] loop2: rw=1, want=144, limit=112 [ 2137.250004][T27989] attempt to access beyond end of device [ 2137.255737][T27989] loop2: rw=1, want=145, limit=112 [ 2137.262822][ T7] loop1: rw=1, want=142, limit=112 [ 2137.267411][T27989] attempt to access beyond end of device [ 2137.273628][T27989] loop2: rw=1, want=4241, limit=112 [ 2137.282802][ T2262] attempt to access beyond end of device [ 2137.283729][T27989] attempt to access beyond end of device [ 2137.294252][T27989] loop2: rw=1, want=5273, limit=112 [ 2137.295056][T27989] attempt to access beyond end of device [ 2137.305365][T27989] loop2: rw=1, want=5302, limit=112 [ 2137.310680][T27989] attempt to access beyond end of device [ 2137.321555][T27989] loop2: rw=1, want=5303, limit=112 [ 2137.332498][ T7] attempt to access beyond end of device [ 2137.338145][ T7] loop1: rw=1, want=143, limit=112 [ 2137.343432][ T2262] loop3: rw=1, want=4241, limit=112 [ 2137.351843][T27989] attempt to access beyond end of device [ 2137.357482][T27989] loop2: rw=1, want=5304, limit=112 [ 2137.378194][ T2262] attempt to access beyond end of device [ 2137.383998][ T7] attempt to access beyond end of device [ 2137.389634][ T7] loop1: rw=1, want=144, limit=112 17:12:36 executing program 4: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5", 0x8c) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2137.403527][T27989] attempt to access beyond end of device [ 2137.409178][T27989] loop2: rw=1, want=5305, limit=112 [ 2137.421827][ T2262] loop3: rw=1, want=8337, limit=112 [ 2137.432119][T10586] attempt to access beyond end of device [ 2137.437775][T10586] loop4: rw=1, want=130, limit=112 [ 2137.445288][ T7] attempt to access beyond end of device 17:12:36 executing program 5: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2137.461839][T27989] attempt to access beyond end of device [ 2137.467501][T27989] loop2: rw=1, want=5326, limit=112 [ 2137.468162][ T7] loop1: rw=1, want=145, limit=112 [ 2137.488718][T10586] attempt to access beyond end of device [ 2137.494664][ T2262] attempt to access beyond end of device [ 2137.496616][ T7] attempt to access beyond end of device [ 2137.500307][ T2262] loop3: rw=1, want=12433, limit=112 [ 2137.509008][T27989] attempt to access beyond end of device [ 2137.515273][T10586] loop4: rw=1, want=131, limit=112 [ 2137.529596][T27989] loop2: rw=1, want=5327, limit=112 [ 2137.531156][ T2262] attempt to access beyond end of device [ 2137.548011][T27989] attempt to access beyond end of device [ 2137.562011][T10586] attempt to access beyond end of device [ 2137.567661][T10586] loop4: rw=1, want=132, limit=112 [ 2137.573120][ T7] loop1: rw=1, want=281, limit=112 [ 2137.578409][ T7] attempt to access beyond end of device [ 2137.579483][T27989] loop2: rw=1, want=5328, limit=112 [ 2137.591944][ T2262] loop3: rw=1, want=16529, limit=112 [ 2137.601984][T10586] attempt to access beyond end of device [ 2137.607634][T10586] loop4: rw=1, want=133, limit=112 17:12:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2137.612997][ T7] loop1: rw=1, want=310, limit=112 [ 2137.618149][ T7] attempt to access beyond end of device [ 2137.621521][T27989] attempt to access beyond end of device [ 2137.642051][ T2262] attempt to access beyond end of device [ 2137.647715][ T2262] loop3: rw=1, want=20625, limit=112 [ 2137.651404][T27989] loop2: rw=1, want=5329, limit=112 [ 2137.653477][T10586] attempt to access beyond end of device [ 2137.664260][ T7] loop1: rw=1, want=311, limit=112 [ 2137.669408][ T7] attempt to access beyond end of device [ 2137.691580][T27989] attempt to access beyond end of device [ 2137.692164][T10586] loop4: rw=1, want=142, limit=112 [ 2137.708438][ T2262] attempt to access beyond end of device [ 2137.714185][ T7] loop1: rw=1, want=312, limit=112 [ 2137.719356][ T7] attempt to access beyond end of device [ 2137.728472][T27989] loop2: rw=1, want=5378, limit=112 [ 2137.745717][T10586] attempt to access beyond end of device [ 2137.751375][T10586] loop4: rw=1, want=143, limit=112 [ 2137.765527][T27989] attempt to access beyond end of device [ 2137.773961][ T7] loop1: rw=1, want=313, limit=112 [ 2137.779130][ T7] attempt to access beyond end of device [ 2137.785235][ T2262] loop3: rw=1, want=24721, limit=112 [ 2137.799696][T27989] loop2: rw=1, want=5379, limit=112 [ 2137.812182][T10586] attempt to access beyond end of device [ 2137.817845][T10586] loop4: rw=1, want=144, limit=112 [ 2137.831845][T27989] attempt to access beyond end of device [ 2137.837614][T27989] loop2: rw=1, want=5380, limit=112 [ 2137.851792][ T7] loop1: rw=1, want=334, limit=112 [ 2137.856992][ T7] attempt to access beyond end of device [ 2137.870477][ T7] loop1: rw=1, want=335, limit=112 [ 2137.874295][ T2262] attempt to access beyond end of device [ 2137.881915][T10586] attempt to access beyond end of device [ 2137.887560][T10586] loop4: rw=1, want=145, limit=112 [ 2137.893139][T27989] attempt to access beyond end of device [ 2137.894917][ T2262] loop3: rw=1, want=28817, limit=112 [ 2137.898799][T27989] loop2: rw=1, want=5381, limit=112 [ 2137.898844][T27989] attempt to access beyond end of device [ 2137.898855][T27989] loop2: rw=1, want=5390, limit=112 [ 2137.898892][T27989] attempt to access beyond end of device [ 2137.926514][ T7] attempt to access beyond end of device [ 2137.951938][ T7] loop1: rw=1, want=336, limit=112 [ 2137.957090][ T7] attempt to access beyond end of device [ 2137.970494][T10586] attempt to access beyond end of device [ 2138.001803][ T7] loop1: rw=1, want=337, limit=112 [ 2138.006994][ T7] attempt to access beyond end of device [ 2138.013974][T10586] loop4: rw=1, want=4241, limit=112 [ 2138.023633][ T2262] attempt to access beyond end of device [ 2138.039060][T10586] attempt to access beyond end of device [ 2138.044791][ T7] loop1: rw=1, want=386, limit=112 17:12:37 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) getpeername$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, 0x0) syz_genetlink_get_family_id$fou(0x0) syz_genetlink_get_family_id$team(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) [ 2138.049943][ T7] attempt to access beyond end of device [ 2138.055629][ T2262] loop3: rw=1, want=32889, limit=112 [ 2138.061414][T27989] loop2: rw=1, want=5391, limit=112 [ 2138.098992][T27989] attempt to access beyond end of device [ 2138.131846][ T7] loop1: rw=1, want=387, limit=112 [ 2138.137150][ T7] attempt to access beyond end of device [ 2138.143320][T10586] loop4: rw=1, want=8337, limit=112 [ 2138.152145][T27989] loop2: rw=1, want=5392, limit=112 [ 2138.168577][T10586] attempt to access beyond end of device [ 2138.170744][T27989] attempt to access beyond end of device [ 2138.174583][ T7] loop1: rw=1, want=388, limit=112 [ 2138.189171][T27989] loop2: rw=1, want=5393, limit=112 [ 2138.194807][ T7] attempt to access beyond end of device 17:12:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2138.200449][ T7] loop1: rw=1, want=389, limit=112 [ 2138.206070][T10586] loop4: rw=1, want=12433, limit=112 [ 2138.229593][T27989] attempt to access beyond end of device [ 2138.245274][T10586] attempt to access beyond end of device [ 2138.250917][T10586] loop4: rw=1, want=16529, limit=112 [ 2138.259454][T27989] loop2: rw=1, want=9489, limit=112 [ 2138.268708][ T7] attempt to access beyond end of device [ 2138.288928][ T7] loop1: rw=1, want=398, limit=112 [ 2138.313745][ T7] attempt to access beyond end of device [ 2138.328042][T10586] attempt to access beyond end of device [ 2138.330133][T27989] attempt to access beyond end of device [ 2138.345367][ T7] loop1: rw=1, want=399, limit=112 [ 2138.354296][T27989] loop2: rw=1, want=13585, limit=112 [ 2138.360996][T10586] loop4: rw=1, want=20625, limit=112 [ 2138.370046][ T7] buffer_io_error: 76 callbacks suppressed [ 2138.370196][ T7] Buffer I/O error on dev loop1, logical block 398, lost async page write [ 2138.396756][ T7] attempt to access beyond end of device 17:12:37 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sysfs$1(0x1, &(0x7f0000000100)='ramfs\x00') [ 2138.408955][T10586] attempt to access beyond end of device [ 2138.421898][T27989] attempt to access beyond end of device [ 2138.437714][ T7] loop1: rw=1, want=400, limit=112 [ 2138.457634][T27989] loop2: rw=1, want=17681, limit=112 [ 2138.461850][T10586] loop4: rw=1, want=21849, limit=112 [ 2138.463217][ T7] Buffer I/O error on dev loop1, logical block 399, lost async page write [ 2138.469874][T10586] attempt to access beyond end of device [ 2138.512982][ T7] attempt to access beyond end of device [ 2138.518627][ T7] loop1: rw=1, want=401, limit=112 [ 2138.523917][T27989] attempt to access beyond end of device [ 2138.524347][T10586] loop4: rw=1, want=21878, limit=112 [ 2138.543958][T27989] loop2: rw=1, want=21777, limit=112 [ 2138.572168][ T7] Buffer I/O error on dev loop1, logical block 400, lost async page write [ 2138.581696][ T7] attempt to access beyond end of device [ 2138.587905][T10586] Buffer I/O error on dev loop4, logical block 21877, lost async page write [ 2138.597615][T27989] attempt to access beyond end of device [ 2138.603617][T10586] attempt to access beyond end of device [ 2138.609861][T10586] loop4: rw=1, want=21879, limit=112 [ 2138.622214][ T7] loop1: rw=1, want=969, limit=112 [ 2138.623183][T27989] loop2: rw=1, want=25873, limit=112 [ 2138.628341][T10586] Buffer I/O error on dev loop4, logical block 21878, lost async page write [ 2138.656863][T10586] attempt to access beyond end of device [ 2138.671851][T10586] loop4: rw=1, want=21880, limit=112 [ 2138.677148][T10586] Buffer I/O error on dev loop4, logical block 21879, lost async page write [ 2138.677690][T27989] attempt to access beyond end of device [ 2138.712303][T10586] attempt to access beyond end of device [ 2138.717950][T10586] loop4: rw=1, want=21881, limit=112 [ 2138.730222][T27989] loop2: rw=1, want=29969, limit=112 [ 2138.742197][T10586] Buffer I/O error on dev loop4, logical block 21880, lost async page write [ 2138.766915][T10586] attempt to access beyond end of device [ 2138.774294][T27989] attempt to access beyond end of device [ 2138.785685][T10586] loop4: rw=1, want=21902, limit=112 [ 2138.792346][T27989] loop2: rw=1, want=32993, limit=112 [ 2138.803481][T10586] Buffer I/O error on dev loop4, logical block 21901, lost async page write [ 2138.841867][T10586] attempt to access beyond end of device [ 2138.866878][T10586] loop4: rw=1, want=21903, limit=112 [ 2138.889222][T10586] Buffer I/O error on dev loop4, logical block 21902, lost async page write [ 2138.926476][T10586] attempt to access beyond end of device [ 2138.957636][T10586] loop4: rw=1, want=21904, limit=112 [ 2139.003453][T10586] Buffer I/O error on dev loop4, logical block 21903, lost async page write [ 2139.073276][T10586] attempt to access beyond end of device [ 2139.078967][T10586] loop4: rw=1, want=21905, limit=112 [ 2139.084433][T10586] attempt to access beyond end of device [ 2139.199533][T10586] loop4: rw=1, want=21954, limit=112 [ 2139.221939][T10586] attempt to access beyond end of device [ 2139.247377][T10586] loop4: rw=1, want=21955, limit=112 [ 2139.276942][T10586] attempt to access beyond end of device [ 2139.301909][T10586] loop4: rw=1, want=21956, limit=112 [ 2139.326923][T10586] attempt to access beyond end of device [ 2139.366277][T10586] loop4: rw=1, want=21957, limit=112 [ 2139.397042][T10586] attempt to access beyond end of device [ 2139.847672][T10586] loop4: rw=1, want=21966, limit=112 [ 2139.853144][T10586] attempt to access beyond end of device [ 2139.858797][T10586] loop4: rw=1, want=21967, limit=112 [ 2139.864198][T10586] attempt to access beyond end of device [ 2139.869839][T10586] loop4: rw=1, want=21968, limit=112 [ 2139.875219][T10586] attempt to access beyond end of device [ 2139.880859][T10586] loop4: rw=1, want=21969, limit=112 [ 2139.905638][T10586] attempt to access beyond end of device [ 2139.930786][T10586] loop4: rw=1, want=23025, limit=112 [ 2140.079160][T10586] attempt to access beyond end of device [ 2140.102019][T10586] loop1: rw=1, want=130, limit=112 [ 2140.149440][T10586] attempt to access beyond end of device [ 2140.188201][T10586] loop1: rw=1, want=131, limit=112 [ 2140.219523][T10586] attempt to access beyond end of device [ 2140.262171][T10586] loop1: rw=1, want=132, limit=112 [ 2140.267425][T10586] attempt to access beyond end of device [ 2140.273188][T10586] loop1: rw=1, want=133, limit=112 [ 2140.278339][T10586] attempt to access beyond end of device [ 2140.284133][T10586] loop1: rw=1, want=142, limit=112 [ 2140.289306][T10586] attempt to access beyond end of device [ 2140.295041][T10586] loop1: rw=1, want=143, limit=112 [ 2140.300192][T10586] attempt to access beyond end of device [ 2140.305917][T10586] loop1: rw=1, want=144, limit=112 [ 2140.311050][T10586] attempt to access beyond end of device [ 2140.316752][T10586] loop1: rw=1, want=145, limit=112 [ 2140.327752][T10586] attempt to access beyond end of device [ 2140.337257][T28929] attempt to access beyond end of device [ 2140.352047][T10586] loop1: rw=1, want=4241, limit=112 [ 2140.352071][T28929] loop3: rw=1, want=130, limit=112 [ 2140.375434][T10586] attempt to access beyond end of device [ 2140.381076][T10586] loop1: rw=1, want=7641, limit=112 [ 2140.404499][T10586] attempt to access beyond end of device [ 2140.410148][T10586] loop1: rw=1, want=7670, limit=112 [ 2140.415507][T28929] attempt to access beyond end of device [ 2140.421199][T28929] loop3: rw=1, want=131, limit=112 [ 2140.431891][T28929] attempt to access beyond end of device [ 2140.437547][T28929] loop3: rw=1, want=132, limit=112 [ 2140.451853][T10586] attempt to access beyond end of device [ 2140.457498][T10586] loop1: rw=1, want=7671, limit=112 [ 2140.471831][T28929] attempt to access beyond end of device [ 2140.477480][T28929] loop3: rw=1, want=133, limit=112 [ 2140.482831][T10586] attempt to access beyond end of device [ 2140.488472][T10586] loop1: rw=1, want=7672, limit=112 [ 2140.501943][T28929] attempt to access beyond end of device [ 2140.507594][T28929] loop3: rw=1, want=142, limit=112 [ 2140.511806][T10586] attempt to access beyond end of device [ 2140.521849][T28929] attempt to access beyond end of device [ 2140.527501][T28929] loop3: rw=1, want=143, limit=112 [ 2140.531828][T10586] loop1: rw=1, want=7673, limit=112 [ 2140.537848][T10586] attempt to access beyond end of device [ 2140.543648][T28929] attempt to access beyond end of device [ 2140.543677][T28929] loop3: rw=1, want=144, limit=112 [ 2140.543746][T28929] attempt to access beyond end of device [ 2140.571791][T28929] loop3: rw=1, want=145, limit=112 [ 2140.585867][T10586] loop1: rw=1, want=7694, limit=112 [ 2140.593455][T28929] attempt to access beyond end of device [ 2140.599096][T28929] loop3: rw=1, want=4241, limit=112 [ 2140.607372][T10586] attempt to access beyond end of device [ 2140.625827][T10586] loop1: rw=1, want=7695, limit=112 [ 2140.631109][T10586] attempt to access beyond end of device [ 2140.641695][T28929] attempt to access beyond end of device [ 2140.660915][T28929] loop3: rw=1, want=8337, limit=112 [ 2140.661007][T10586] loop1: rw=1, want=7696, limit=112 [ 2140.692106][T10586] attempt to access beyond end of device [ 2140.694489][T28929] attempt to access beyond end of device [ 2140.702204][T10586] loop1: rw=1, want=7697, limit=112 [ 2140.708932][T10586] attempt to access beyond end of device [ 2140.719766][T28929] loop3: rw=1, want=12433, limit=112 [ 2140.725552][T10586] loop1: rw=1, want=7746, limit=112 [ 2140.731908][T10586] attempt to access beyond end of device [ 2140.783809][T28929] attempt to access beyond end of device [ 2140.828092][T28929] loop3: rw=1, want=16529, limit=112 [ 2140.864459][T10586] loop1: rw=1, want=7747, limit=112 [ 2140.869704][T10586] attempt to access beyond end of device [ 2140.875423][T10586] loop1: rw=1, want=7748, limit=112 [ 2140.880648][T10586] attempt to access beyond end of device [ 2140.886384][T10586] loop1: rw=1, want=7749, limit=112 [ 2140.891614][T10586] attempt to access beyond end of device [ 2140.897306][T10586] loop1: rw=1, want=7758, limit=112 [ 2140.902595][T10586] attempt to access beyond end of device [ 2140.908226][T10586] loop1: rw=1, want=7759, limit=112 [ 2140.913573][T10586] attempt to access beyond end of device [ 2140.919212][T10586] loop1: rw=1, want=7760, limit=112 [ 2140.924692][T10586] attempt to access beyond end of device [ 2140.930372][T10586] loop1: rw=1, want=7761, limit=112 [ 2140.955633][T28929] attempt to access beyond end of device [ 2140.962169][T10586] attempt to access beyond end of device [ 2140.967805][T10586] loop1: rw=1, want=11857, limit=112 [ 2140.997988][T28929] loop3: rw=1, want=20625, limit=112 [ 2141.001669][T10586] attempt to access beyond end of device [ 2141.032521][T10586] loop1: rw=1, want=15953, limit=112 [ 2141.051251][T10586] attempt to access beyond end of device [ 2141.064906][T28929] attempt to access beyond end of device [ 2141.074784][T28929] loop3: rw=1, want=22425, limit=112 [ 2141.082002][T28929] attempt to access beyond end of device [ 2141.087800][T28929] loop3: rw=1, want=22454, limit=112 [ 2141.093343][T28929] attempt to access beyond end of device [ 2141.099176][T28929] loop3: rw=1, want=22455, limit=112 [ 2141.104710][T28929] attempt to access beyond end of device [ 2141.110518][T28929] loop3: rw=1, want=22456, limit=112 [ 2141.116095][T28929] attempt to access beyond end of device [ 2141.121911][T28929] loop3: rw=1, want=22457, limit=112 [ 2141.127414][T28929] attempt to access beyond end of device [ 2141.133349][T28929] loop3: rw=1, want=22478, limit=112 [ 2141.138822][T28929] attempt to access beyond end of device [ 2141.144665][T28929] loop3: rw=1, want=22479, limit=112 [ 2141.150163][T28929] attempt to access beyond end of device [ 2141.156310][T28929] loop3: rw=1, want=22480, limit=112 [ 2141.163190][T28929] attempt to access beyond end of device [ 2141.168978][T28929] loop3: rw=1, want=22481, limit=112 [ 2141.174500][T28929] attempt to access beyond end of device [ 2141.180325][T28929] loop3: rw=1, want=22530, limit=112 [ 2141.185808][T28929] attempt to access beyond end of device [ 2141.191590][T28929] loop3: rw=1, want=22531, limit=112 [ 2141.198295][T28929] attempt to access beyond end of device [ 2141.214434][T28929] loop3: rw=1, want=22532, limit=112 [ 2141.230406][T28929] attempt to access beyond end of device [ 2141.242408][T10586] loop1: rw=1, want=20049, limit=112 [ 2141.253553][T28929] loop3: rw=1, want=22533, limit=112 [ 2141.280497][T28929] attempt to access beyond end of device [ 2141.317636][T28929] loop3: rw=1, want=22542, limit=112 [ 2141.325929][T10586] attempt to access beyond end of device [ 2141.388289][T28929] attempt to access beyond end of device [ 2141.400227][T10586] loop1: rw=1, want=24145, limit=112 [ 2141.440850][T28929] loop3: rw=1, want=22543, limit=112 [ 2141.464468][T28929] attempt to access beyond end of device [ 2141.470142][T28929] loop3: rw=1, want=22544, limit=112 [ 2141.475515][T28929] attempt to access beyond end of device [ 2141.481162][T28929] loop3: rw=1, want=22545, limit=112 [ 2141.492687][T28929] attempt to access beyond end of device [ 2141.498328][T28929] loop3: rw=1, want=26409, limit=112 17:12:40 executing program 2: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:12:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:12:40 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000280)=""/67, 0x1b) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e00000800000000f1"], 0x1, 0x0, 0x0) 17:12:40 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00'}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:12:40 executing program 3: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2141.511089][T10586] attempt to access beyond end of device [ 2141.526524][T10586] loop1: rw=1, want=28241, limit=112 [ 2141.575653][T10586] attempt to access beyond end of device [ 2141.581370][T10586] loop1: rw=1, want=32337, limit=112 [ 2141.599159][T27989] attempt to access beyond end of device [ 2141.607549][T27989] loop2: rw=1, want=130, limit=112 [ 2141.623282][T27989] attempt to access beyond end of device [ 2141.639937][T27989] loop2: rw=1, want=131, limit=112 [ 2141.651867][T27989] attempt to access beyond end of device [ 2141.664750][T27989] loop2: rw=1, want=132, limit=112 [ 2141.679616][T27989] attempt to access beyond end of device [ 2141.689639][T10586] attempt to access beyond end of device [ 2141.701900][T27989] loop2: rw=1, want=133, limit=112 [ 2141.709376][T10586] loop1: rw=1, want=32993, limit=112 [ 2141.719827][T27989] attempt to access beyond end of device [ 2141.750326][T27989] loop2: rw=1, want=142, limit=112 [ 2141.774729][T27989] attempt to access beyond end of device [ 2141.801714][T27989] loop2: rw=1, want=143, limit=112 [ 2141.827829][T27989] attempt to access beyond end of device [ 2141.852967][T27989] loop2: rw=1, want=144, limit=112 [ 2141.878019][T27989] attempt to access beyond end of device [ 2141.904226][T27989] loop2: rw=1, want=145, limit=112 [ 2141.949836][T27989] attempt to access beyond end of device [ 2141.979412][T27989] loop2: rw=1, want=2969, limit=112 [ 2142.019427][T27989] attempt to access beyond end of device [ 2142.058945][T27989] loop2: rw=1, want=2998, limit=112 [ 2142.092338][T27989] attempt to access beyond end of device [ 2142.135366][T27989] loop2: rw=1, want=2999, limit=112 17:12:41 executing program 4: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c6", 0x8d) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2142.178804][T27989] attempt to access beyond end of device [ 2142.198623][T27989] loop2: rw=1, want=3000, limit=112 [ 2142.205811][T27989] attempt to access beyond end of device [ 2142.232123][T27989] loop2: rw=1, want=3001, limit=112 [ 2142.237459][T27989] attempt to access beyond end of device [ 2142.252657][T27989] loop2: rw=1, want=3022, limit=112 [ 2142.257928][T27989] attempt to access beyond end of device [ 2142.292170][T27989] loop2: rw=1, want=3023, limit=112 [ 2142.297441][T27989] attempt to access beyond end of device [ 2142.314015][T27989] loop2: rw=1, want=3024, limit=112 [ 2142.325059][T27989] attempt to access beyond end of device 17:12:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7803}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2142.342238][T27989] loop2: rw=1, want=3025, limit=112 [ 2142.360173][T27989] attempt to access beyond end of device [ 2142.380328][T27989] loop2: rw=1, want=3074, limit=112 [ 2142.397162][T27989] attempt to access beyond end of device [ 2142.447839][T27989] loop2: rw=1, want=3075, limit=112 [ 2142.516038][T27989] attempt to access beyond end of device [ 2142.599881][T27989] loop2: rw=1, want=3076, limit=112 17:12:41 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@acquire={0x134, 0x17, 0x1, 0x0, 0x0, {{@in=@local}, @in, {@in6=@loopback, @in6=@remote}, {{@in6=@ipv4={[], [], @loopback}, @in=@remote}}}, [@mark={0xc}]}, 0x499}, 0x8}, 0x0) [ 2142.667165][T27989] attempt to access beyond end of device [ 2142.734288][T27989] loop2: rw=1, want=3077, limit=112 [ 2142.787662][T27989] attempt to access beyond end of device [ 2142.870277][T27989] loop2: rw=1, want=3086, limit=112 17:12:41 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) fallocate(r0, 0x0, 0x0, 0x9) [ 2142.927691][T27989] attempt to access beyond end of device [ 2142.979143][T27989] loop2: rw=1, want=3087, limit=112 [ 2143.035451][T27989] attempt to access beyond end of device 17:12:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2143.084838][T27989] loop2: rw=1, want=3088, limit=112 17:12:42 executing program 4: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c6", 0x8d) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2143.141927][T27989] attempt to access beyond end of device [ 2143.147581][T27989] loop2: rw=1, want=3089, limit=112 [ 2143.159992][T27989] attempt to access beyond end of device [ 2143.167136][T27989] loop2: rw=1, want=7185, limit=112 [ 2143.204475][T10586] attempt to access beyond end of device [ 2143.207410][T27989] attempt to access beyond end of device [ 2143.210134][T10586] loop4: rw=1, want=130, limit=112 [ 2143.231919][T27989] loop2: rw=1, want=11281, limit=112 [ 2143.258722][T10586] attempt to access beyond end of device [ 2143.285798][T10586] loop4: rw=1, want=131, limit=112 [ 2143.293307][T10586] attempt to access beyond end of device [ 2143.298949][T10586] loop4: rw=1, want=132, limit=112 [ 2143.306502][T27989] attempt to access beyond end of device [ 2143.331824][T27989] loop2: rw=1, want=15377, limit=112 [ 2143.341866][T10586] attempt to access beyond end of device [ 2143.347512][T10586] loop4: rw=1, want=133, limit=112 [ 2143.347563][T10586] attempt to access beyond end of device [ 2143.347575][T10586] loop4: rw=1, want=142, limit=112 [ 2143.347613][T10586] attempt to access beyond end of device [ 2143.347625][T10586] loop4: rw=1, want=143, limit=112 [ 2143.347661][T10586] attempt to access beyond end of device [ 2143.347673][T10586] loop4: rw=1, want=144, limit=112 [ 2143.347717][T10586] attempt to access beyond end of device [ 2143.377233][T27989] attempt to access beyond end of device [ 2143.411846][T10586] loop4: rw=1, want=145, limit=112 [ 2143.417018][T10586] buffer_io_error: 88 callbacks suppressed [ 2143.417034][T10586] Buffer I/O error on dev loop4, logical block 144, lost async page write [ 2143.433271][T10586] attempt to access beyond end of device [ 2143.438934][T10586] loop4: rw=1, want=4241, limit=112 [ 2143.470012][T27989] loop2: rw=1, want=17481, limit=112 [ 2143.501339][T10586] attempt to access beyond end of device [ 2143.597076][T10586] loop4: rw=1, want=8337, limit=112 [ 2143.757921][T10586] attempt to access beyond end of device [ 2143.854511][T10586] loop4: rw=1, want=8665, limit=112 [ 2143.913256][T10586] attempt to access beyond end of device [ 2143.952040][T10586] loop4: rw=1, want=8694, limit=112 [ 2143.977967][T10586] Buffer I/O error on dev loop4, logical block 8693, lost async page write 17:12:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc203}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2144.083890][T10586] attempt to access beyond end of device [ 2144.133535][T10586] loop4: rw=1, want=8695, limit=112 [ 2144.570716][T10586] Buffer I/O error on dev loop4, logical block 8694, lost async page write [ 2144.617917][T27989] attempt to access beyond end of device [ 2144.645742][T27989] loop3: rw=1, want=130, limit=112 [ 2144.720401][T10586] attempt to access beyond end of device [ 2144.741265][T27989] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 2144.804708][T10586] loop4: rw=1, want=8696, limit=112 [ 2144.857662][T27989] attempt to access beyond end of device [ 2144.896841][T10586] Buffer I/O error on dev loop4, logical block 8695, lost async page write [ 2144.922910][T27989] loop3: rw=1, want=131, limit=112 [ 2144.928082][T27989] Buffer I/O error on dev loop3, logical block 130, lost async page write [ 2144.936798][T27989] attempt to access beyond end of device [ 2144.942570][T27989] loop3: rw=1, want=132, limit=112 [ 2144.947695][T27989] Buffer I/O error on dev loop3, logical block 131, lost async page write [ 2144.956319][T27989] attempt to access beyond end of device [ 2144.962009][T27989] loop3: rw=1, want=133, limit=112 [ 2144.962410][T10586] attempt to access beyond end of device [ 2144.967127][T27989] Buffer I/O error on dev loop3, logical block 132, lost async page write [ 2144.967168][T27989] attempt to access beyond end of device [ 2144.987016][T27989] loop3: rw=1, want=142, limit=112 [ 2144.992310][T27989] Buffer I/O error on dev loop3, logical block 141, lost async page write [ 2145.000844][T27989] attempt to access beyond end of device [ 2145.015964][T10586] loop4: rw=1, want=8697, limit=112 [ 2145.021287][T10586] Buffer I/O error on dev loop4, logical block 8696, lost async page write [ 2145.024340][ T7] attempt to access beyond end of device [ 2145.030025][T27989] loop3: rw=1, want=143, limit=112 [ 2145.040754][T27989] attempt to access beyond end of device [ 2145.047460][T10586] attempt to access beyond end of device [ 2145.053226][T10586] loop4: rw=1, want=8718, limit=112 [ 2145.058472][T10586] attempt to access beyond end of device [ 2145.064316][T27989] loop3: rw=1, want=144, limit=112 [ 2145.069461][T27989] attempt to access beyond end of device [ 2145.078004][ T7] loop1: rw=1, want=130, limit=112 [ 2145.083494][T10586] loop4: rw=1, want=8719, limit=112 [ 2145.088729][T10586] attempt to access beyond end of device [ 2145.094755][ T7] attempt to access beyond end of device [ 2145.100456][ T7] loop1: rw=1, want=131, limit=112 [ 2145.106024][T27989] loop3: rw=1, want=145, limit=112 [ 2145.118319][T27989] attempt to access beyond end of device [ 2145.124080][T10586] loop4: rw=1, want=8720, limit=112 [ 2145.130800][T10586] attempt to access beyond end of device [ 2145.136917][ T7] attempt to access beyond end of device [ 2145.142911][ T7] loop1: rw=1, want=132, limit=112 [ 2145.148065][ T7] attempt to access beyond end of device [ 2145.154188][T27989] loop3: rw=1, want=4241, limit=112 [ 2145.162036][T10586] loop4: rw=1, want=8721, limit=112 [ 2145.167499][T10586] attempt to access beyond end of device [ 2145.184555][T27989] attempt to access beyond end of device [ 2145.190204][T27989] loop3: rw=1, want=7961, limit=112 [ 2145.196277][ T7] loop1: rw=1, want=133, limit=112 [ 2145.201661][ T7] attempt to access beyond end of device [ 2145.207632][T10586] loop4: rw=1, want=8770, limit=112 [ 2145.213136][ T7] loop1: rw=1, want=142, limit=112 [ 2145.218278][ T7] attempt to access beyond end of device [ 2145.224413][T10586] attempt to access beyond end of device [ 2145.230050][T10586] loop4: rw=1, want=8771, limit=112 [ 2145.238171][T27989] attempt to access beyond end of device [ 2145.244241][ T7] loop1: rw=1, want=143, limit=112 [ 2145.249377][ T7] attempt to access beyond end of device [ 2145.255373][T10586] attempt to access beyond end of device [ 2145.261001][T10586] loop4: rw=1, want=8772, limit=112 [ 2145.266698][T27989] loop3: rw=1, want=7990, limit=112 [ 2145.272236][T27989] attempt to access beyond end of device [ 2145.277865][T27989] loop3: rw=1, want=7991, limit=112 [ 2145.283432][T10586] attempt to access beyond end of device [ 2145.286583][ T7] loop1: rw=1, want=144, limit=112 [ 2145.289228][T10586] loop4: rw=1, want=8773, limit=112 [ 2145.301125][T27989] attempt to access beyond end of device [ 2145.308613][T10586] attempt to access beyond end of device [ 2145.312074][ T7] attempt to access beyond end of device [ 2145.317795][T27989] loop3: rw=1, want=7992, limit=112 [ 2145.319886][ T7] loop1: rw=1, want=145, limit=112 [ 2145.325419][T10586] loop4: rw=1, want=8782, limit=112 [ 2145.338852][T27989] attempt to access beyond end of device [ 2145.375415][ T7] attempt to access beyond end of device [ 2145.393693][ T7] loop1: rw=1, want=4241, limit=112 [ 2145.443812][ T7] attempt to access beyond end of device [ 2145.462134][ T7] loop1: rw=1, want=8337, limit=112 [ 2145.478937][T10586] attempt to access beyond end of device [ 2145.488211][T27989] loop3: rw=1, want=7993, limit=112 [ 2145.510806][T27989] attempt to access beyond end of device [ 2145.516948][T10586] loop4: rw=1, want=8783, limit=112 [ 2145.559500][ T7] attempt to access beyond end of device [ 2145.570203][T10586] attempt to access beyond end of device [ 2145.579032][T27989] loop3: rw=1, want=8014, limit=112 [ 2145.622933][ T7] loop1: rw=1, want=12433, limit=112 [ 2145.628973][T27989] attempt to access beyond end of device [ 2145.637835][ T7] attempt to access beyond end of device [ 2145.643527][T10586] loop4: rw=1, want=8784, limit=112 [ 2145.648757][T10586] attempt to access beyond end of device [ 2145.654507][T10586] loop4: rw=1, want=8785, limit=112 [ 2145.668688][T27989] loop3: rw=1, want=8015, limit=112 [ 2145.693944][T27989] attempt to access beyond end of device [ 2145.720206][T27989] loop3: rw=1, want=8016, limit=112 [ 2145.741407][T27989] attempt to access beyond end of device [ 2145.748602][ T7] loop1: rw=1, want=16529, limit=112 [ 2145.767951][T27989] loop3: rw=1, want=8017, limit=112 [ 2145.792008][T27989] attempt to access beyond end of device [ 2145.811339][ T7] attempt to access beyond end of device [ 2145.820628][T27989] loop3: rw=1, want=8066, limit=112 [ 2145.837722][ T7] loop1: rw=1, want=20625, limit=112 [ 2145.843693][T27989] attempt to access beyond end of device [ 2145.865719][T27989] loop3: rw=1, want=8067, limit=112 [ 2145.888558][T27989] attempt to access beyond end of device [ 2145.899153][ T7] attempt to access beyond end of device [ 2145.914221][T27989] loop3: rw=1, want=8068, limit=112 [ 2145.924335][ T7] loop1: rw=1, want=23161, limit=112 [ 2145.938133][T27989] attempt to access beyond end of device [ 2145.977634][T27989] loop3: rw=1, want=8069, limit=112 [ 2145.985190][T10586] attempt to access beyond end of device [ 2146.005810][T27989] attempt to access beyond end of device [ 2146.019638][T10586] loop4: rw=1, want=12881, limit=112 [ 2146.038746][T27989] loop3: rw=1, want=8078, limit=112 [ 2146.066212][T27989] attempt to access beyond end of device [ 2146.097712][T27989] loop3: rw=1, want=8079, limit=112 [ 2146.106855][T10586] attempt to access beyond end of device [ 2146.122725][T27989] attempt to access beyond end of device [ 2146.128384][T27989] loop3: rw=1, want=8080, limit=112 [ 2146.133700][T27989] attempt to access beyond end of device [ 2146.139336][T27989] loop3: rw=1, want=8081, limit=112 [ 2146.150994][T27989] attempt to access beyond end of device [ 2146.152990][T10586] loop4: rw=1, want=16977, limit=112 [ 2146.156930][T27989] loop3: rw=1, want=12177, limit=112 17:12:45 executing program 2: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:12:45 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x8006, 0x16e8) r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="a50800000000000000de9fb753c0a4ba398d183aa9d5b3cb8ea1498211f9aaa4fc977a55a1497e5808365cea47d7c1513f030a7db82cf8cdb2e06191bd7869c763f9c5d3a3ac9797d1a01605cb3c7250441e26000000000000001c8a9c481719bcd999c1"], 0x64}, 0x0) 17:12:45 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:12:45 executing program 3: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:12:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xca02}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2146.181577][T27989] attempt to access beyond end of device [ 2146.196320][ T7] attempt to access beyond end of device [ 2146.211233][T27989] loop3: rw=1, want=16273, limit=112 [ 2146.216740][ T7] loop2: rw=1, want=130, limit=112 [ 2146.238164][ T7] attempt to access beyond end of device [ 2146.254611][T10586] attempt to access beyond end of device [ 2146.259279][T27989] attempt to access beyond end of device [ 2146.268363][ T7] loop2: rw=1, want=131, limit=112 17:12:45 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) rt_sigsuspend(0x0, 0x25c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) bind$unix(r0, 0x0, 0x0) getgid() listen(0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x156) mount$9p_tcp(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r1 = accept(0xffffffffffffffff, 0x0, 0x0) r2 = gettid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) fdatasync(0xffffffffffffffff) tkill(r2, 0x13) [ 2146.286007][ T7] attempt to access beyond end of device [ 2146.286056][T10586] loop4: rw=1, want=21073, limit=112 [ 2146.292210][T27989] loop3: rw=1, want=20369, limit=112 [ 2146.316887][ T7] loop2: rw=1, want=132, limit=112 [ 2146.335803][ T7] attempt to access beyond end of device [ 2146.354192][ T7] loop2: rw=1, want=133, limit=112 [ 2146.357591][T10586] attempt to access beyond end of device [ 2146.368499][ T7] attempt to access beyond end of device [ 2146.387707][T27989] attempt to access beyond end of device [ 2146.392310][ T7] loop2: rw=1, want=142, limit=112 [ 2146.398152][T10586] loop4: rw=1, want=23817, limit=112 [ 2146.406598][T27989] loop3: rw=1, want=24465, limit=112 [ 2146.417982][ T7] attempt to access beyond end of device [ 2146.446379][ T7] loop2: rw=1, want=143, limit=112 [ 2146.466166][T27989] attempt to access beyond end of device [ 2146.472171][ T7] attempt to access beyond end of device [ 2146.488456][T27989] loop3: rw=1, want=28561, limit=112 [ 2146.498769][ T7] loop2: rw=1, want=144, limit=112 [ 2146.517737][ T7] attempt to access beyond end of device [ 2146.536368][ T7] loop2: rw=1, want=145, limit=112 [ 2146.546098][T27989] attempt to access beyond end of device [ 2146.563469][T27989] loop3: rw=1, want=32657, limit=112 [ 2146.577075][ T7] attempt to access beyond end of device [ 2146.592720][T27989] attempt to access beyond end of device 17:12:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2146.599673][ T7] loop2: rw=1, want=4241, limit=112 [ 2146.610978][T27989] loop3: rw=1, want=32801, limit=112 [ 2146.657858][ T7] attempt to access beyond end of device [ 2146.691667][ T7] loop2: rw=1, want=8337, limit=112 [ 2146.723595][ T7] attempt to access beyond end of device [ 2146.750905][ T7] loop2: rw=1, want=8345, limit=112 [ 2146.773716][ T7] attempt to access beyond end of device [ 2146.786186][ T7] loop2: rw=1, want=8374, limit=112 [ 2146.798295][ T7] attempt to access beyond end of device [ 2146.809730][ T7] loop2: rw=1, want=8375, limit=112 [ 2146.839234][ T7] attempt to access beyond end of device [ 2146.858515][ T7] loop2: rw=1, want=8376, limit=112 [ 2146.873511][ T7] attempt to access beyond end of device [ 2146.887666][ T7] loop2: rw=1, want=8377, limit=112 [ 2146.900036][ T7] attempt to access beyond end of device [ 2146.933795][ T7] loop2: rw=1, want=8398, limit=112 [ 2146.953568][ T7] attempt to access beyond end of device [ 2146.966228][ T7] loop2: rw=1, want=8399, limit=112 [ 2146.977514][ T7] attempt to access beyond end of device [ 2146.990333][ T7] loop2: rw=1, want=8400, limit=112 [ 2147.013526][ T7] attempt to access beyond end of device [ 2147.057913][ T7] loop2: rw=1, want=8401, limit=112 [ 2147.101953][ T7] attempt to access beyond end of device [ 2147.165544][ T7] loop2: rw=1, want=8450, limit=112 [ 2147.206803][ T7] attempt to access beyond end of device [ 2147.212555][ T7] loop2: rw=1, want=8451, limit=112 [ 2147.217802][ T7] attempt to access beyond end of device [ 2147.223553][ T7] loop2: rw=1, want=8452, limit=112 [ 2147.228802][ T7] attempt to access beyond end of device [ 2147.241147][ T7] loop2: rw=1, want=8453, limit=112 [ 2147.246487][ T7] attempt to access beyond end of device [ 2147.252178][ T7] loop2: rw=1, want=8462, limit=112 [ 2147.257445][ T7] attempt to access beyond end of device [ 2147.263225][ T7] loop2: rw=1, want=8463, limit=112 [ 2147.268502][ T7] attempt to access beyond end of device [ 2147.274538][ T7] loop2: rw=1, want=8464, limit=112 [ 2147.279812][ T7] attempt to access beyond end of device [ 2147.321822][ T7] loop2: rw=1, want=8465, limit=112 [ 2147.353749][ T7] attempt to access beyond end of device [ 2147.359406][ T7] loop2: rw=1, want=12561, limit=112 [ 2147.401589][ T7] attempt to access beyond end of device [ 2147.441814][ T7] loop2: rw=1, want=16657, limit=112 [ 2147.477002][ T7] attempt to access beyond end of device [ 2147.521869][ T7] loop2: rw=1, want=20753, limit=112 [ 2147.564514][ T7] attempt to access beyond end of device [ 2147.570185][ T7] loop2: rw=1, want=23169, limit=112 17:12:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd201}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:12:47 executing program 3: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:12:48 executing program 4: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c6", 0x8d) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:12:48 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2149.222413][ T7] attempt to access beyond end of device [ 2149.230440][ T7] loop4: rw=1, want=130, limit=112 [ 2149.231114][T28929] attempt to access beyond end of device [ 2149.249412][ T7] buffer_io_error: 63 callbacks suppressed [ 2149.249437][ T7] Buffer I/O error on dev loop4, logical block 129, lost async page write [ 2149.266957][T28929] loop1: rw=1, want=130, limit=112 [ 2149.292740][T28929] Buffer I/O error on dev loop1, logical block 129, lost async page write [ 2150.344235][ T7] attempt to access beyond end of device [ 2150.351264][ T7] loop4: rw=1, want=131, limit=112 [ 2150.377937][T28929] attempt to access beyond end of device [ 2150.386736][ T7] Buffer I/O error on dev loop4, logical block 130, lost async page write 17:12:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) read(r1, &(0x7f0000001840)=""/44, 0x2c) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200400}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x20, r2, 0x501, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa00000}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4000044) [ 2150.417345][T28929] loop1: rw=1, want=131, limit=112 [ 2150.576823][ T7] attempt to access beyond end of device [ 2150.582684][ T7] loop4: rw=1, want=132, limit=112 [ 2150.587882][ T7] Buffer I/O error on dev loop4, logical block 131, lost async page write [ 2150.606899][ T7] attempt to access beyond end of device 17:12:49 executing program 2: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2150.652195][T28929] Buffer I/O error on dev loop1, logical block 130, lost async page write [ 2150.653027][ T7] loop4: rw=1, want=133, limit=112 [ 2150.673294][ T7] Buffer I/O error on dev loop4, logical block 132, lost async page write [ 2150.689601][T10586] attempt to access beyond end of device [ 2150.695460][T28929] attempt to access beyond end of device 17:12:49 executing program 3: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x3) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2150.698625][T10586] loop2: rw=1, want=130, limit=112 [ 2150.707120][ T7] attempt to access beyond end of device [ 2150.713297][ T7] loop4: rw=1, want=142, limit=112 [ 2150.718676][T10586] Buffer I/O error on dev loop2, logical block 129, lost async page write [ 2150.729990][T28929] loop1: rw=1, want=132, limit=112 [ 2150.740042][ T3096] attempt to access beyond end of device [ 2150.749437][T28929] Buffer I/O error on dev loop1, logical block 131, lost async page write [ 2150.753554][ T3096] loop3: rw=1, want=130, limit=112 [ 2150.767510][ T7] Buffer I/O error on dev loop4, logical block 141, lost async page write [ 2150.783155][T10586] attempt to access beyond end of device [ 2150.789740][T28929] attempt to access beyond end of device 17:12:49 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) clone(0x2102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clone(0xee7c3932fb900146, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) [ 2150.792287][ T3096] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 2150.804452][ T7] attempt to access beyond end of device [ 2150.810265][T10586] loop2: rw=1, want=131, limit=112 [ 2150.815335][T28929] loop1: rw=1, want=133, limit=112 [ 2150.816024][ T7] loop4: rw=1, want=143, limit=112 [ 2150.833115][T28929] attempt to access beyond end of device [ 2150.838024][T10586] attempt to access beyond end of device [ 2150.845287][ T3096] attempt to access beyond end of device 17:12:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2150.851159][T10586] loop2: rw=1, want=132, limit=112 [ 2150.854644][T28929] loop1: rw=1, want=142, limit=112 [ 2150.856881][ T7] attempt to access beyond end of device [ 2150.871175][ T3096] loop3: rw=1, want=131, limit=112 [ 2150.871655][T28929] attempt to access beyond end of device [ 2150.876951][T10586] attempt to access beyond end of device [ 2150.888826][ T3096] attempt to access beyond end of device [ 2150.903393][ T5248] IPVS: ftp: loaded support on port[0] = 21 [ 2150.909511][T10586] loop2: rw=1, want=133, limit=112 [ 2150.918839][ T7] loop4: rw=1, want=144, limit=112 [ 2150.921865][T28929] loop1: rw=1, want=143, limit=112 [ 2150.926639][ T3096] loop3: rw=1, want=132, limit=112 [ 2150.932806][T28929] attempt to access beyond end of device [ 2150.937927][T10586] attempt to access beyond end of device [ 2150.949870][ T7] attempt to access beyond end of device [ 2150.955972][T28929] loop1: rw=1, want=144, limit=112 [ 2150.962804][ T3096] attempt to access beyond end of device [ 2150.970953][T10586] loop2: rw=1, want=142, limit=112 [ 2150.975051][T28929] attempt to access beyond end of device [ 2150.976950][ T7] loop4: rw=1, want=145, limit=112 [ 2150.994492][ T3096] loop3: rw=1, want=133, limit=112 [ 2150.996969][T28929] loop1: rw=1, want=145, limit=112 [ 2151.005449][T10586] attempt to access beyond end of device [ 2151.017403][ T3096] attempt to access beyond end of device [ 2151.027135][T10586] loop2: rw=1, want=143, limit=112 [ 2151.034327][ T7] attempt to access beyond end of device [ 2151.037389][T28929] attempt to access beyond end of device [ 2151.047023][ T3096] loop3: rw=1, want=142, limit=112 [ 2151.052858][T10586] attempt to access beyond end of device [ 2151.059821][ T7] loop4: rw=1, want=4241, limit=112 [ 2151.070029][T10586] loop2: rw=1, want=144, limit=112 [ 2151.077980][ T3096] attempt to access beyond end of device [ 2151.087344][T28929] loop1: rw=1, want=3033, limit=112 [ 2151.093950][T10586] attempt to access beyond end of device [ 2151.097280][ T3096] loop3: rw=1, want=143, limit=112 [ 2151.113484][T10586] loop2: rw=1, want=145, limit=112 [ 2151.121545][ T7] attempt to access beyond end of device [ 2151.129225][T28929] attempt to access beyond end of device [ 2151.144883][ T7] loop4: rw=1, want=8337, limit=112 [ 2151.145757][ T3096] attempt to access beyond end of device [ 2151.152694][T28929] loop1: rw=1, want=3062, limit=112 [ 2151.166380][T10586] attempt to access beyond end of device [ 2151.183721][T28929] attempt to access beyond end of device [ 2151.183941][ T3096] loop3: rw=1, want=144, limit=112 [ 2151.195438][T28929] loop1: rw=1, want=3063, limit=112 17:12:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2151.202204][T10586] loop2: rw=1, want=4241, limit=112 [ 2151.215338][ T7] attempt to access beyond end of device [ 2151.220098][ T3096] attempt to access beyond end of device [ 2151.221234][T28929] attempt to access beyond end of device [ 2151.241548][ T7] loop4: rw=1, want=12433, limit=112 [ 2151.253657][T10586] attempt to access beyond end of device [ 2151.260585][T28929] loop1: rw=1, want=3064, limit=112 [ 2151.261275][ T3096] loop3: rw=1, want=145, limit=112 [ 2151.276557][T28929] attempt to access beyond end of device [ 2151.283546][ T5256] IPVS: ftp: loaded support on port[0] = 21 [ 2151.287705][ T7] attempt to access beyond end of device [ 2151.298172][T10586] loop2: rw=1, want=8337, limit=112 [ 2151.305885][T28929] loop1: rw=1, want=3065, limit=112 [ 2151.311228][ T3096] attempt to access beyond end of device [ 2151.319399][T28929] attempt to access beyond end of device [ 2151.330775][ T7] loop4: rw=1, want=16529, limit=112 [ 2151.340796][ T3096] loop3: rw=1, want=4241, limit=112 [ 2151.345820][T28929] loop1: rw=1, want=3086, limit=112 [ 2151.355701][T10586] attempt to access beyond end of device [ 2151.368798][ T7] attempt to access beyond end of device [ 2151.377266][T28929] attempt to access beyond end of device [ 2151.386637][T10586] loop2: rw=1, want=12433, limit=112 [ 2151.399925][ T7] loop4: rw=1, want=16537, limit=112 [ 2151.407085][T28929] loop1: rw=1, want=3087, limit=112 [ 2151.414181][ T3096] attempt to access beyond end of device [ 2151.423683][ T7] attempt to access beyond end of device [ 2151.430647][T28929] attempt to access beyond end of device [ 2151.439278][ T3096] loop3: rw=1, want=8337, limit=112 [ 2151.449305][ T7] loop4: rw=1, want=16566, limit=112 [ 2151.455976][T28929] loop1: rw=1, want=3088, limit=112 [ 2151.462323][T10586] attempt to access beyond end of device [ 2151.468173][ T7] attempt to access beyond end of device [ 2151.474506][T28929] attempt to access beyond end of device [ 2151.480288][T10586] loop2: rw=1, want=16529, limit=112 [ 2151.486397][ T7] loop4: rw=1, want=16567, limit=112 [ 2151.492273][T28929] loop1: rw=1, want=3089, limit=112 [ 2151.502289][ T7] attempt to access beyond end of device [ 2151.509291][T28929] attempt to access beyond end of device [ 2151.521158][ T7] loop4: rw=1, want=16568, limit=112 [ 2151.524094][ T3096] attempt to access beyond end of device [ 2151.527066][T28929] loop1: rw=1, want=3138, limit=112 [ 2151.538244][T10586] attempt to access beyond end of device [ 2151.544692][ T7] attempt to access beyond end of device [ 2151.550534][T28929] attempt to access beyond end of device [ 2151.556867][T10586] loop2: rw=1, want=20625, limit=112 [ 2151.563874][ T7] loop4: rw=1, want=16569, limit=112 [ 2151.569452][T28929] loop1: rw=1, want=3139, limit=112 [ 2151.576320][ T3096] loop3: rw=1, want=12433, limit=112 [ 2151.586431][ T7] attempt to access beyond end of device [ 2151.593544][T28929] attempt to access beyond end of device [ 2151.610098][T10586] attempt to access beyond end of device [ 2151.617097][ T7] loop4: rw=1, want=16590, limit=112 [ 2151.617147][ T7] attempt to access beyond end of device [ 2151.617155][ T7] loop4: rw=1, want=16591, limit=112 [ 2151.617182][ T7] attempt to access beyond end of device [ 2151.617190][ T7] loop4: rw=1, want=16592, limit=112 [ 2151.617220][ T7] attempt to access beyond end of device [ 2151.640280][T28929] loop1: rw=1, want=3140, limit=112 17:12:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfee00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2151.661673][ T3096] attempt to access beyond end of device [ 2151.667520][ T3096] loop3: rw=1, want=16529, limit=112 [ 2151.673628][T28929] attempt to access beyond end of device [ 2151.675354][T10586] loop2: rw=1, want=24721, limit=112 [ 2151.679526][ T7] loop4: rw=1, want=16593, limit=112 [ 2151.701168][T28929] loop1: rw=1, want=3141, limit=112 [ 2151.709163][ T7] attempt to access beyond end of device [ 2151.718811][ T3096] attempt to access beyond end of device [ 2151.725321][T28929] attempt to access beyond end of device [ 2151.733646][ T7] loop4: rw=1, want=16642, limit=112 [ 2151.742704][ T3096] loop3: rw=1, want=20625, limit=112 [ 2151.748154][T28929] loop1: rw=1, want=3150, limit=112 [ 2151.754423][ T7] attempt to access beyond end of device [ 2151.761408][T28929] attempt to access beyond end of device [ 2151.771901][ T7] loop4: rw=1, want=16643, limit=112 [ 2151.777906][T10586] attempt to access beyond end of device [ 2151.788398][T28929] loop1: rw=1, want=3151, limit=112 [ 2151.798263][T10586] loop2: rw=1, want=28817, limit=112 [ 2151.799885][ T7] attempt to access beyond end of device [ 2151.810938][ T3096] attempt to access beyond end of device [ 2151.823771][T28929] attempt to access beyond end of device [ 2151.829931][ T7] loop4: rw=1, want=16644, limit=112 [ 2151.838904][ T3096] loop3: rw=1, want=24721, limit=112 [ 2151.846171][T28929] loop1: rw=1, want=3152, limit=112 [ 2151.851542][ T7] attempt to access beyond end of device [ 2151.864594][T10586] attempt to access beyond end of device [ 2151.865669][T28929] attempt to access beyond end of device [ 2151.879579][ T7] loop4: rw=1, want=16645, limit=112 [ 2151.885067][T10586] loop2: rw=1, want=32889, limit=112 [ 2151.897104][ T7] attempt to access beyond end of device [ 2151.908560][ T3096] attempt to access beyond end of device [ 2151.909369][T28929] loop1: rw=1, want=3153, limit=112 [ 2151.919613][ T7] loop4: rw=1, want=16654, limit=112 [ 2151.927439][ T3096] loop3: rw=1, want=28817, limit=112 [ 2151.937518][ T7] attempt to access beyond end of device [ 2151.957771][ T7] loop4: rw=1, want=16655, limit=112 [ 2151.979677][ T7] attempt to access beyond end of device [ 2151.987348][ T3096] attempt to access beyond end of device [ 2151.997829][T28929] attempt to access beyond end of device [ 2152.008751][ T7] loop4: rw=1, want=16656, limit=112 [ 2152.014737][ T3096] loop3: rw=1, want=32889, limit=112 [ 2152.022571][T28929] loop1: rw=1, want=7249, limit=112 [ 2152.031533][ T7] attempt to access beyond end of device [ 2152.054550][ T7] loop4: rw=1, want=16657, limit=112 [ 2152.063756][T28929] attempt to access beyond end of device [ 2152.075376][T28929] loop1: rw=1, want=8569, limit=112 17:12:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2152.116183][ T7] attempt to access beyond end of device [ 2152.175615][ T7] loop4: rw=1, want=20753, limit=112 [ 2152.232609][ T7] attempt to access beyond end of device [ 2152.254082][ T7] loop4: rw=1, want=22617, limit=112 17:12:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:12:52 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2153.329549][ T7] attempt to access beyond end of device [ 2153.341842][ T7] loop1: rw=1, want=130, limit=112 [ 2153.377881][ T7] attempt to access beyond end of device [ 2153.392596][ T7] loop1: rw=1, want=131, limit=112 [ 2153.397742][ T7] attempt to access beyond end of device [ 2153.438523][ T7] loop1: rw=1, want=132, limit=112 [ 2153.461875][ T7] attempt to access beyond end of device [ 2153.467517][ T7] loop1: rw=1, want=133, limit=112 [ 2153.504229][ T7] attempt to access beyond end of device [ 2153.527115][ T7] loop1: rw=1, want=142, limit=112 [ 2153.741879][ T7] attempt to access beyond end of device [ 2153.781908][ T7] loop1: rw=1, want=143, limit=112 [ 2153.842935][ T7] attempt to access beyond end of device [ 2153.889988][ T7] loop1: rw=1, want=144, limit=112 [ 2153.935419][ T7] attempt to access beyond end of device [ 2154.641795][ T7] loop1: rw=1, want=145, limit=112 [ 2154.646953][ T7] buffer_io_error: 61 callbacks suppressed [ 2154.646963][ T7] Buffer I/O error on dev loop1, logical block 144, lost async page write [ 2154.767499][ T7] attempt to access beyond end of device [ 2154.868941][ T7] loop1: rw=1, want=4241, limit=112 [ 2154.884186][ T7] attempt to access beyond end of device [ 2154.889831][ T7] loop1: rw=1, want=8337, limit=112 [ 2155.010313][T28929] attempt to access beyond end of device [ 2155.022564][ T7] attempt to access beyond end of device [ 2155.028424][ T7] loop1: rw=1, want=12433, limit=112 [ 2155.053607][T28929] loop2: rw=1, want=130, limit=112 [ 2155.062256][ T7] attempt to access beyond end of device [ 2155.067905][ T7] loop1: rw=1, want=15577, limit=112 [ 2155.084253][ T7] attempt to access beyond end of device [ 2155.089907][ T7] loop1: rw=1, want=15606, limit=112 [ 2155.111838][ T7] Buffer I/O error on dev loop1, logical block 15605, lost async page write [ 2155.120696][ T7] attempt to access beyond end of device [ 2155.141776][ T7] loop1: rw=1, want=15607, limit=112 [ 2155.147124][ T7] Buffer I/O error on dev loop1, logical block 15606, lost async page write [ 2155.191877][T28929] Buffer I/O error on dev loop2, logical block 129, lost async page write [ 2155.200451][T28929] attempt to access beyond end of device 17:12:54 executing program 4: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:12:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:12:54 executing program 2: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2155.241209][ T7] attempt to access beyond end of device [ 2155.262549][T28929] loop2: rw=1, want=131, limit=112 [ 2155.289733][ T3096] attempt to access beyond end of device [ 2155.307137][ T7] loop1: rw=1, want=15608, limit=112 [ 2155.334116][ T3096] loop4: rw=1, want=130, limit=112 [ 2155.343366][T28929] Buffer I/O error on dev loop2, logical block 130, lost async page write [ 2155.393162][ T7] Buffer I/O error on dev loop1, logical block 15607, lost async page write [ 2155.418945][ T3096] Buffer I/O error on dev loop4, logical block 129, lost async page write [ 2155.473794][T28929] attempt to access beyond end of device [ 2155.519158][ T7] attempt to access beyond end of device [ 2155.539315][ T3096] attempt to access beyond end of device [ 2155.563167][T28929] loop2: rw=1, want=132, limit=112 [ 2155.610380][ T7] loop1: rw=1, want=15609, limit=112 [ 2155.619532][ T3096] loop4: rw=1, want=131, limit=112 [ 2155.633921][T28929] Buffer I/O error on dev loop2, logical block 131, lost async page write [ 2155.665899][ T7] Buffer I/O error on dev loop1, logical block 15608, lost async page write [ 2155.699347][ T3096] Buffer I/O error on dev loop4, logical block 130, lost async page write [ 2155.731951][T28929] attempt to access beyond end of device [ 2155.761062][ T7] attempt to access beyond end of device [ 2155.772081][ T3096] attempt to access beyond end of device 17:12:54 executing program 3: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x3) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2155.777731][ T3096] loop4: rw=1, want=132, limit=112 [ 2155.782952][ T3096] attempt to access beyond end of device [ 2155.788592][ T3096] loop4: rw=1, want=133, limit=112 [ 2155.793823][ T3096] attempt to access beyond end of device [ 2155.797948][T28929] loop2: rw=1, want=133, limit=112 [ 2155.799477][ T3096] loop4: rw=1, want=142, limit=112 [ 2155.799528][ T3096] attempt to access beyond end of device [ 2155.817615][ T7] loop1: rw=1, want=15630, limit=112 [ 2155.834839][T28929] attempt to access beyond end of device [ 2155.844447][T10586] attempt to access beyond end of device [ 2155.850134][T10586] loop3: rw=1, want=130, limit=112 [ 2155.851777][ T3096] loop4: rw=1, want=143, limit=112 [ 2155.860483][ T3096] attempt to access beyond end of device [ 2155.861439][ T7] attempt to access beyond end of device [ 2155.878897][T28929] loop2: rw=1, want=142, limit=112 17:12:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2155.889958][ T3096] loop4: rw=1, want=144, limit=112 [ 2155.891840][T10586] attempt to access beyond end of device [ 2155.900721][T10586] loop3: rw=1, want=131, limit=112 [ 2155.900943][T28929] attempt to access beyond end of device [ 2155.907017][ T7] loop1: rw=1, want=15631, limit=112 [ 2155.937353][ T3096] attempt to access beyond end of device [ 2155.943910][T28929] loop2: rw=1, want=143, limit=112 [ 2155.947594][T10586] attempt to access beyond end of device [ 2155.949076][T28929] attempt to access beyond end of device [ 2155.955938][ T7] attempt to access beyond end of device [ 2155.971911][ T3096] loop4: rw=1, want=145, limit=112 [ 2155.981136][T10586] loop3: rw=1, want=132, limit=112 [ 2155.988631][T28929] loop2: rw=1, want=144, limit=112 [ 2156.003990][ T3096] attempt to access beyond end of device [ 2156.011594][ T7] loop1: rw=1, want=15632, limit=112 [ 2156.013447][T28929] attempt to access beyond end of device [ 2156.016984][T10586] attempt to access beyond end of device [ 2156.031880][ T3096] loop4: rw=1, want=4241, limit=112 [ 2156.040536][T28929] loop2: rw=1, want=145, limit=112 [ 2156.041808][ T7] attempt to access beyond end of device [ 2156.063250][T10586] loop3: rw=1, want=133, limit=112 [ 2156.063529][T28929] attempt to access beyond end of device [ 2156.068404][T10586] attempt to access beyond end of device [ 2156.085232][ T3096] attempt to access beyond end of device [ 2156.091794][ T7] loop1: rw=1, want=15633, limit=112 [ 2156.097185][ T7] attempt to access beyond end of device [ 2156.102333][ T3096] loop4: rw=1, want=8337, limit=112 [ 2156.109274][T28929] loop2: rw=1, want=1817, limit=112 [ 2156.111794][T10586] loop3: rw=1, want=142, limit=112 [ 2156.120195][T10586] attempt to access beyond end of device [ 2156.130417][T28929] attempt to access beyond end of device [ 2156.131779][ T7] loop1: rw=1, want=15682, limit=112 [ 2156.142465][ T7] attempt to access beyond end of device [ 2156.148139][ T7] loop1: rw=1, want=15683, limit=112 [ 2156.171900][T10586] loop3: rw=1, want=143, limit=112 [ 2156.174264][T28929] loop2: rw=1, want=1846, limit=112 [ 2156.177067][T10586] attempt to access beyond end of device [ 2156.189412][ T3096] attempt to access beyond end of device [ 2156.202515][ T7] attempt to access beyond end of device [ 2156.208158][ T7] loop1: rw=1, want=15684, limit=112 [ 2156.209313][T28929] attempt to access beyond end of device [ 2156.220358][ T3096] loop4: rw=1, want=12433, limit=112 [ 2156.221782][T10586] loop3: rw=1, want=144, limit=112 [ 2156.232245][T10586] attempt to access beyond end of device [ 2156.237916][T10586] loop3: rw=1, want=145, limit=112 [ 2156.255107][T28929] loop2: rw=1, want=1847, limit=112 [ 2156.262182][ T7] attempt to access beyond end of device [ 2156.267823][ T7] loop1: rw=1, want=15685, limit=112 [ 2156.284610][T28929] attempt to access beyond end of device [ 2156.287723][T10586] attempt to access beyond end of device [ 2156.301824][ T7] attempt to access beyond end of device [ 2156.307473][ T7] loop1: rw=1, want=15694, limit=112 [ 2156.312179][ T3096] attempt to access beyond end of device [ 2156.321809][T28929] loop2: rw=1, want=1848, limit=112 [ 2156.328100][T10586] loop3: rw=1, want=4241, limit=112 [ 2156.339419][T28929] attempt to access beyond end of device [ 2156.341827][ T7] attempt to access beyond end of device [ 2156.345279][ T3096] loop4: rw=1, want=16529, limit=112 [ 2156.369604][T10586] attempt to access beyond end of device [ 2156.369755][T28929] loop2: rw=1, want=1849, limit=112 [ 2156.375940][ T7] loop1: rw=1, want=15695, limit=112 [ 2156.393156][T28929] attempt to access beyond end of device [ 2156.407523][ T7] attempt to access beyond end of device [ 2156.418141][T28929] loop2: rw=1, want=1870, limit=112 [ 2156.421801][T10586] loop3: rw=1, want=8337, limit=112 [ 2156.434932][ T3096] attempt to access beyond end of device [ 2156.440600][ T3096] loop4: rw=1, want=20625, limit=112 [ 2156.442346][ T7] loop1: rw=1, want=15696, limit=112 [ 2156.451253][ T7] attempt to access beyond end of device [ 2156.461917][T28929] attempt to access beyond end of device [ 2156.467597][T28929] loop2: rw=1, want=1871, limit=112 [ 2156.486830][T10586] attempt to access beyond end of device [ 2156.502286][T28929] attempt to access beyond end of device [ 2156.507941][T28929] loop2: rw=1, want=1872, limit=112 [ 2156.521824][ T7] loop1: rw=1, want=15697, limit=112 [ 2156.522080][ T3096] attempt to access beyond end of device [ 2156.532215][T10586] loop3: rw=1, want=12433, limit=112 [ 2156.551458][ T7] attempt to access beyond end of device [ 2156.557239][T28929] attempt to access beyond end of device [ 2156.567957][T10586] attempt to access beyond end of device [ 2156.571876][ T3096] loop4: rw=1, want=24721, limit=112 [ 2156.582162][T28929] loop2: rw=1, want=1873, limit=112 [ 2156.587459][T28929] attempt to access beyond end of device [ 2156.593598][ T7] loop1: rw=1, want=19793, limit=112 [ 2156.602123][T10586] loop3: rw=1, want=14809, limit=112 [ 2156.609579][T10586] attempt to access beyond end of device [ 2156.618759][ T3096] attempt to access beyond end of device [ 2156.627356][ T7] attempt to access beyond end of device [ 2156.633276][T28929] loop2: rw=1, want=1922, limit=112 [ 2156.638530][T28929] attempt to access beyond end of device [ 2156.651815][T10586] loop3: rw=1, want=14838, limit=112 [ 2156.657176][T10586] attempt to access beyond end of device [ 2156.661867][ T3096] loop4: rw=1, want=28817, limit=112 [ 2156.671623][ T7] loop1: rw=1, want=22953, limit=112 [ 2156.677306][T28929] loop2: rw=1, want=1923, limit=112 [ 2156.686147][T28929] attempt to access beyond end of device [ 2156.696611][T10586] loop3: rw=1, want=14839, limit=112 [ 2156.708760][ T3096] attempt to access beyond end of device [ 2156.716374][T28929] loop2: rw=1, want=1924, limit=112 [ 2156.721633][T28929] attempt to access beyond end of device [ 2156.727877][T10586] attempt to access beyond end of device [ 2156.749913][T10586] loop3: rw=1, want=14840, limit=112 [ 2156.751922][ T3096] loop4: rw=1, want=32057, limit=112 [ 2156.761898][T28929] loop2: rw=1, want=1925, limit=112 [ 2156.778747][T28929] attempt to access beyond end of device [ 2156.784558][T10586] attempt to access beyond end of device [ 2156.790186][T10586] loop3: rw=1, want=14841, limit=112 [ 2156.811938][T28929] loop2: rw=1, want=1934, limit=112 [ 2156.817249][T28929] attempt to access beyond end of device [ 2156.831578][T10586] attempt to access beyond end of device [ 2156.851852][T28929] loop2: rw=1, want=1935, limit=112 [ 2156.857135][T28929] attempt to access beyond end of device [ 2156.863437][T10586] loop3: rw=1, want=14862, limit=112 [ 2156.868765][T10586] attempt to access beyond end of device [ 2156.900842][T28929] loop2: rw=1, want=1936, limit=112 [ 2156.906539][T10586] loop3: rw=1, want=14863, limit=112 [ 2156.912280][T28929] attempt to access beyond end of device [ 2156.917924][T28929] loop2: rw=1, want=1937, limit=112 [ 2156.923705][T10586] attempt to access beyond end of device [ 2156.929361][T10586] loop3: rw=1, want=14864, limit=112 [ 2156.971958][T10586] attempt to access beyond end of device [ 2156.977640][T10586] loop3: rw=1, want=14865, limit=112 [ 2157.001372][T28929] attempt to access beyond end of device [ 2157.011967][T10586] attempt to access beyond end of device [ 2157.017616][T10586] loop3: rw=1, want=14914, limit=112 [ 2157.031780][T28929] loop2: rw=1, want=6033, limit=112 [ 2157.060440][T10586] attempt to access beyond end of device [ 2157.071488][T28929] attempt to access beyond end of device [ 2157.082894][T10586] loop3: rw=1, want=14915, limit=112 [ 2157.088262][T10586] attempt to access beyond end of device [ 2157.111477][T28929] loop2: rw=1, want=10129, limit=112 [ 2157.131858][T10586] loop3: rw=1, want=14916, limit=112 [ 2157.137277][T10586] attempt to access beyond end of device [ 2157.171572][T28929] attempt to access beyond end of device [ 2157.181898][T10586] loop3: rw=1, want=14917, limit=112 [ 2157.187289][T10586] attempt to access beyond end of device [ 2157.198460][T28929] loop2: rw=1, want=14225, limit=112 [ 2157.230972][T28929] attempt to access beyond end of device [ 2157.236920][T10586] loop3: rw=1, want=14926, limit=112 [ 2157.261508][T10586] attempt to access beyond end of device [ 2157.281779][T10586] loop3: rw=1, want=14927, limit=112 [ 2157.287288][T10586] attempt to access beyond end of device [ 2157.301777][T28929] loop2: rw=1, want=18321, limit=112 [ 2157.328879][T10586] loop3: rw=1, want=14928, limit=112 [ 2157.339553][T28929] attempt to access beyond end of device [ 2157.351848][T10586] attempt to access beyond end of device [ 2157.357487][T10586] loop3: rw=1, want=14929, limit=112 [ 2157.389405][T28929] loop2: rw=1, want=22417, limit=112 [ 2157.400836][T10586] attempt to access beyond end of device [ 2157.421292][T28929] attempt to access beyond end of device [ 2157.451847][T10586] loop3: rw=1, want=19025, limit=112 [ 2157.490693][T28929] loop2: rw=1, want=26513, limit=112 [ 2157.494896][T10586] attempt to access beyond end of device [ 2157.501672][T10586] loop3: rw=1, want=21689, limit=112 [ 2157.525429][T28929] attempt to access beyond end of device [ 2157.531080][T28929] loop2: rw=1, want=30609, limit=112 [ 2157.584821][T28929] attempt to access beyond end of device [ 2157.590468][T28929] loop2: rw=1, want=32993, limit=112 [ 2159.466768][T10586] attempt to access beyond end of device [ 2159.501781][T10586] loop1: rw=1, want=130, limit=112 [ 2159.506945][T10586] attempt to access beyond end of device [ 2159.515313][T27989] attempt to access beyond end of device [ 2159.521031][T27989] loop4: rw=1, want=130, limit=112 [ 2159.541996][T10586] loop1: rw=1, want=131, limit=112 [ 2159.547149][T10586] attempt to access beyond end of device [ 2159.561813][T27989] attempt to access beyond end of device [ 2159.567450][T27989] loop4: rw=1, want=131, limit=112 [ 2159.581851][T10586] loop1: rw=1, want=132, limit=112 [ 2159.586999][T10586] attempt to access beyond end of device [ 2159.611917][T27989] attempt to access beyond end of device [ 2159.617556][T27989] loop4: rw=1, want=132, limit=112 [ 2159.628306][T10586] loop1: rw=1, want=133, limit=112 [ 2159.633840][T10586] attempt to access beyond end of device [ 2159.639484][T10586] loop1: rw=1, want=142, limit=112 [ 2159.651670][T27989] attempt to access beyond end of device [ 2159.673430][T27989] loop4: rw=1, want=133, limit=112 [ 2159.678645][T10586] buffer_io_error: 70 callbacks suppressed [ 2159.678656][T10586] Buffer I/O error on dev loop1, logical block 141, lost async page write [ 2159.693599][T27989] Buffer I/O error on dev loop4, logical block 132, lost async page write [ 2159.712463][T27989] attempt to access beyond end of device [ 2159.866728][T10586] attempt to access beyond end of device [ 2159.872807][T27989] loop4: rw=1, want=142, limit=112 [ 2159.937033][T10586] loop1: rw=1, want=143, limit=112 [ 2159.942587][T27989] Buffer I/O error on dev loop4, logical block 141, lost async page write [ 2159.951233][T27989] attempt to access beyond end of device [ 2159.961844][T10586] Buffer I/O error on dev loop1, logical block 142, lost async page write [ 2159.970423][T10586] attempt to access beyond end of device [ 2159.991795][T27989] loop4: rw=1, want=143, limit=112 [ 2159.996978][T27989] Buffer I/O error on dev loop4, logical block 142, lost async page write [ 2160.019714][T10586] loop1: rw=1, want=144, limit=112 [ 2160.049745][T27989] attempt to access beyond end of device [ 2160.055770][T10586] Buffer I/O error on dev loop1, logical block 143, lost async page write [ 2160.071858][T27989] loop4: rw=1, want=144, limit=112 [ 2160.076983][T27989] Buffer I/O error on dev loop4, logical block 143, lost async page write [ 2160.116509][T10586] attempt to access beyond end of device [ 2160.151879][T10586] loop1: rw=1, want=145, limit=112 [ 2160.157269][T10586] Buffer I/O error on dev loop1, logical block 144, lost async page write [ 2160.166171][T27989] attempt to access beyond end of device [ 2160.199487][T27989] loop4: rw=1, want=145, limit=112 [ 2160.211784][T27989] Buffer I/O error on dev loop4, logical block 144, lost async page write [ 2160.267441][T10586] attempt to access beyond end of device [ 2160.278803][T27989] attempt to access beyond end of device [ 2160.311810][T10586] loop1: rw=1, want=2841, limit=112 [ 2160.319208][T10586] attempt to access beyond end of device [ 2160.361773][T27989] loop4: rw=1, want=4241, limit=112 [ 2160.390696][T10586] loop1: rw=1, want=2870, limit=112 [ 2160.417194][T27989] attempt to access beyond end of device [ 2160.422939][T10586] Buffer I/O error on dev loop1, logical block 2869, lost async page write [ 2160.431575][T10586] attempt to access beyond end of device [ 2160.598683][T27989] loop4: rw=1, want=8337, limit=112 [ 2160.627024][T10586] loop1: rw=1, want=2871, limit=112 [ 2160.643031][ T3096] attempt to access beyond end of device [ 2160.644192][T10586] attempt to access beyond end of device [ 2160.648684][ T3096] loop3: rw=1, want=130, limit=112 [ 2160.662076][T27989] attempt to access beyond end of device [ 2160.667754][T27989] loop4: rw=1, want=8345, limit=112 [ 2160.671766][T10586] loop1: rw=1, want=2872, limit=112 [ 2160.679070][T10586] attempt to access beyond end of device [ 2160.691933][ T3096] attempt to access beyond end of device [ 2160.697584][ T3096] loop3: rw=1, want=131, limit=112 [ 2160.708037][T27989] attempt to access beyond end of device [ 2160.708230][T10586] loop1: rw=1, want=2873, limit=112 [ 2160.722392][T27989] loop4: rw=1, want=8374, limit=112 [ 2160.731171][ T3096] attempt to access beyond end of device [ 2160.740493][T27989] attempt to access beyond end of device [ 2160.742100][T10586] attempt to access beyond end of device [ 2160.751899][ T3096] loop3: rw=1, want=132, limit=112 [ 2160.760815][T27989] loop4: rw=1, want=8375, limit=112 [ 2160.769946][ T3096] attempt to access beyond end of device [ 2160.774019][T10586] loop1: rw=1, want=2894, limit=112 [ 2160.779288][T27989] attempt to access beyond end of device [ 2160.788903][T10586] attempt to access beyond end of device [ 2160.790115][ T3096] loop3: rw=1, want=133, limit=112 [ 2160.811277][T27989] loop4: rw=1, want=8376, limit=112 [ 2160.816752][ T3096] attempt to access beyond end of device [ 2160.828295][T27989] attempt to access beyond end of device [ 2160.834163][ T3096] loop3: rw=1, want=142, limit=112 [ 2160.845082][T27989] loop4: rw=1, want=8377, limit=112 [ 2160.850459][ T3096] attempt to access beyond end of device [ 2160.876291][T27989] attempt to access beyond end of device [ 2160.884605][ T3096] loop3: rw=1, want=143, limit=112 [ 2160.902287][T27989] loop4: rw=1, want=8398, limit=112 [ 2160.907723][ T3096] attempt to access beyond end of device [ 2160.926242][T27989] attempt to access beyond end of device [ 2160.933208][ T3096] loop3: rw=1, want=144, limit=112 [ 2160.946544][T27989] loop4: rw=1, want=8399, limit=112 [ 2160.952039][ T3096] attempt to access beyond end of device [ 2160.963588][T27989] attempt to access beyond end of device [ 2160.970567][ T3096] loop3: rw=1, want=145, limit=112 [ 2160.981551][T27989] loop4: rw=1, want=8400, limit=112 [ 2160.998980][ T3096] attempt to access beyond end of device [ 2161.004919][T27989] attempt to access beyond end of device [ 2161.016472][T27989] loop4: rw=1, want=8401, limit=112 [ 2161.034751][ T3096] loop3: rw=1, want=3481, limit=112 [ 2161.042614][T10586] loop1: rw=1, want=2895, limit=112 [ 2161.063781][T27989] attempt to access beyond end of device [ 2161.078603][ T3096] attempt to access beyond end of device [ 2161.089180][T10586] attempt to access beyond end of device [ 2161.113659][T27989] loop4: rw=1, want=8450, limit=112 [ 2161.129444][T10586] loop1: rw=1, want=2896, limit=112 [ 2161.139559][ T3096] loop3: rw=1, want=3510, limit=112 [ 2161.155461][T27989] attempt to access beyond end of device [ 2161.170539][T10586] attempt to access beyond end of device [ 2161.180027][ T3096] attempt to access beyond end of device [ 2161.199813][T27989] loop4: rw=1, want=8451, limit=112 [ 2161.211840][T10586] loop1: rw=1, want=2897, limit=112 [ 2161.224236][ T3096] loop3: rw=1, want=3511, limit=112 [ 2161.239286][T27989] attempt to access beyond end of device [ 2161.255736][T10586] attempt to access beyond end of device [ 2161.266188][ T3096] attempt to access beyond end of device [ 2161.283130][T27989] loop4: rw=1, want=8452, limit=112 [ 2161.300557][T10586] loop1: rw=1, want=2946, limit=112 [ 2161.314231][ T3096] loop3: rw=1, want=3512, limit=112 [ 2161.326980][T27989] attempt to access beyond end of device [ 2161.340913][T10586] attempt to access beyond end of device [ 2161.354771][ T3096] attempt to access beyond end of device [ 2161.370977][T27989] loop4: rw=1, want=8453, limit=112 [ 2161.386990][T10586] loop1: rw=1, want=2947, limit=112 [ 2161.399438][ T3096] loop3: rw=1, want=3513, limit=112 [ 2161.411982][T27989] attempt to access beyond end of device [ 2161.427094][T10586] attempt to access beyond end of device [ 2161.442266][ T3096] attempt to access beyond end of device [ 2161.458479][T27989] loop4: rw=1, want=8462, limit=112 [ 2161.468627][T10586] loop1: rw=1, want=2948, limit=112 [ 2161.484687][ T3096] loop3: rw=1, want=3534, limit=112 [ 2161.497047][T27989] attempt to access beyond end of device [ 2161.509700][T10586] attempt to access beyond end of device [ 2161.526133][ T3096] attempt to access beyond end of device [ 2161.531884][ T3096] loop3: rw=1, want=3535, limit=112 [ 2161.537125][ T3096] attempt to access beyond end of device [ 2161.542860][ T3096] loop3: rw=1, want=3536, limit=112 [ 2161.548137][ T3096] attempt to access beyond end of device [ 2161.550554][T27989] loop4: rw=1, want=8463, limit=112 [ 2161.553825][ T3096] loop3: rw=1, want=3537, limit=112 [ 2161.553932][ T3096] attempt to access beyond end of device [ 2161.553943][ T3096] loop3: rw=1, want=3586, limit=112 [ 2161.553976][ T3096] attempt to access beyond end of device [ 2161.571020][T10586] loop1: rw=1, want=2949, limit=112 [ 2161.576517][ T3096] loop3: rw=1, want=3587, limit=112 [ 2161.591565][ T3096] attempt to access beyond end of device [ 2161.595732][T27989] attempt to access beyond end of device [ 2161.597325][ T3096] loop3: rw=1, want=3588, limit=112 [ 2161.608132][ T3096] attempt to access beyond end of device [ 2161.613892][ T3096] loop3: rw=1, want=3589, limit=112 [ 2161.614732][T10586] attempt to access beyond end of device [ 2161.619134][ T3096] attempt to access beyond end of device [ 2161.630466][ T3096] loop3: rw=1, want=3598, limit=112 [ 2161.637611][ T3096] attempt to access beyond end of device [ 2161.643372][ T3096] loop3: rw=1, want=3599, limit=112 [ 2161.645452][ T7] attempt to access beyond end of device [ 2161.648616][ T3096] attempt to access beyond end of device [ 2161.661035][ T3096] loop3: rw=1, want=3600, limit=112 [ 2161.666412][ T3096] attempt to access beyond end of device [ 2161.672161][T27989] loop4: rw=1, want=8464, limit=112 [ 2161.677427][T27989] attempt to access beyond end of device [ 2161.683213][ T7] loop2: rw=1, want=130, limit=112 [ 2161.688377][ T7] attempt to access beyond end of device [ 2161.694130][T10586] loop1: rw=1, want=2958, limit=112 [ 2161.699491][ T3096] loop3: rw=1, want=3601, limit=112 [ 2161.704893][T10586] attempt to access beyond end of device [ 2161.710570][T10586] loop1: rw=1, want=2959, limit=112 [ 2161.715855][T27989] loop4: rw=1, want=8465, limit=112 [ 2161.728456][ T3096] attempt to access beyond end of device [ 2161.734181][ T7] loop2: rw=1, want=131, limit=112 [ 2161.739331][ T7] attempt to access beyond end of device [ 2161.750910][T27989] attempt to access beyond end of device [ 2161.756694][T10586] attempt to access beyond end of device [ 2161.763315][ T3096] loop3: rw=1, want=7601, limit=112 [ 2161.773077][ T7] loop2: rw=1, want=132, limit=112 [ 2161.778239][ T7] attempt to access beyond end of device [ 2161.799696][T10586] loop1: rw=1, want=2960, limit=112 [ 2161.811945][T27989] loop4: rw=1, want=12561, limit=112 [ 2161.822002][T10586] attempt to access beyond end of device [ 2161.827644][T10586] loop1: rw=1, want=2961, limit=112 [ 2161.847125][T27989] attempt to access beyond end of device [ 2161.851962][ T7] loop2: rw=1, want=133, limit=112 [ 2161.858015][ T7] attempt to access beyond end of device [ 2161.867968][T10586] attempt to access beyond end of device [ 2161.873813][T27989] loop4: rw=1, want=16657, limit=112 [ 2161.897638][ T7] loop2: rw=1, want=142, limit=112 [ 2161.901822][T10586] loop1: rw=1, want=7057, limit=112 [ 2161.920230][T27989] attempt to access beyond end of device [ 2161.920262][ T7] attempt to access beyond end of device [ 2161.947889][T10586] attempt to access beyond end of device [ 2161.950286][ T7] loop2: rw=1, want=143, limit=112 [ 2161.961783][T27989] loop4: rw=1, want=20753, limit=112 [ 2161.965805][ T7] attempt to access beyond end of device [ 2161.978299][T10586] loop1: rw=1, want=11153, limit=112 [ 2161.988085][T27989] attempt to access beyond end of device [ 2161.993870][ T7] loop2: rw=1, want=144, limit=112 [ 2162.009727][T10586] attempt to access beyond end of device [ 2162.015492][T27989] loop4: rw=1, want=24849, limit=112 [ 2162.030160][T27989] attempt to access beyond end of device [ 2162.035908][T10586] loop1: rw=1, want=15249, limit=112 [ 2162.035984][ T7] attempt to access beyond end of device [ 2162.063592][T27989] loop4: rw=1, want=28945, limit=112 [ 2162.072658][T10586] attempt to access beyond end of device [ 2162.078300][T10586] loop1: rw=1, want=19345, limit=112 [ 2162.089829][T27989] attempt to access beyond end of device [ 2162.095959][ T7] loop2: rw=1, want=145, limit=112 [ 2162.111462][T10586] attempt to access beyond end of device [ 2162.119239][ T7] attempt to access beyond end of device [ 2162.124980][T27989] loop4: rw=1, want=32993, limit=112 [ 2162.131834][ T7] loop2: rw=1, want=1625, limit=112 [ 2162.138401][ T7] attempt to access beyond end of device [ 2162.161865][T10586] loop1: rw=1, want=23441, limit=112 [ 2162.171907][ T7] loop2: rw=1, want=1654, limit=112 [ 2162.177147][ T7] attempt to access beyond end of device [ 2162.216077][T10586] attempt to access beyond end of device [ 2162.231864][ T7] loop2: rw=1, want=1655, limit=112 [ 2162.237154][ T7] attempt to access beyond end of device [ 2162.251785][T10586] loop1: rw=1, want=27537, limit=112 [ 2162.279416][ T7] loop2: rw=1, want=1656, limit=112 [ 2162.286230][T10586] attempt to access beyond end of device [ 2162.292089][ T7] attempt to access beyond end of device [ 2162.297744][ T7] loop2: rw=1, want=1657, limit=112 [ 2162.310717][T10586] loop1: rw=1, want=29177, limit=112 [ 2162.319308][ T7] attempt to access beyond end of device [ 2162.360335][ T7] loop2: rw=1, want=1678, limit=112 [ 2162.380011][ T7] attempt to access beyond end of device [ 2162.385755][ T7] loop2: rw=1, want=1679, limit=112 [ 2162.391004][ T7] attempt to access beyond end of device [ 2162.441396][ T7] loop2: rw=1, want=1680, limit=112 [ 2162.446724][ T7] attempt to access beyond end of device [ 2162.471853][ T7] loop2: rw=1, want=1681, limit=112 [ 2162.477131][ T7] attempt to access beyond end of device [ 2162.508875][ T7] loop2: rw=1, want=1730, limit=112 [ 2162.514192][ T7] attempt to access beyond end of device [ 2162.519831][ T7] loop2: rw=1, want=1731, limit=112 [ 2162.581894][ T7] attempt to access beyond end of device [ 2162.587543][ T7] loop2: rw=1, want=1732, limit=112 [ 2162.621820][ T7] attempt to access beyond end of device [ 2162.627467][ T7] loop2: rw=1, want=1733, limit=112 [ 2162.660318][ T7] attempt to access beyond end of device [ 2162.680807][ T7] loop2: rw=1, want=1742, limit=112 [ 2162.711914][ T7] attempt to access beyond end of device [ 2162.717557][ T7] loop2: rw=1, want=1743, limit=112 [ 2162.741944][ T7] attempt to access beyond end of device [ 2162.747611][ T7] loop2: rw=1, want=1744, limit=112 [ 2162.788949][ T7] attempt to access beyond end of device [ 2162.795067][ T7] loop2: rw=1, want=1745, limit=112 [ 2162.827635][ T7] attempt to access beyond end of device [ 2162.861777][ T7] loop2: rw=1, want=5841, limit=112 17:13:01 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000280)=""/67, 0x1b) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e00000800000000f13c"], 0x1, 0x0, 0x0) 17:13:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee0f00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:13:01 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:13:01 executing program 4: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:13:01 executing program 3: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x3) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:13:02 executing program 2: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2162.907252][ T7] attempt to access beyond end of device [ 2162.931875][ T7] loop2: rw=1, want=9937, limit=112 [ 2162.978155][ T7] attempt to access beyond end of device [ 2163.094143][ T7] loop2: rw=1, want=14033, limit=112 [ 2163.302612][ T7] attempt to access beyond end of device [ 2163.402027][ T7] loop2: rw=1, want=18129, limit=112 [ 2163.532714][ T7] attempt to access beyond end of device [ 2163.579012][ T7] loop2: rw=1, want=22225, limit=112 17:13:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2163.656475][ T7] attempt to access beyond end of device [ 2163.725254][ T7] loop2: rw=1, want=22809, limit=112 17:13:04 executing program 3: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x3) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:13:04 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)) syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) ioctl$FITRIM(r0, 0xc0185879, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={0x0}}, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) shutdown(r2, 0x0) [ 2165.035334][ T7] attempt to access beyond end of device [ 2165.041030][ T7] loop3: rw=1, want=130, limit=112 [ 2165.041046][ T7] buffer_io_error: 79 callbacks suppressed [ 2165.041055][ T7] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 2165.041096][ T7] attempt to access beyond end of device [ 2165.103959][ T7] loop3: rw=1, want=131, limit=112 [ 2165.115052][ T7] Buffer I/O error on dev loop3, logical block 130, lost async page write [ 2165.129671][ T7] attempt to access beyond end of device [ 2165.138641][ T7] loop3: rw=1, want=132, limit=112 [ 2165.150235][ T7] Buffer I/O error on dev loop3, logical block 131, lost async page write [ 2165.168219][ T7] attempt to access beyond end of device [ 2165.191637][ T7] loop3: rw=1, want=133, limit=112 [ 2165.219786][ T7] Buffer I/O error on dev loop3, logical block 132, lost async page write [ 2165.279712][ T7] attempt to access beyond end of device [ 2165.285682][ T7] loop3: rw=1, want=142, limit=112 [ 2165.290815][ T7] Buffer I/O error on dev loop3, logical block 141, lost async page write [ 2165.299400][ T7] attempt to access beyond end of device [ 2165.305159][ T7] loop3: rw=1, want=143, limit=112 [ 2165.310299][ T7] Buffer I/O error on dev loop3, logical block 142, lost async page write [ 2165.369873][ T7] attempt to access beyond end of device [ 2165.376293][ T7] loop3: rw=1, want=144, limit=112 17:13:04 executing program 4: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2165.422741][ T7] Buffer I/O error on dev loop3, logical block 143, lost async page write [ 2165.441553][T21942] attempt to access beyond end of device [ 2165.448823][T21942] loop4: rw=1, want=130, limit=112 [ 2165.454479][T21942] Buffer I/O error on dev loop4, logical block 129, lost async page write [ 2165.465699][T21942] attempt to access beyond end of device 17:13:04 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:13:04 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00002eaffc)=0x101, 0x4) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x3fff, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000266ffc), 0x4) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x80) sendto$inet(r0, &(0x7f0000000180)="a8", 0x1, 0x3fffffd, 0x0, 0x0) [ 2165.465775][T27989] attempt to access beyond end of device [ 2165.471348][T21942] loop4: rw=1, want=131, limit=112 [ 2165.482889][T21942] Buffer I/O error on dev loop4, logical block 130, lost async page write [ 2165.491483][T21942] attempt to access beyond end of device [ 2165.499006][ T7] attempt to access beyond end of device [ 2165.499590][T21942] loop4: rw=1, want=132, limit=112 [ 2165.512104][T21942] Buffer I/O error on dev loop4, logical block 131, lost async page write [ 2165.520756][T21942] attempt to access beyond end of device [ 2165.526985][T21942] loop4: rw=1, want=133, limit=112 [ 2165.531975][T27989] loop1: rw=1, want=130, limit=112 [ 2165.532622][T21942] attempt to access beyond end of device [ 2165.543279][T21942] loop4: rw=1, want=142, limit=112 [ 2165.548443][T21942] attempt to access beyond end of device [ 2165.562329][ T7] loop3: rw=1, want=145, limit=112 [ 2165.572758][T27989] attempt to access beyond end of device [ 2165.578424][T27989] loop1: rw=1, want=131, limit=112 [ 2165.591862][T21942] loop4: rw=1, want=143, limit=112 [ 2165.597069][T21942] attempt to access beyond end of device [ 2165.611865][T27989] attempt to access beyond end of device [ 2165.617539][T27989] loop1: rw=1, want=132, limit=112 [ 2165.617585][T27989] attempt to access beyond end of device [ 2165.624869][ T7] attempt to access beyond end of device [ 2165.632975][T21942] loop4: rw=1, want=144, limit=112 [ 2165.652416][T21942] attempt to access beyond end of device [ 2165.660519][T27989] loop1: rw=1, want=133, limit=112 17:13:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f023c123f3188a070") r1 = memfd_create(&(0x7f00000000c0)=',%\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x0) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^H\x00\x00\x00\x00\x00\x00\x00\x7fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x05\x00\x00\x00t\xdb\xcf\xa6\xdcM'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x800000000016, @time={0x0, 0x989680}}) [ 2165.669676][T21942] loop4: rw=1, want=145, limit=112 [ 2165.677287][T27989] attempt to access beyond end of device [ 2165.679046][ T7] loop3: rw=1, want=4241, limit=112 [ 2165.699348][T27989] loop1: rw=1, want=142, limit=112 [ 2165.715968][T21942] attempt to access beyond end of device [ 2165.724178][T27989] attempt to access beyond end of device [ 2165.729018][ T7] attempt to access beyond end of device [ 2165.735584][T21942] loop4: rw=1, want=4241, limit=112 [ 2165.742311][T27989] loop1: rw=1, want=143, limit=112 [ 2165.754388][T27989] attempt to access beyond end of device [ 2165.771376][ T7] loop3: rw=1, want=6809, limit=112 [ 2165.775934][T27989] loop1: rw=1, want=144, limit=112 [ 2165.787163][ T7] attempt to access beyond end of device [ 2165.789649][T21942] attempt to access beyond end of device [ 2165.801970][T27989] attempt to access beyond end of device [ 2165.810145][T21942] loop4: rw=1, want=8337, limit=112 [ 2165.813557][ T7] loop3: rw=1, want=6838, limit=112 17:13:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2165.821051][T27989] loop1: rw=1, want=145, limit=112 [ 2165.827752][ T7] attempt to access beyond end of device [ 2165.854355][ T7] loop3: rw=1, want=6839, limit=112 [ 2165.858533][T21942] attempt to access beyond end of device 17:13:04 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1c}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) [ 2165.878769][T27989] attempt to access beyond end of device [ 2165.880285][ T7] attempt to access beyond end of device [ 2165.903068][T21942] loop4: rw=1, want=12433, limit=112 [ 2165.909101][T27989] loop1: rw=1, want=4241, limit=112 [ 2165.921924][ T7] loop3: rw=1, want=6840, limit=112 [ 2165.927195][ T7] attempt to access beyond end of device [ 2165.954475][ T7] loop3: rw=1, want=6841, limit=112 [ 2165.956324][T21942] attempt to access beyond end of device [ 2165.961434][ T7] attempt to access beyond end of device [ 2165.967971][T27989] attempt to access beyond end of device [ 2165.978247][ T7] loop3: rw=1, want=6862, limit=112 [ 2165.994895][ T7] attempt to access beyond end of device [ 2165.995279][T21942] loop4: rw=1, want=16529, limit=112 [ 2166.007437][ T7] loop3: rw=1, want=6863, limit=112 [ 2166.009430][T27989] loop1: rw=1, want=8337, limit=112 [ 2166.064934][T27989] attempt to access beyond end of device [ 2166.074306][ T7] attempt to access beyond end of device [ 2166.088967][T27989] loop1: rw=1, want=12433, limit=112 [ 2166.095127][T21942] attempt to access beyond end of device [ 2166.116760][T21942] loop4: rw=1, want=20625, limit=112 [ 2166.119236][ T7] loop3: rw=1, want=6864, limit=112 [ 2166.146973][ T7] attempt to access beyond end of device [ 2166.155826][T27989] attempt to access beyond end of device [ 2166.180492][T21942] attempt to access beyond end of device [ 2166.186340][T27989] loop1: rw=1, want=16529, limit=112 [ 2166.190197][ T7] loop3: rw=1, want=6865, limit=112 [ 2166.207472][T21942] loop4: rw=1, want=24721, limit=112 [ 2166.227566][ T7] attempt to access beyond end of device [ 2166.237114][T27989] attempt to access beyond end of device [ 2166.259426][ T7] loop3: rw=1, want=6914, limit=112 [ 2166.269721][T21942] attempt to access beyond end of device [ 2166.275575][T27989] loop1: rw=1, want=20625, limit=112 17:13:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2166.288668][ T7] attempt to access beyond end of device [ 2166.307573][T21942] loop4: rw=1, want=28817, limit=112 [ 2166.322940][ T7] loop3: rw=1, want=6915, limit=112 [ 2166.341557][T27989] attempt to access beyond end of device [ 2166.367954][T21942] attempt to access beyond end of device [ 2166.374985][T27989] loop1: rw=1, want=24721, limit=112 [ 2166.388441][T21942] loop4: rw=1, want=32889, limit=112 [ 2166.420604][T27989] attempt to access beyond end of device [ 2166.436158][ T7] attempt to access beyond end of device [ 2166.458189][T27989] loop1: rw=1, want=28817, limit=112 [ 2166.467472][ T7] loop3: rw=1, want=6916, limit=112 [ 2166.531003][ T7] attempt to access beyond end of device [ 2166.603264][ T7] loop3: rw=1, want=6917, limit=112 [ 2166.630378][T27989] attempt to access beyond end of device [ 2166.672545][ T7] attempt to access beyond end of device [ 2166.730501][T27989] loop1: rw=1, want=32889, limit=112 [ 2166.744632][ T7] loop3: rw=1, want=6926, limit=112 [ 2166.824639][ T7] attempt to access beyond end of device [ 2166.865236][ T7] loop3: rw=1, want=6927, limit=112 17:13:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2166.928025][ T7] attempt to access beyond end of device [ 2166.987872][ T7] loop3: rw=1, want=6928, limit=112 [ 2167.032791][ T7] attempt to access beyond end of device [ 2167.076286][ T7] loop3: rw=1, want=6929, limit=112 [ 2167.114034][ T7] attempt to access beyond end of device [ 2167.119694][ T7] loop3: rw=1, want=11025, limit=112 [ 2167.135213][ T7] attempt to access beyond end of device [ 2167.140861][ T7] loop3: rw=1, want=15121, limit=112 [ 2167.156281][ T7] attempt to access beyond end of device [ 2167.162052][ T7] loop3: rw=1, want=19217, limit=112 17:13:06 executing program 2: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:13:06 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlock2(&(0x7f0000bbd000/0x1000)=nil, 0x1000, 0x0) [ 2167.187216][ T7] attempt to access beyond end of device [ 2167.195423][T27989] attempt to access beyond end of device [ 2167.201085][T27989] loop2: rw=1, want=130, limit=112 [ 2167.208438][ T7] loop3: rw=1, want=23313, limit=112 [ 2167.237398][ T7] attempt to access beyond end of device [ 2167.237916][T27989] attempt to access beyond end of device [ 2167.262144][ T7] loop3: rw=1, want=23953, limit=112 [ 2167.263720][T27989] loop2: rw=1, want=131, limit=112 [ 2167.351921][T27989] attempt to access beyond end of device [ 2167.357571][T27989] loop2: rw=1, want=132, limit=112 [ 2167.411838][T27989] attempt to access beyond end of device [ 2167.417482][T27989] loop2: rw=1, want=133, limit=112 [ 2167.441912][T27989] attempt to access beyond end of device [ 2167.447559][T27989] loop2: rw=1, want=142, limit=112 [ 2167.480195][T27989] attempt to access beyond end of device [ 2167.485922][T27989] loop2: rw=1, want=143, limit=112 [ 2167.491078][T27989] attempt to access beyond end of device [ 2167.530480][T27989] loop2: rw=1, want=144, limit=112 [ 2167.535723][T27989] attempt to access beyond end of device [ 2167.541365][T27989] loop2: rw=1, want=145, limit=112 [ 2167.592650][T27989] attempt to access beyond end of device [ 2167.598301][T27989] loop2: rw=1, want=1945, limit=112 [ 2167.653310][T27989] attempt to access beyond end of device [ 2167.658964][T27989] loop2: rw=1, want=1974, limit=112 [ 2167.691929][T27989] attempt to access beyond end of device [ 2167.711876][T27989] loop2: rw=1, want=1975, limit=112 [ 2167.717119][T27989] attempt to access beyond end of device [ 2167.770891][T27989] loop2: rw=1, want=1976, limit=112 [ 2167.800349][T27989] attempt to access beyond end of device [ 2167.811878][T27989] loop2: rw=1, want=1977, limit=112 [ 2167.817120][T27989] attempt to access beyond end of device [ 2167.841774][T27989] loop2: rw=1, want=1998, limit=112 [ 2167.847021][T27989] attempt to access beyond end of device [ 2167.880470][T27989] loop2: rw=1, want=1999, limit=112 [ 2167.910291][T27989] attempt to access beyond end of device [ 2167.916035][T27989] loop2: rw=1, want=2000, limit=112 [ 2167.921276][T27989] attempt to access beyond end of device [ 2167.953346][T27989] loop2: rw=1, want=2001, limit=112 [ 2167.975185][T27989] attempt to access beyond end of device [ 2167.991500][T27989] loop2: rw=1, want=2050, limit=112 [ 2168.002822][T27989] attempt to access beyond end of device [ 2168.009108][T27989] loop2: rw=1, want=2051, limit=112 [ 2168.020955][T27989] attempt to access beyond end of device [ 2168.027082][T27989] loop2: rw=1, want=2052, limit=112 [ 2168.033399][T27989] attempt to access beyond end of device [ 2168.054451][T27989] loop2: rw=1, want=2053, limit=112 [ 2168.080239][T27989] attempt to access beyond end of device [ 2168.086592][T27989] loop2: rw=1, want=2062, limit=112 [ 2168.476414][T27989] attempt to access beyond end of device [ 2168.509218][T27989] loop2: rw=1, want=2063, limit=112 [ 2168.517185][T27989] attempt to access beyond end of device [ 2168.529700][T27989] loop2: rw=1, want=2064, limit=112 [ 2168.536554][T27989] attempt to access beyond end of device [ 2168.603330][T27989] loop2: rw=1, want=2065, limit=112 [ 2168.735663][T27989] attempt to access beyond end of device [ 2168.789633][T27989] loop2: rw=1, want=6161, limit=112 [ 2168.887682][T27989] attempt to access beyond end of device [ 2168.893415][T27989] loop2: rw=1, want=10257, limit=112 [ 2168.908720][T27989] attempt to access beyond end of device [ 2168.914439][T27989] loop2: rw=1, want=14353, limit=112 [ 2168.929968][T27989] attempt to access beyond end of device [ 2168.935675][T27989] loop2: rw=1, want=18449, limit=112 [ 2168.951165][T27989] attempt to access beyond end of device [ 2168.956971][T27989] loop2: rw=1, want=22545, limit=112 [ 2168.967673][T27989] attempt to access beyond end of device [ 2168.973406][T27989] loop2: rw=1, want=23769, limit=112 [ 2169.011410][T27989] attempt to access beyond end of device [ 2169.072592][T27989] loop1: rw=1, want=130, limit=112 [ 2169.077748][T27989] attempt to access beyond end of device [ 2169.127542][T27989] loop1: rw=1, want=131, limit=112 [ 2169.147590][T27989] attempt to access beyond end of device [ 2169.190436][T27989] loop1: rw=1, want=132, limit=112 [ 2169.211598][T27989] attempt to access beyond end of device [ 2169.236553][T27989] loop1: rw=1, want=133, limit=112 [ 2169.259937][T27989] attempt to access beyond end of device [ 2169.283777][T27989] loop1: rw=1, want=142, limit=112 [ 2169.305975][T27989] attempt to access beyond end of device [ 2169.329713][T27989] loop1: rw=1, want=143, limit=112 [ 2169.353107][T27989] attempt to access beyond end of device [ 2169.378980][T27989] loop1: rw=1, want=144, limit=112 [ 2169.401186][T27989] attempt to access beyond end of device [ 2169.425210][T27989] loop1: rw=1, want=145, limit=112 17:13:08 executing program 3: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x3) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:13:08 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0xfffffe5e) r1 = socket$unix(0x1, 0x1, 0x0) pwritev(0xffffffffffffffff, 0x0, 0xfffffffffffffc98, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) getgid() listen(r1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = accept$inet6(r1, 0x0, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f00000000c0), 0x4) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/stat\x00') setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x4) openat$cgroup_ro(r3, 0x0, 0x0, 0x0) 17:13:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:13:08 executing program 4: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:13:08 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2169.488227][T27989] attempt to access beyond end of device [ 2169.528319][T27989] loop1: rw=1, want=4241, limit=112 [ 2169.586527][T27989] attempt to access beyond end of device [ 2169.599372][T27989] loop1: rw=1, want=8337, limit=112 17:13:08 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) [ 2169.658994][T27989] attempt to access beyond end of device [ 2169.695719][T27989] loop1: rw=1, want=12433, limit=112 [ 2169.718474][T27989] attempt to access beyond end of device [ 2169.737906][T27989] loop1: rw=1, want=12953, limit=112 [ 2169.823727][T27989] attempt to access beyond end of device [ 2169.947320][T27989] loop1: rw=1, want=12982, limit=112 [ 2170.027152][T27989] attempt to access beyond end of device [ 2170.032963][T27989] loop1: rw=1, want=12983, limit=112 [ 2170.038320][T27989] attempt to access beyond end of device [ 2170.392242][T27989] loop1: rw=1, want=12984, limit=112 17:13:09 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f000021d000)={0x2, 0x4e21}, 0x3e) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @empty, @multicast1}, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000200)={@link_local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 17:13:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2170.462146][T27989] buffer_io_error: 64 callbacks suppressed [ 2170.462172][T27989] Buffer I/O error on dev loop1, logical block 12983, lost async page write [ 2170.536668][T27989] attempt to access beyond end of device [ 2170.542449][T27989] loop1: rw=1, want=12985, limit=112 [ 2170.547744][T27989] Buffer I/O error on dev loop1, logical block 12984, lost async page write [ 2170.571976][T27989] attempt to access beyond end of device [ 2170.577680][T27989] loop1: rw=1, want=13006, limit=112 17:13:09 executing program 4: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2170.601825][T27989] Buffer I/O error on dev loop1, logical block 13005, lost async page write [ 2170.610581][T27989] attempt to access beyond end of device [ 2170.634980][T27989] loop1: rw=1, want=13007, limit=112 [ 2170.640377][T27989] Buffer I/O error on dev loop1, logical block 13006, lost async page write 17:13:09 executing program 3: prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x3) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:13:09 executing program 2: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:13:09 executing program 5: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2170.681058][T27989] attempt to access beyond end of device [ 2170.691459][T10586] attempt to access beyond end of device [ 2170.701664][T27989] loop1: rw=1, want=13008, limit=112 [ 2170.716220][T10586] loop3: rw=1, want=130, limit=112 [ 2170.721817][T27989] Buffer I/O error on dev loop1, logical block 13007, lost async page write [ 2170.730534][T27989] attempt to access beyond end of device [ 2170.735133][T10586] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 2170.741335][T27989] loop1: rw=1, want=13009, limit=112 [ 2170.750113][T27989] Buffer I/O error on dev loop1, logical block 13008, lost async page write [ 2170.794335][T10586] attempt to access beyond end of device [ 2171.042537][T10586] loop3: rw=1, want=131, limit=112 [ 2171.100488][T27989] attempt to access beyond end of device [ 2171.121317][T10586] Buffer I/O error on dev loop3, logical block 130, lost async page write [ 2171.160676][T27989] loop1: rw=1, want=13058, limit=112 [ 2171.166200][T27989] Buffer I/O error on dev loop1, logical block 13057, lost async page write [ 2171.174978][T10586] attempt to access beyond end of device [ 2171.244632][T27989] attempt to access beyond end of device [ 2171.302932][T27989] loop1: rw=1, want=13059, limit=112 [ 2171.806814][T10586] loop3: rw=1, want=132, limit=112 [ 2171.827856][T27989] Buffer I/O error on dev loop1, logical block 13058, lost async page write [ 2171.881381][T28929] attempt to access beyond end of device [ 2171.919851][T10586] attempt to access beyond end of device 17:13:10 executing program 5: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:13:10 executing program 4: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:13:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2171.932664][T28929] loop4: rw=1, want=130, limit=112 [ 2171.969307][T27989] attempt to access beyond end of device [ 2171.975131][T27989] loop1: rw=1, want=13060, limit=112 [ 2171.980457][T27989] attempt to access beyond end of device [ 2171.986215][T27989] loop1: rw=1, want=13061, limit=112 [ 2171.991534][T27989] attempt to access beyond end of device [ 2171.992743][T10586] loop3: rw=1, want=133, limit=112 [ 2171.997252][T27989] loop1: rw=1, want=13070, limit=112 [ 2172.007739][T27989] attempt to access beyond end of device [ 2172.013062][T28929] attempt to access beyond end of device [ 2172.013481][T27989] loop1: rw=1, want=13071, limit=112 [ 2172.024431][T27989] attempt to access beyond end of device [ 2172.030079][T27989] loop1: rw=1, want=13072, limit=112 [ 2172.035493][T27989] attempt to access beyond end of device [ 2172.041154][T27989] loop1: rw=1, want=13073, limit=112 [ 2172.093543][T28929] loop4: rw=1, want=131, limit=112 [ 2172.099549][T27989] attempt to access beyond end of device [ 2172.244754][T10586] attempt to access beyond end of device [ 2172.250476][T10586] loop3: rw=1, want=142, limit=112 [ 2172.259150][T28929] attempt to access beyond end of device [ 2172.268400][T28929] loop4: rw=1, want=132, limit=112 [ 2172.274052][T27989] loop1: rw=1, want=17169, limit=112 17:13:11 executing program 4: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2172.291964][T10586] attempt to access beyond end of device [ 2172.297633][T10586] loop3: rw=1, want=143, limit=112 [ 2172.302940][T28929] attempt to access beyond end of device [ 2172.308599][T28929] loop4: rw=1, want=133, limit=112 [ 2172.337213][T10586] attempt to access beyond end of device [ 2172.348264][T10586] loop3: rw=1, want=144, limit=112 [ 2172.356041][T10586] attempt to access beyond end of device [ 2172.362226][T10586] loop3: rw=1, want=145, limit=112 [ 2172.375213][T10586] attempt to access beyond end of device [ 2172.381081][T10586] loop3: rw=1, want=4241, limit=112 [ 2172.392990][T27989] attempt to access beyond end of device [ 2172.401051][T28929] attempt to access beyond end of device [ 2172.410919][T10586] attempt to access beyond end of device [ 2172.416975][T27989] loop1: rw=1, want=21265, limit=112 [ 2172.422742][T28929] loop4: rw=1, want=142, limit=112 [ 2172.428005][T10586] loop3: rw=1, want=8337, limit=112 [ 2172.435859][T28929] attempt to access beyond end of device [ 2172.447928][T27989] attempt to access beyond end of device [ 2172.454947][T28929] loop4: rw=1, want=143, limit=112 [ 2172.470747][T28929] attempt to access beyond end of device [ 2172.476895][T27989] loop1: rw=1, want=23049, limit=112 [ 2172.490248][T10586] attempt to access beyond end of device [ 2172.500684][T28929] loop4: rw=1, want=144, limit=112 [ 2172.521845][T10586] loop3: rw=1, want=12433, limit=112 [ 2172.532378][T28929] attempt to access beyond end of device [ 2172.595165][T28929] loop4: rw=1, want=145, limit=112 [ 2172.815741][T28929] attempt to access beyond end of device [ 2172.821418][T28929] loop4: rw=1, want=4241, limit=112 [ 2172.885493][T10586] attempt to access beyond end of device [ 2172.897122][T27989] attempt to access beyond end of device [ 2172.903212][T27989] loop2: rw=1, want=130, limit=112 [ 2172.908424][T10586] loop3: rw=1, want=16529, limit=112 [ 2172.913640][T28929] attempt to access beyond end of device [ 2172.914046][T27989] attempt to access beyond end of device [ 2172.934764][T28929] loop4: rw=1, want=8337, limit=112 [ 2172.966748][T27989] loop2: rw=1, want=131, limit=112 [ 2172.977731][T10586] attempt to access beyond end of device [ 2172.983874][T28929] attempt to access beyond end of device [ 2172.990828][T27989] attempt to access beyond end of device [ 2173.002446][T28929] loop4: rw=1, want=12433, limit=112 [ 2173.008947][T27989] loop2: rw=1, want=132, limit=112 [ 2173.020435][T10586] loop3: rw=1, want=20625, limit=112 [ 2173.028952][T27989] attempt to access beyond end of device [ 2173.044639][T28929] attempt to access beyond end of device [ 2173.050266][T10586] attempt to access beyond end of device [ 2173.051486][T27989] loop2: rw=1, want=133, limit=112 [ 2173.066975][T28929] loop4: rw=1, want=13721, limit=112 [ 2173.072933][T27989] attempt to access beyond end of device [ 2173.081848][T10586] loop3: rw=1, want=24281, limit=112 [ 2173.086969][T27989] loop2: rw=1, want=142, limit=112 [ 2173.103002][T28929] attempt to access beyond end of device [ 2173.121833][T28929] loop4: rw=1, want=13750, limit=112 [ 2173.121890][T27989] attempt to access beyond end of device [ 2173.127147][T28929] attempt to access beyond end of device [ 2173.139390][T28929] loop4: rw=1, want=13751, limit=112 [ 2173.149992][T27989] loop2: rw=1, want=143, limit=112 [ 2173.155669][T27989] attempt to access beyond end of device [ 2173.161310][T27989] loop2: rw=1, want=144, limit=112 [ 2173.172610][T28929] attempt to access beyond end of device [ 2173.178249][T28929] loop4: rw=1, want=13752, limit=112 [ 2173.191864][T28929] attempt to access beyond end of device [ 2173.197568][T28929] loop4: rw=1, want=13753, limit=112 [ 2173.211844][T28929] attempt to access beyond end of device [ 2173.217553][T28929] loop4: rw=1, want=13774, limit=112 [ 2173.219677][T27989] attempt to access beyond end of device [ 2173.228581][T27989] loop2: rw=1, want=145, limit=112 [ 2173.234140][T28929] attempt to access beyond end of device [ 2173.239809][T28929] loop4: rw=1, want=13775, limit=112 [ 2173.261919][T28929] attempt to access beyond end of device [ 2173.267581][T28929] loop4: rw=1, want=13776, limit=112 [ 2173.287981][T27989] attempt to access beyond end of device [ 2173.291821][T28929] attempt to access beyond end of device [ 2173.299248][T28929] loop4: rw=1, want=13777, limit=112 [ 2173.311877][T27989] loop2: rw=1, want=4241, limit=112 [ 2173.331895][T28929] attempt to access beyond end of device [ 2173.337560][T28929] loop4: rw=1, want=13826, limit=112 [ 2173.347400][T27989] attempt to access beyond end of device [ 2173.361831][T28929] attempt to access beyond end of device [ 2173.367470][T28929] loop4: rw=1, want=13827, limit=112 [ 2173.379792][T27989] loop2: rw=1, want=8337, limit=112 [ 2173.409683][T28929] attempt to access beyond end of device [ 2173.418609][T27989] attempt to access beyond end of device [ 2173.424466][T28929] loop4: rw=1, want=13828, limit=112 [ 2173.429781][T28929] attempt to access beyond end of device [ 2173.451842][T27989] loop2: rw=1, want=12433, limit=112 [ 2173.469964][T28929] loop4: rw=1, want=13829, limit=112 [ 2173.490317][T28929] attempt to access beyond end of device [ 2173.501876][T28929] loop4: rw=1, want=13838, limit=112 [ 2173.507199][T28929] attempt to access beyond end of device [ 2173.513011][T27989] attempt to access beyond end of device [ 2173.518650][T27989] loop2: rw=1, want=16529, limit=112 [ 2173.532423][T28929] loop4: rw=1, want=13839, limit=112 [ 2173.537768][T28929] attempt to access beyond end of device [ 2173.561951][T27989] attempt to access beyond end of device [ 2173.574647][T27989] loop2: rw=1, want=20057, limit=112 [ 2173.578315][T28929] loop4: rw=1, want=13840, limit=112 [ 2173.593533][T27989] attempt to access beyond end of device [ 2173.599195][T27989] loop2: rw=1, want=20086, limit=112 [ 2173.600039][T28929] attempt to access beyond end of device [ 2173.633426][T28929] loop4: rw=1, want=13841, limit=112 [ 2173.663325][T28929] attempt to access beyond end of device [ 2173.691020][T28929] loop4: rw=1, want=17937, limit=112 [ 2173.697133][T27989] attempt to access beyond end of device [ 2173.749108][T27989] loop2: rw=1, want=20087, limit=112 [ 2173.824414][T27989] attempt to access beyond end of device [ 2173.885546][T27989] loop2: rw=1, want=20088, limit=112 [ 2173.935783][T28929] attempt to access beyond end of device [ 2173.969112][T28929] loop4: rw=1, want=22033, limit=112 [ 2174.043176][T28929] attempt to access beyond end of device [ 2174.058106][T27989] attempt to access beyond end of device [ 2174.068469][T28929] loop4: rw=1, want=26129, limit=112 [ 2174.083252][T27989] loop2: rw=1, want=20089, limit=112 [ 2174.106112][T27989] attempt to access beyond end of device [ 2174.140175][T27989] loop2: rw=1, want=20110, limit=112 [ 2174.151574][T28929] attempt to access beyond end of device [ 2174.171604][T27989] attempt to access beyond end of device [ 2174.185710][T28929] loop4: rw=1, want=30225, limit=112 [ 2174.204654][T27989] loop2: rw=1, want=20111, limit=112 [ 2174.226689][T27989] attempt to access beyond end of device [ 2174.251908][T28929] attempt to access beyond end of device [ 2174.260167][T27989] loop2: rw=1, want=20112, limit=112 [ 2174.312535][T28929] loop4: rw=1, want=32801, limit=112 [ 2174.352424][T27989] attempt to access beyond end of device [ 2174.380542][T27989] loop2: rw=1, want=20113, limit=112 [ 2174.386130][T27989] attempt to access beyond end of device [ 2174.391853][T27989] loop2: rw=1, want=20162, limit=112 [ 2174.397171][T27989] attempt to access beyond end of device [ 2174.402967][T27989] loop2: rw=1, want=20163, limit=112 [ 2174.408297][T27989] attempt to access beyond end of device [ 2174.414100][T27989] loop2: rw=1, want=20164, limit=112 [ 2174.419453][T27989] attempt to access beyond end of device [ 2174.425228][T27989] loop2: rw=1, want=20165, limit=112 [ 2174.430567][T27989] attempt to access beyond end of device [ 2174.436483][T27989] loop2: rw=1, want=20174, limit=112 [ 2174.441923][T27989] attempt to access beyond end of device [ 2174.447563][T27989] loop2: rw=1, want=20175, limit=112 17:13:13 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:13:13 executing program 5: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:13:13 executing program 4: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:13:13 executing program 2: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:13:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='d'], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2174.452992][T27989] attempt to access beyond end of device [ 2174.458631][T27989] loop2: rw=1, want=20176, limit=112 [ 2174.464052][T27989] attempt to access beyond end of device [ 2174.469700][T27989] loop2: rw=1, want=20177, limit=112 [ 2174.481949][T27989] attempt to access beyond end of device [ 2174.487618][T27989] loop2: rw=1, want=24273, limit=112 [ 2174.510654][T27989] attempt to access beyond end of device [ 2174.519034][T28929] attempt to access beyond end of device [ 2174.533969][T28929] loop1: rw=1, want=130, limit=112 [ 2174.555255][T27989] loop2: rw=1, want=28369, limit=112 [ 2174.568998][T28929] attempt to access beyond end of device [ 2174.841022][T28929] loop1: rw=1, want=131, limit=112 [ 2174.949756][T28929] attempt to access beyond end of device [ 2175.021507][T28929] loop1: rw=1, want=132, limit=112 [ 2175.039190][T27989] attempt to access beyond end of device [ 2175.084084][T28929] attempt to access beyond end of device [ 2175.093000][T27989] loop2: rw=1, want=32465, limit=112 [ 2175.102546][T27989] attempt to access beyond end of device [ 2175.108190][T27989] loop2: rw=1, want=32993, limit=112 [ 2175.156837][T28929] loop1: rw=1, want=133, limit=112 [ 2175.174643][T28929] attempt to access beyond end of device [ 2175.195688][T28929] loop1: rw=1, want=142, limit=112 17:13:14 executing program 4: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:13:14 executing program 2: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:13:14 executing program 5: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:13:14 executing program 3: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x3) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2175.212432][T28929] attempt to access beyond end of device [ 2175.252047][T28929] loop1: rw=1, want=143, limit=112 [ 2175.292137][T28929] attempt to access beyond end of device [ 2175.702968][T28929] loop1: rw=1, want=144, limit=112 [ 2175.750961][T28929] buffer_io_error: 66 callbacks suppressed [ 2175.750973][T28929] Buffer I/O error on dev loop1, logical block 143, lost async page write [ 2175.969723][T28929] attempt to access beyond end of device [ 2175.975531][T28929] loop1: rw=1, want=145, limit=112 [ 2175.980667][T28929] Buffer I/O error on dev loop1, logical block 144, lost async page write [ 2176.036512][T28929] attempt to access beyond end of device 17:13:15 executing program 2: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2176.168990][T28929] loop1: rw=1, want=4241, limit=112 17:13:15 executing program 5: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) 17:13:15 executing program 4: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x4000000009) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000780)="6a96648d8162d44a7aa188c6c5db460482bfee3a0d38c5ef497feeef08136d1db1910f330800b747a7988a6e08f3ad33d21c62397f1a320b5b712807a767ba21f524d8482f10fe9a5eb27ce912a954e06cc6ba3ab08c341b34f9d1479272c2d3c7d17f8cf42d31693f1269f8df45fd544303d3d5ea807c615a8227eb1d0a52bcde841a548f723c6e4940cbe5c611", 0x8e) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000840)={{0x2, 0x0, @multicast1}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x40, {0x2, 0x4e22, @broadcast}, 'netdevsim0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) futex(0x0, 0x6, 0x2, &(0x7f0000000300), 0x0, 0x1) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) clone(0x0, &(0x7f00000006c0)="b37ba5600b66630f060500000000000000d039bcdbba07e04ad3ba9eda42abb251576f5fa8ff67cc6018900fe94ca49b7785d80c929ce91c988f2f8c4fbf836f89f48e9fbe6bc93e2c9ecd24896a5382ade2de04831776b454806248f1bbef17646123168d63bbf1fbb8278930d46e55ec20e32ec80f22d6001b0aee00c28eb80b9caf90b0637c09e6a66728fb0b6d", 0x0, 0x0, 0x0) [ 2176.233960][T28929] attempt to access beyond end of device [ 2176.239696][T28929] loop1: rw=1, want=8337, limit=112 [ 2176.399778][T28929] attempt to access beyond end of device [ 2176.626346][T28929] loop1: rw=1, want=8857, limit=112 [ 2176.632394][T28929] attempt to access beyond end of device [ 2176.638038][T28929] loop1: rw=1, want=8886, limit=112 [ 2176.696554][T28929] Buffer I/O error on dev loop1, logical block 8885, lost async page write [ 2176.705493][ T1047] kasan: CONFIG_KASAN_INLINE enabled [ 2176.711107][ T1047] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 2176.898962][T28929] attempt to access beyond end of device [ 2176.904980][T28929] loop1: rw=1, want=8887, limit=112 [ 2176.916081][T28929] Buffer I/O error on dev loop1, logical block 8886, lost async page write [ 2176.940835][T28929] attempt to access beyond end of device [ 2176.953368][T28929] loop1: rw=1, want=8888, limit=112 [ 2176.964289][T28929] Buffer I/O error on dev loop1, logical block 8887, lost async page write [ 2177.021223][ T1047] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 2177.028179][ T1047] CPU: 0 PID: 1047 Comm: khugepaged Not tainted 5.0.0-rc1-next-20190109 #8 [ 2177.036754][ T1047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2177.046843][ T1047] RIP: 0010:try_charge+0x12a8/0x1d00 [ 2177.052125][ T1047] Code: c0 e8 dc bf fe ff 4c 89 f2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 c6 04 02 00 49 8d bc 24 40 05 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 20 0a 00 00 4c 89 f2 4d 8b a4 24 40 05 00 00 48 [ 2177.070314][T28929] attempt to access beyond end of device [ 2177.071731][ T1047] RSP: 0018:ffff8880a78ff3e0 EFLAGS: 00010202 [ 2177.071744][ T1047] RAX: dffffc0000000000 RBX: ffff88808d650600 RCX: 1ffff11014f1fe6a [ 2177.071753][ T1047] RDX: 00000000000000a8 RSI: 0000000000000000 RDI: 0000000000000540 [ 2177.071762][ T1047] RBP: ffff8880a78ff5e8 R08: 1ffff11015cc5b8f R09: ffffed1015cc5b90 [ 2177.071771][ T1047] R10: ffffed1015cc5b8f R11: ffff8880ae62dc7b R12: 0000000000000000 [ 2177.071780][ T1047] R13: ffff8880a78ff5c0 R14: ffff8880a78ff580 R15: 0000000000000000 [ 2177.071800][ T1047] FS: 0000000000000000(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 2177.081773][T28929] loop1: rw=1, want=8889, limit=112 [ 2177.083481][ T1047] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2177.091436][T28929] Buffer I/O error on dev loop1, logical block 8888, lost async page write [ 2177.099382][ T1047] CR2: 00007f6ea1f229d0 CR3: 00000000861cf000 CR4: 00000000001426f0 [ 2177.099394][ T1047] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2177.099403][ T1047] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2177.099407][ T1047] Call Trace: [ 2177.099424][ T1047] ? get_mem_cgroup_from_mm+0x1cd/0x420 [ 2177.099445][ T1047] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2177.190735][ T1047] ? lock_downgrade+0xbe0/0xbe0 [ 2177.195577][ T1047] ? kasan_check_read+0x11/0x20 [ 2177.200424][ T1047] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2177.206350][T28929] attempt to access beyond end of device [ 2177.206401][ T1047] ? rcu_read_unlock_special+0x380/0x380 [ 2177.217643][ T1047] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 2177.223236][ T1047] ? get_mem_cgroup_from_page+0x190/0x190 [ 2177.228962][ T1047] ? high_work_func+0x20/0x20 [ 2177.231765][T28929] loop1: rw=1, want=8910, limit=112 [ 2177.233640][ T1047] ? rcu_read_lock_sched_held+0x110/0x130 [ 2177.238819][T28929] Buffer I/O error on dev loop1, logical block 8909, lost async page write [ 2177.244518][ T1047] ? __alloc_pages_nodemask+0xaca/0xdc0 [ 2177.244553][ T1047] mem_cgroup_try_charge+0x43a/0xdb0 [ 2177.244569][ T1047] ? __alloc_pages_slowpath+0x2c60/0x2c60 [ 2177.244584][ T1047] ? mem_cgroup_protected+0xa10/0xa10 [ 2177.244605][ T1047] ? prep_transhuge_page+0x74/0x160 [ 2177.244619][ T1047] ? maybe_pmd_mkwrite+0x100/0x100 [ 2177.244635][ T1047] ? up_read+0x212/0x2b0 [ 2177.289674][ T1047] ? perf_trace_lock_acquire+0x138/0x7d0 [ 2177.295303][ T1047] ? up_read_non_owner+0x100/0x100 [ 2177.300409][ T1047] ? check_preemption_disabled+0x48/0x290 [ 2177.306135][ T1047] collapse_huge_page+0x17d/0x2280 [ 2177.311287][ T1047] ? add_lock_to_list.isra.0+0x450/0x450 [ 2177.316919][ T1047] ? print_usage_bug+0xd0/0xd0 [ 2177.321689][ T1047] ? __collapse_huge_page_swapin+0x1570/0x1570 [ 2177.327865][ T1047] ? khugepaged_scan_pmd+0x1637/0x1f00 [ 2177.333333][ T1047] ? lock_acquire+0x1db/0x570 [ 2177.336727][T28929] attempt to access beyond end of device [ 2177.338034][ T1047] ? kasan_check_read+0x11/0x20 [ 2177.348496][ T1047] ? do_raw_spin_unlock+0xa0/0x330 [ 2177.353618][ T1047] ? do_raw_spin_trylock+0x270/0x270 [ 2177.358912][ T1047] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2177.365162][ T1047] ? khugepaged_find_target_node+0x142/0x180 [ 2177.371150][ T1047] khugepaged_scan_pmd+0x165f/0x1f00 [ 2177.376456][ T1047] ? collapse_huge_page+0x2280/0x2280 [ 2177.376664][T28929] loop1: rw=1, want=8911, limit=112 [ 2177.381835][ T1047] ? perf_trace_lock_acquire+0x138/0x7d0 [ 2177.381854][ T1047] ? add_lock_to_list.isra.0+0x450/0x450 [ 2177.381871][ T1047] ? add_lock_to_list.isra.0+0x450/0x450 [ 2177.381885][ T1047] ? lock_acquire+0x1db/0x570 [ 2177.381906][ T1047] ? __lock_is_held+0xb6/0x140 [ 2177.413391][ T1047] ? ___might_sleep+0x1e7/0x310 [ 2177.418250][ T1047] ? khugepaged+0x83c/0x18a0 [ 2177.422860][ T1047] ? arch_local_save_flags+0x50/0x50 [ 2177.426687][T28929] Buffer I/O error on dev loop1, logical block 8910, lost async page write [ 2177.428157][ T1047] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2177.442978][ T1047] ? is_vma_temporary_stack+0x74/0x90 [ 2177.448360][ T1047] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2177.454620][ T1047] khugepaged+0xcfe/0x18a0 [ 2177.459065][ T1047] ? khugepaged_scan_pmd+0x1f00/0x1f00 [ 2177.464542][ T1047] ? find_held_lock+0x35/0x120 [ 2177.469317][ T1047] ? __kthread_parkme+0xc3/0x1b0 [ 2177.474262][ T1047] ? lock_acquire+0x1db/0x570 [ 2177.478950][ T1047] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2177.481837][T28929] attempt to access beyond end of device [ 2177.484765][ T1047] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2177.490425][T28929] loop1: rw=1, want=8912, limit=112 [ 2177.496239][ T1047] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2177.496254][ T1047] ? trace_hardirqs_on+0xbd/0x310 [ 2177.496269][ T1047] ? trace_hardirqs_off_caller+0x300/0x300 [ 2177.496284][ T1047] ? schedule+0x108/0x350 [ 2177.496296][ T1047] ? do_raw_spin_trylock+0x270/0x270 [ 2177.496316][ T1047] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2177.496331][ T1047] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2177.496344][ T1047] ? __kthread_parkme+0xfb/0x1b0 [ 2177.496361][ T1047] kthread+0x357/0x430 [ 2177.496398][ T1047] ? khugepaged_scan_pmd+0x1f00/0x1f00 [ 2177.546896][T28929] Buffer I/O error on dev loop1, logical block 8911, lost async page write [ 2177.548256][ T1047] ? kthread_stop+0x920/0x920 [ 2177.566965][ T1047] ret_from_fork+0x3a/0x50 [ 2177.571400][ T1047] Modules linked in: [ 2177.586768][T28929] attempt to access beyond end of device [ 2177.616896][T28929] loop1: rw=1, want=8913, limit=112 [ 2177.622204][T28929] Buffer I/O error on dev loop1, logical block 8912, lost async page write [ 2177.631171][T28929] attempt to access beyond end of device [ 2177.642217][T28929] loop1: rw=1, want=8962, limit=112 [ 2177.647472][T28929] attempt to access beyond end of device [ 2177.660420][ T1047] ---[ end trace 6278a61dbdd48018 ]--- [ 2177.665992][ T1047] RIP: 0010:try_charge+0x12a8/0x1d00 [ 2177.671289][ T1047] Code: c0 e8 dc bf fe ff 4c 89 f2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 c6 04 02 00 49 8d bc 24 40 05 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 20 0a 00 00 4c 89 f2 4d 8b a4 24 40 05 00 00 48 [ 2177.672677][T28929] loop1: rw=1, want=8963, limit=112 [ 2177.691203][ T1047] RSP: 0018:ffff8880a78ff3e0 EFLAGS: 00010202 [ 2177.702718][T28929] attempt to access beyond end of device [ 2177.708366][T28929] loop1: rw=1, want=8964, limit=112 [ 2177.713761][T28929] attempt to access beyond end of device [ 2177.719421][T28929] loop1: rw=1, want=8965, limit=112 [ 2177.724890][T28929] attempt to access beyond end of device [ 2177.730533][T28929] loop1: rw=1, want=8974, limit=112 [ 2177.735936][T28929] attempt to access beyond end of device [ 2177.741590][T28929] loop1: rw=1, want=8975, limit=112 [ 2177.747040][T28929] attempt to access beyond end of device [ 2177.752825][T28929] loop1: rw=1, want=8976, limit=112 [ 2177.758063][T28929] attempt to access beyond end of device [ 2177.763944][T28929] loop1: rw=1, want=8977, limit=112 [ 2177.773874][T28929] attempt to access beyond end of device [ 2177.779523][T28929] loop1: rw=1, want=13073, limit=112 [ 2177.791928][T28929] attempt to access beyond end of device [ 2177.797589][T28929] loop1: rw=1, want=17169, limit=112 [ 2177.810006][T28929] attempt to access beyond end of device [ 2177.815852][T28929] loop1: rw=1, want=21265, limit=112 [ 2177.826109][T28929] attempt to access beyond end of device [ 2177.831830][T28929] loop1: rw=1, want=23553, limit=112 [ 2177.838630][ T1047] RAX: dffffc0000000000 RBX: ffff88808d650600 RCX: 1ffff11014f1fe6a [ 2177.846958][ T1047] RDX: 00000000000000a8 RSI: 0000000000000000 RDI: 0000000000000540 [ 2177.860164][ T1047] RBP: ffff8880a78ff5e8 R08: 1ffff11015cc5b8f R09: ffffed1015cc5b90 [ 2177.868357][ T1047] R10: ffffed1015cc5b8f R11: ffff8880ae62dc7b R12: 0000000000000000 [ 2177.885263][ T1047] R13: ffff8880a78ff5c0 R14: ffff8880a78ff580 R15: 0000000000000000 [ 2177.895152][ T1047] FS: 0000000000000000(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 2177.907694][ T1047] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2177.916219][ T1047] CR2: 00007fd4540080a8 CR3: 000000009638a000 CR4: 00000000001426e0 [ 2177.927890][ T1047] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2177.937836][ T1047] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2177.954969][ T1047] Kernel panic - not syncing: Fatal exception [ 2177.962242][ T1047] Kernel Offset: disabled [ 2177.966573][ T1047] Rebooting in 86400 seconds..