_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r20}}, {0x8}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x84, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x54, 0x4, [{0x0, 0x5, 0x8, 0x3ff}, {0x101, 0x3, 0x80, 0x7c7}, {0x3, 0x40, 0x3, 0x10000}, {0xfff, 0x0, 0x3f, 0x7fff}, {0xff, 0x2, 0x9, 0x8b1}, {0x7a8, 0x2, 0x40, 0x40}, {0x0, 0x3f, 0x7, 0x6}, {0x1000, 0x3f, 0x8, 0x8b}, {0x3, 0x94, 0x8, 0x8}, {0x1, 0x6, 0x6, 0x1000}]}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r22}}}]}}, {{0x8, 0x1, r23}, {0x78, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r27}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}]}}, {{0x8, 0x1, r28}, {0x160, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r29}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x10000}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r33}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r34}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x1ff}}}]}}, {{0x8, 0x1, r35}, {0x84, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffffff7f}}, {0x8, 0x6, r40}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffffff01}}, {0x8, 0x6, r44}}}]}}, {{0x8, 0x1, r45}, {0x84, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r46}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r48}}, {0x8}}}]}}, {{0x8, 0x1, r52}, {0x170, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x6e}}, {0x8, 0x6, r56}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r60}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r64}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xffff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}]}}]}, 0x874}, 0x1, 0x0, 0x0, 0x4048000}, 0x8040) r65 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r66 = ioctl$KVM_CREATE_VM(r65, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r67 = ioctl$KVM_CREATE_VCPU(r66, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r68 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x400000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r68, 0x4020ae46, &(0x7f0000000000)={0x101ff, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r69, 0x8912, 0x400200) recvfrom$unix(r69, &(0x7f0000000400), 0x0, 0x80000000, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e) ioctl$KVM_SET_REGS(r67, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x11c, 0x4020) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) pread64(r68, &(0x7f0000000300)=""/242, 0xf2, 0x100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r71 = dup(r70) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r71, 0xc0bc5351, &(0x7f0000000180)={0x9, 0x0, 'client1\x00', 0x3, "c2ac19125daeff5c", "04de81e9698b4d667d4dabfbb9eaaa331581bcd518f55cc6db8ad663c9ad5a84", 0x6, 0x25}) ioctl$PERF_EVENT_IOC_ENABLE(r71, 0x8912, 0x400200) ioctl$KVM_RUN(r67, 0xae80, 0x0) ioctl$KVM_RUN(r67, 0xae80, 0x0) [ 360.137980] loop0: rw=12288, want=8200, limit=20 [ 360.195062] attempt to access beyond end of device 23:11:19 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)={0x32}) r1 = socket$inet6(0xa, 0x1, 0x3) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000080)) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/userio\x00', 0x8c000, 0x0) fstatfs(r2, &(0x7f0000000180)=""/215) [ 360.227262] loop0: rw=12288, want=12296, limit=20 23:11:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e0000001600000002", 0x35, 0x1400}], 0x0, 0x0) 23:11:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/pfkey\x00', 0x10000, 0x0) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000340)={0x8, 0x401, 0x1, 0x7fffffff, 0x7, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) accept$netrom(r2, &(0x7f0000000380)={{0x3, @rose}, [@default, @bcast, @remote, @remote, @rose, @bcast, @netrom, @default]}, &(0x7f0000000400)=0x48) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x7ff, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004, 0x485}) r4 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_PARM(r4, 0xc0cc5616, &(0x7f0000000140)={0x5, @raw_data="bc62bfc2e05141b5f822756362b25f750c151ec350ddb949965b5b94bfc3d05ed93eb86d038f9b2a5f80438878a15a52a172cfeef4083bdd41755585339c6faa458135def0ff72fcafd089da1df92825854ad20a3839a367987127c77017806d6a69182e4d58d1996f66ff98104f03004e68728cd80276adc5529ff985a61442fb6947acd63e09f9fa02ff8d9f7a92ae541cdf00d908885bc0291eb273b4b5918ad2dbb52a87d811c600483e9166624a4bf5625a21d654c4e35fbc51fcfca55604ac2a544b9e4ce6"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 360.265950] attempt to access beyond end of device [ 360.292580] loop0: rw=12288, want=8200, limit=20 23:11:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 360.324131] attempt to access beyond end of device [ 360.346063] loop0: rw=12288, want=12296, limit=20 [ 360.448422] attempt to access beyond end of device [ 360.485236] loop0: rw=12288, want=8200, limit=20 23:11:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e0000001600000002", 0x35, 0x1400}], 0x0, 0x0) [ 360.528407] attempt to access beyond end of device [ 360.565705] loop0: rw=12288, want=12296, limit=20 23:11:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 360.596236] attempt to access beyond end of device 23:11:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r3, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x80800, 0x0) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000200)={0x5, 0x61, &(0x7f0000000180)="80d526db1ca38d6771fe6bd695043eb96bf7d72ad79a4415bf6dd406798d5a0ac0b884bdcbfca414095dfe723d4e55580b1801cb4de83e4f0f2b7223832e0db461377f3e2ccf37903e373f0284f09c760795fd7757a8a6f7886fbf88b0f6f14c1d"}) ioctl$UI_BEGIN_FF_ERASE(r3, 0xc00c55ca, &(0x7f0000000100)={0x9, 0x2, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004, 0x485}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 360.657297] loop0: rw=12288, want=8200, limit=20 [ 360.707735] attempt to access beyond end of device [ 360.738994] loop0: rw=12288, want=12296, limit=20 23:11:20 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f00000001c0)={0xb91, 0x3, 0xb095, 0x6, 0x22, 0x80000001}) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f00000002c0)={0x1000, &(0x7f0000000280), 0x0, r0, 0x4}) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000380)=0x30) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000140)={{0x7, 0x6}, {0x8, 0xf6}, 0x5, 0x2, 0xe9}) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 23:11:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:11:20 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r0, &(0x7f0000000100)={0x1f, {0x6, 0x7f, 0x4, 0xd, 0x4}, 0x7}, 0x1e2) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000300)='/dev/admmidi#\x00', 0x4, 0x8000) connect$bt_rfcomm(r2, &(0x7f00000000c0)={0x1f, {0x6, 0x6b, 0x85, 0x6, 0x2}}, 0x30d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r5) stat(&(0x7f0000000340)='./file1\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000200)={0x0, r5, r6}, 0xc) ioctl$VIDIOC_RESERVED(r1, 0x5601, 0x0) r7 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r7, 0x40046109, &(0x7f0000000000)={0x32}) [ 361.243779] attempt to access beyond end of device [ 361.270567] loop0: rw=12288, want=8200, limit=20 [ 361.303439] attempt to access beyond end of device [ 361.329571] loop0: rw=12288, want=12296, limit=20 [ 361.384508] attempt to access beyond end of device [ 361.408160] loop0: rw=12288, want=8200, limit=20 [ 361.429303] attempt to access beyond end of device [ 361.436624] loop0: rw=12288, want=12296, limit=20 23:11:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e0000001600000002", 0x35, 0x1400}], 0x0, 0x0) 23:11:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x103081, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) socket$can_raw(0x1d, 0x3, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f0000000100)={0x1, 0x0, {0x7fff, 0x81, 0x47315cdf, 0x6}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004, 0x485}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:11:21 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)={0x32}) r1 = socket$kcm(0x29, 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r2, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000100)={0x10000007, 0x10001, 0x2}) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000080)) 23:11:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000], 0x1f004, 0x485}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 361.545925] attempt to access beyond end of device [ 361.594345] loop0: rw=12288, want=8200, limit=20 [ 361.618433] attempt to access beyond end of device [ 361.647312] loop0: rw=12288, want=12296, limit=20 23:11:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r3, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$VIDIOC_LOG_STATUS(r3, 0x5646, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mlock2(&(0x7f000001f000/0x3000)=nil, 0x3000, 0x0) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000000180)) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x800, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r6, 0x8008ae9d, &(0x7f0000000140)=""/9) ioctl$KVM_RUN(r2, 0xae80, 0x0) r7 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$KDGKBENT(r7, 0x4b46, &(0x7f0000000200)={0x6f, 0x2, 0x1}) [ 361.703480] attempt to access beyond end of device 23:11:21 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)={0x32}) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000000c0)={0x550a, 0x80000001, 0x7469249257ad0026, 0x81, 0x1, [{0x96, 0xf0, 0x8, 0x0, 0x0, 0xb228bca606af1318}]}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) setsockopt$llc_int(r1, 0x10c, 0x8, &(0x7f0000000140)=0x1, 0x18c) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000080)) [ 361.754795] loop0: rw=12288, want=8200, limit=20 23:11:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x520c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000}, 0x0, 0xd, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004, 0x485}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 361.803927] attempt to access beyond end of device 23:11:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e00000000040000000400", 0x4f, 0x1400}], 0x0, 0x0) 23:11:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000], 0x1f004, 0x485}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 361.866066] loop0: rw=12288, want=12296, limit=20 23:11:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 23:11:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e00000000040000000400", 0x4f, 0x1400}], 0x0, 0x0) 23:11:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:11:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x4f9ba325a89260cb, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$CAPI_INSTALLED(r3, 0x80024322) r4 = socket$caif_seqpacket(0x25, 0x5, 0x5) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f00000003c0)="eb3c906d6b66732e666174000204010002000270fff8943cc0aea901dd9207ba3de7470f5855", 0x26}], 0x0, 0x0) fsetxattr$security_ima(r4, &(0x7f0000000100)='security.ima\x00', &(0x7f0000000480)=@v2={0x5, 0x2, 0x7, 0x40, 0x1000, "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"}, 0x100a, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004, 0x485}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x19) ptrace$cont(0x18, r5, 0x0, 0x0) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r5, 0x0, 0x0) ptrace$getenv(0x4201, r5, 0x7, &(0x7f0000000180)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:11:21 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x2000, 0x0) ioctl$VIDIOC_G_INPUT(r1, 0x80045626, &(0x7f0000000100)) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)={0x32}) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000080)) 23:11:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000], 0x1f004, 0x485}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 362.298729] attempt to access beyond end of device [ 362.358729] loop0: rw=12288, want=8200, limit=20 23:11:21 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)={0x32, 0x0, 0x1, 0x9}) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000080)) [ 362.394474] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 362.405796] attempt to access beyond end of device 23:11:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000000ff], 0x1f004, 0x485}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 362.464762] loop0: rw=12288, want=12296, limit=20 23:11:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0xffffffffffffffa2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r3, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000200)=0x80) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x7a, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000300)={r8, 0xb8, "270d1f824e2b90af41f60e57418d4d7f356a93ee7937e9beecf0583dedd9e1fc52feb9a62fe06bc24bcbaf18275b55dc10a2d2d540f6833f6a27056a29ca7f26324d6d7e1b8b9a53b5c1b967739f33fe8acbc05dad8685e3ea6d57c7b2c1bcb2cf09e603ccd9163665a6e77633e4d7d26fa092af385f3cf17f4521a145c72e797b9c40f2dc94a0e24c5aaa5e7bcc17a3224c5322ae8745458ffb9ede31de04a480df6fc3882cdcfbbfa8683ef0eb8dcacceee010a734f00f"}, &(0x7f00000003c0)=0xc0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKTRACESTART(r10, 0x1274, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000400)={r9, 0x3, 0x7}, 0x8) r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$P9_RRENAMEAT(r11, &(0x7f0000000140)={0x7, 0x4b, 0x2}, 0x7) r12 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 362.561531] attempt to access beyond end of device 23:11:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e00000000040000000400", 0x4f, 0x1400}], 0x0, 0x0) [ 362.598802] loop0: rw=12288, want=8200, limit=20 [ 362.629670] attempt to access beyond end of device 23:11:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r3, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000100)={0x0, 0x89, "5e6b7baa6a9fe9d4e8f2e792dcb23d073db5746bfd80ce66346b3fada2da335d6e9384b977e9ad4e7994ad2d701bf8a81c8ddabf75d5f3a0f1c98676090875acef92c8e2cde8c4c4ac111c6dc07e85268e40871a3d398c3c9dcd95f390f3199cad1d1e787ba3ad19958357bec222260e4e82687370375ac74de12ea7856992b31cc41720f32c36be89"}) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004, 0x485}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 362.671569] loop0: rw=12288, want=12296, limit=20 23:11:22 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x8500, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x8, "aa2f94a3ca9da2da"}, &(0x7f0000000180)=0x10) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x19) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0)=r2, 0x12) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, &(0x7f0000000000)={0x32}) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, &(0x7f0000000080)) 23:11:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000040)=@known='trusted.overlay.origin\x00', &(0x7f0000000080)='\x00', 0x1, 0x2) 23:11:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000000ff], 0x1f004, 0x485}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:11:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c000000100000", 0x5c, 0x1400}], 0x0, 0x0) 23:11:22 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)={0x32}) r1 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xffffffff, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0xe10, 0x1000, 0x40, 0x3, 0x3, 0x9e, 0xac, 0x4, 0xff, 0x1, 0x0, 0x1, 0x6}, {0x3, 0x7, 0x7e, 0x9, 0x2, 0x9, 0x35, 0xff, 0x1, 0x1, 0x1, 0x6, 0x7ff}, {0x80, 0x100, 0x80, 0x2, 0x7f, 0x4, 0x1f, 0x8, 0x7, 0x8c, 0x1, 0x4, 0x6134}], 0x5}) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={r2, 0x8, 0x30}, 0xc) 23:11:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000000ff], 0x1f004, 0x485}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 363.175306] attempt to access beyond end of device 23:11:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r3, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) openat$cgroup_ro(r3, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x100000000, 0x80400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r6, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$BLKBSZGET(r6, 0x80081270, &(0x7f0000000100)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video2\x00', 0x2, 0x0) 23:11:22 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x90000, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000000)={0x32, 0x81}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000080)={0xfffffffffffffffe, 0x0, 0x100}) [ 363.219332] loop0: rw=12288, want=8200, limit=20 [ 363.258337] attempt to access beyond end of device 23:11:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004, 0x485}) ioctl$KVM_RUN(r2, 0xae80, 0x0) link(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 363.278913] loop0: rw=12288, want=12296, limit=20 23:11:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c000000100000", 0x5c, 0x1400}], 0x0, 0x0) [ 363.379608] attempt to access beyond end of device [ 363.409941] loop0: rw=12288, want=8200, limit=20 [ 363.436666] attempt to access beyond end of device [ 363.463348] loop0: rw=12288, want=12296, limit=20 23:11:23 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)={0x32}) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x2) 23:11:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c000000100000", 0x5c, 0x1400}], 0x0, 0x0) 23:11:23 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xee97b8d4e533d56c, 0x4, 0xfffffffc, 0x0, 0x0, 0x0, 0x7fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xff, 0x0) recvmsg(r0, &(0x7f00000001c0)={&(0x7f0000000040)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)=""/65, 0x41}, {&(0x7f00000001c0)}, {&(0x7f0000000380)=""/223, 0xdf}], 0x3, &(0x7f00000002c0)=""/82, 0x52}, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 23:11:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$CAPI_GET_ERRCODE(0xffffffffffffffff, 0x80024321, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:11:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004, 0x485}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:11:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000900)=0xe8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="840000002c00010700"/20, @ANYRES32=r6, @ANYBLOB="0008008000000000030000000800010075333200580002001400050000000000000000000000000000000000400006003c0001000000000000001020898dde66057433b6ef3a41d22be225e0001b00000000000000000000000000000000000000000084e1a912c5998bcbf050000000000000000000000000000000798a3c067277da1a290b9613a33c575c36fad473382c8f5532ef3f0e1d2c450a7decbf3431a69f9b2ecb3291bed174245a962fe0484676958265e2988326a89db3139d91fe4aee6ae7e745abdfc21a9f61f2035979c1e3e9fea5b3958bc14fce6e66a36d1ab3194534ba4e973684b27793bff837d3"], 0x84}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000340)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000380)="95cb7005177ee10f878140c35724bb236eb3cc17c3207603ef1cc935de7ebb9153863f3f2459fdfc76c865e76e68b58a54504c800e58c7fea0ab8f88df12e2f7d060ac9cc991aa77bdd537eb45f5c789ba2fcff5d3e4a347ad83175fe7c2637684678229a617a8546aa3bbece41c08828c6336c55712377dbb0bbaa7e2ee5d2594e36fe82857f8d413f8828154c3d76a492c648a", 0x94}, {&(0x7f0000000480)="547570ee3b11d95a5a6e2938c7161f52780f05406db0ea059a1ff5653720758ed60d72175019eaa327cb2101e3446c629fa1ae033db4a0d85e13da1a9bad38daff40e0067339bc205bb574bb6f7230598c8089d5540caac3fc73ea06cdf3eea45aaf4432db83", 0x66}, {&(0x7f0000000500)="713f60537253f33e3f66ee64fb8a05dd3f006a5adaff71c9a163347eca94d92f8e6c349a7df88cb5b192f6fc934c113f4acb70ec8d9dedab29e6e45e908af68f4ac9253f20ff224d74a9b40535cfa5aad99e48716176a3c6e47d54bc11d4354fa3f8685c3270b2393b3e7731fc95e081ef000b2f423b9bff132dc6e2fb329e71f6fd9a908da4f4652440754c5bfeb27445880fa5a7b2276d08", 0x99}, {&(0x7f00000005c0)="597f5f815429d1c2de4642a92747aec5cb07306fc2c3226aa534249a772cc3db5f5db39a63e2f7b50f4e68d6c89c1d1789d29d0619e6", 0x36}, {&(0x7f0000000600)="e875408ce04cbfe3ec6d2fe99d68ed8d6c8c44d2e0640c09e08e89aa2cfaf03d839c8177e525e12c072e750e0217b9e024c2c34acebb0c3fbe7308aa1a3a5613e46ee8186c411922ab1bc3a54c7917", 0x4f}, {&(0x7f0000000680)="3beaccc3f567206d7b623885ba83029fc93fd122ad061aa1f07f24e8a70ecb9c2cf89a575e1909656c5be24e801f598f0e61821be09f97643a764aa460f042862a472541abe0ccf8a4026f102c7ca874a255047455afb72634082e3f2f88403811c77814344bb0bdf2c1427d", 0x6c}, {&(0x7f0000000700)="a29411b4c9555f3df583d5f225d937512ae4423fbbd12b200819b0241ea4a7828ef02d3fa796882e7eb4d644ecc8814e888e3e3218a7f768e040fe99a84ec847cb23e28343ff05e6f832e988cf879d48bc89390e", 0x54}], 0x7, &(0x7f0000000940)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @broadcast, @dev={0xac, 0x14, 0x14, 0xa}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @multicast1, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_retopts={{0x74, 0x0, 0x7, {[@end, @rr={0x7, 0x7, 0x9, [@empty]}, @rr={0x7, 0x13, 0x9, [@dev={0xac, 0x14, 0x14, 0x2b}, @remote, @empty, @local]}, @rr={0x7, 0xf, 0x5, [@local, @remote, @broadcast]}, @ra={0x94, 0x6, 0x80000000}, @ssrr={0x89, 0x7, 0x3, [@broadcast]}, @ra={0x94, 0x6, 0x7}, @generic={0x86, 0x11, "9f2dbb81ff5f7719f11523628d1e72"}, @timestamp={0x44, 0x14, 0x6, 0x0, 0xa, [{[@initdev={0xac, 0x1e, 0x0, 0x0}], 0x3}, {[@local], 0x400}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x148}, 0x4000000) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) socket$inet(0x2, 0x6, 0xc1) ioctl$IOC_PR_RESERVE(r8, 0x401070c9, &(0x7f0000000300)={0x20, 0xfffffffd}) r9 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14223, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x1f004, 0x485}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, r9, 0x0, 0x9, &(0x7f0000000100)='/dev/kvm\x00'}, 0x30) prlimit64(r10, 0xb, &(0x7f0000000180)={0x7, 0x4}, &(0x7f00000001c0)) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) [ 363.798206] f2fs_msg: 158 callbacks suppressed [ 363.798223] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) 23:11:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004, 0x485}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 363.856118] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 363.869948] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 363.889986] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 23:11:23 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)={0x0, 0x0, 0x80000000}) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000080)) [ 363.938614] attempt to access beyond end of device [ 363.943315] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 363.968760] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 23:11:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup3(0xffffffffffffffff, r3, 0x80000) linkat(r6, &(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 363.985587] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 364.005029] loop0: rw=12288, want=8200, limit=20 [ 364.026530] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 364.029016] F2FS-fs (loop0): invalid crc value [ 364.075271] attempt to access beyond end of device [ 364.093022] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 364.103231] loop0: rw=12288, want=12296, limit=20 [ 364.145604] attempt to access beyond end of device [ 364.183194] loop0: rw=12288, want=8200, limit=20 23:11:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004, 0x485}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 364.209924] attempt to access beyond end of device 23:11:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000", 0x63, 0x1400}], 0x0, 0x0) 23:11:23 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$NBD_DISCONNECT(r0, 0xab08) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000000)={0x32}) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000080)) [ 364.272601] loop0: rw=12288, want=12296, limit=20 23:11:23 executing program 0: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 23:11:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000019000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000100)="48b80b000000000000000f23c00f21f835010001000f23f8c744240030000000c7442402c9680000ff2c24d9f8c4027dba380f218dda1cab3667450f0f490c8a42d9e80f060f20e035100000000f22e0", 0x50}], 0x1, 0x31, &(0x7f00000001c0)=[@cstype0], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:11:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004, 0x485}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) ioctl$KVM_NMI(r3, 0xae9a) 23:11:24 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)={0x32}) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000080)) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000000c0)={0x1000000d, 0x1000, "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"}) 23:11:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000", 0x63, 0x1400}], 0x0, 0x0) 23:11:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x0, 0x485}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 364.761770] attempt to access beyond end of device 23:11:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r2, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mknod(&(0x7f0000000100)='./file0\x00', 0x100, 0x4) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff, 0x0, 0x0, 0xfffffffffffffffd], 0x1f004, 0x485}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 364.805464] loop0: rw=12288, want=8200, limit=20 [ 364.838860] attempt to access beyond end of device [ 364.863751] loop0: rw=12288, want=12296, limit=20 23:11:24 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl(0xffffffffffffffff, 0x1f, &(0x7f0000000140)="b13648d3be8d1efc65f2b4") ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000100)=@generic={0x2, 0x5, 0x1}) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)={0x32}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0xffffd1ec, 0x5}, 0xc) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000080)) [ 364.927038] attempt to access beyond end of device 23:11:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000", 0x63, 0x1400}], 0x0, 0x0) 23:11:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x0, 0x485}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 364.990291] loop0: rw=12288, want=8200, limit=20 [ 364.996362] attempt to access beyond end of device [ 365.036176] loop0: rw=12288, want=12296, limit=20 23:11:24 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='\x00\x00\x00\x00\x00\xff\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)={0x32}) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/142, 0x8e}], 0x1) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000080)) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x1) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000fff000/0x1000)=nil, 0x6, 0x3, 0x50, &(0x7f0000ffe000/0x2000)=nil, 0x5}) 23:11:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000100)={0x4, 0x6262ac99, 0xf73}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r3, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = dup3(r4, r5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x7a, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000) r8 = socket$inet(0x2, 0x4000000805, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) r10 = dup3(r8, r9, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r10, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r11 = syz_open_dev$dmmidi(&(0x7f0000000300)='/dev/dmmidi#\x00', 0x5, 0x80) sendto$inet(r11, &(0x7f0000000340)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @broadcast}, 0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0x7a, &(0x7f000059aff8)={r12}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000140)={r7, 0x4, 0x7bd, 0x22, 0x4, 0xf16, 0x401, 0x505, {r12, @in6={{0xa, 0x4e23, 0xfffffc01, @mcast2, 0x87}}, 0x5, 0x0, 0xff, 0x7fffffff, 0x7ff}}, &(0x7f0000000200)=0xb0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup(r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:11:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004, 0x485}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/mls\x00', 0x0, 0x0) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000140)={0x30000000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:11:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x0, 0x485}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:11:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100", 0x66, 0x1400}], 0x0, 0x0) 23:11:25 executing program 4: ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f00000000c0)={0x7, 0x4, 0x2, 0x10000}) r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)={0x32}) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000080)) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="020030ecd09693e7e611f379abdf7f0000", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x7a, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r4, 0x8000, 0x4, 0x8}, 0x10) [ 365.493479] audit: type=1400 audit(1574550685.003:94): avc: denied { block_suspend } for pid=13265 comm="syz-executor.5" capability=36 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 23:11:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0xffffffffffffffe0, 0x18040) setsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000200)=0x4ad, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x80, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000140)={0x210, @tick=0x101, 0x49, {0x97, 0x3}, 0x8, 0x2, 0x6}) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:11:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004, 0x485}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000100)={0x14, 0x67, 0x1, {0x8, 0x4, 0x2}}, 0x14) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 23:11:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:11:25 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000100)=0x7fffffff, 0x4) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000000)={0x32}) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0x6, 0xf800, 0xfff, 0x7}, 0x8) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000080)) 23:11:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100", 0x66, 0x1400}], 0x0, 0x0) 23:11:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) r0 = semget$private(0x0, 0x8, 0x0) semctl$GETZCNT(r0, 0x1, 0xf, &(0x7f0000000600)=""/4096) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000001500)=""/233) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000140)=[0x0]) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r4) getgroups(0x2, &(0x7f0000000180)=[0xee01, 0xee01]) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r6, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f00000001c0), &(0x7f0000000300)=0x4) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000280)={{0x8, r1, r2, r4, r5, 0xa0, 0x60}, 0xfff, 0x100000001}) 23:11:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004, 0x485}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) set_thread_area(&(0x7f0000000100)={0x8, 0x20001000, 0xffffffffffffffff, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1}) 23:11:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x58517c0d44ff7ed2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xe}, 0x1480, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xc, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x5d35b2cca49de291) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r4, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) setsockopt$IP_VS_SO_SET_ZERO(r4, 0x0, 0x48f, &(0x7f0000000140)={0x3a, @multicast2, 0x4e20, 0x2, 'wrr\x00', 0x2, 0x1, 0x5f}, 0x2c) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:11:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:11:25 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)={0x32}) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000080)) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f00000000c0)=0xff) 23:11:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100", 0x66, 0x1400}], 0x0, 0x0) 23:11:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x1fff, 0x20000000ff, 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x40], 0x1f004, 0x485}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:11:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:11:26 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0) write$FUSE_OPEN(r1, &(0x7f0000000040)={0x20, 0x0, 0x5, {0x0, 0x2}}, 0x20) 23:11:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c000000100000001400000300000001000000", 0x68, 0x1400}], 0x0, 0x0) [ 366.776027] attempt to access beyond end of device [ 366.806819] loop0: rw=12288, want=8200, limit=20 [ 366.837675] attempt to access beyond end of device [ 366.860615] loop0: rw=12288, want=12296, limit=20 23:11:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:11:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f6055067f3af", 0x34}], 0x1, 0x6, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r2, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000100)=0x2, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r4, 0x6) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x7a, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000001c0)={0x789c, 0x0, 0x3, 0x20, r8}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x699e, 0x2000, 0x20000000ff], 0x19006, 0x6cb56c5ef758daaf}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) lsetxattr$security_ima(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='security.ima\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="0269c0ce5fd55dcb50c4c4df40ae17d02500831ca62cd9284426d904c8cd980839d54d9c228936fb5dfe6c83087428f0a8cb6c133a57beb296485bcadd897c766a695a07dd4169dc236f189cd4c29f1ea8e66b8080eaa2a65fd973acdb1652b5eee169fd1fda43a199ddd741b148a894b6b10456196b0336e519da665fb6a55693d4363d7a27bcefae58c520bfc55e76c5173f8eec6afdb7bdac5a7b7b91b1d6b3368d271382d95464a946e89e7467cfbc1c899fd7f26626c22c27479053598a7617b818dc412f49a301314355c9cf97229377e27c63096b8e977f3004fc5e778d1f593b11406fcc0dffe0aef95648d40c3d540d869311557ae21b29b90bf7b8e6948e2897d63f35d60f942beb87bfb66b467a47950a686c1b2a31ab77e265a75645181003d505578a90a7627839902ed43c5cf34745c65c1ffafe3ee25476d58fac41db851160f9831fc7113722477b92dfab4343bf91e4ca2c7ff9f58e5cdd5e16a48bcaf5cb8c6df84dc1082dd24ef210ed076626008decaa7839e115a0bc159771da1f926b465bb5b2"], 0x8, 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x10000, 0x0) [ 366.892725] attempt to access beyond end of device [ 366.898083] loop0: rw=12288, want=8200, limit=20 [ 366.946546] attempt to access beyond end of device [ 366.977440] loop0: rw=12288, want=12296, limit=20 [ 367.092784] *** Guest State *** 23:11:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 367.121666] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 23:11:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) connect$ax25(r1, &(0x7f0000000100)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004, 0x485}) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000180)={0xc000, {0x0, 0x7, 0x3ff, 0x3, 0x0, 0x52d}}) ioctl$KDSETMODE(r1, 0x4b3a, 0x80) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:11:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c000000100000001400000300000001000000", 0x68, 0x1400}], 0x0, 0x0) [ 367.169904] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 367.218255] CR3 = 0x00000000fffbc000 [ 367.239261] RSP = 0x00000020000000ff RIP = 0x0000000000019006 [ 367.260717] RFLAGS=0x6cb56c5ef758daaf DR7 = 0x0000000000000400 23:11:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 367.292224] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 367.378531] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 23:11:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c000000100000001400000300000001000000", 0x68, 0x1400}], 0x0, 0x0) [ 367.431729] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 367.451030] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 367.473792] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 23:11:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x19) ptrace$cont(0x18, r1, 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x7f, 0x80000) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000280)={0x16, @rand_addr=0x5, 0x4e24, 0x1, 'dh\x00', 0x0, 0x901, 0x58}, 0xfffffffffffffe43) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000300)) r3 = gettid() wait4(r3, &(0x7f0000000040), 0x1, &(0x7f0000000380)) [ 367.526842] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 367.557972] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 23:11:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 23:11:27 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)={0x32}) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000080)) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='\xab\x1f\x00\x00\x00\x00\x00\x00\xf5\x00', 0x10200, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r3, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000200)=0x2) connect$bt_rfcomm(r2, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/infin\xac\xcaald/zdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x8, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x1) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r5, 0x30, 0x0, @ib}}, 0x17) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, [], 0x13}, 0x7fffffff}, {0xa, 0x4e21, 0xfffffff8, @local, 0x8}, r5, 0x1}}, 0x48) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e22, 0xffffffff, @empty, 0xefd0}, {0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, [], 0x29}, 0x3f}, 0x40, [0x7, 0x401, 0x9, 0x1000, 0x2, 0x5, 0x0, 0x401]}, 0x5c) [ 367.626079] GDTR: limit=0x0000ffff, base=0x0000000000000000 23:11:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x153001, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r3, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000140)={0x0, 0xe0, 0x7}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000001c0)={r4, 0x54039e07}, &(0x7f0000000200)=0x8) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004, 0x485}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 23:11:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69}], 0x0, 0x0) [ 367.687223] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 367.754812] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 367.813240] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 367.840672] *** Guest State *** [ 367.889472] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 367.912750] EFER = 0x0000000000000000 PAT = 0x0007040600070406 23:11:27 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)={0x32}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x3230c3, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000080)) [ 367.973096] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 367.982689] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 368.068383] Interruptibility = 00000000 ActivityState = 00000000 [ 368.087039] CR3 = 0x00000000fffbc000 [ 368.111130] RSP = 0x00000020000000ff RIP = 0x0000000000019006 [ 368.119982] *** Host State *** [ 368.149127] RIP = 0xffffffff81179e70 RSP = 0xffff88804e70f998 [ 368.195625] RFLAGS=0x6cb56c5ef758daaf DR7 = 0x0000000000000400 [ 368.246944] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 368.257249] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 368.283105] FSBase=00007f131c78b700 GSBase=ffff8880aef00000 TRBase=fffffe0000034000 [ 368.300670] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 368.308799] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 368.331531] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 368.339655] CR0=0000000080050033 CR3=0000000097043000 CR4=00000000001426e0 [ 368.349521] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 368.363604] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff862018e0 [ 368.372338] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 368.384768] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 368.393304] *** Control State *** [ 368.397095] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 368.409537] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 368.418479] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 368.432270] EntryControls=0000d1ff ExitControls=002fefff [ 368.438178] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 368.449241] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 368.463452] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 368.473529] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 368.486918] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 368.496331] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 368.507673] reason=80000021 qualification=0000000000000000 [ 368.516851] IDTVectoring: info=00000000 errcode=00000000 [ 368.522704] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 368.522717] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 368.522724] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 368.522729] Interruptibility = 00000000 ActivityState = 00000000 [ 368.522732] *** Host State *** [ 368.522739] RIP = 0xffffffff81179e70 RSP = 0xffff88804cedf998 [ 368.522752] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 368.522759] FSBase=00007f131c727700 GSBase=ffff8880aef00000 TRBase=fffffe0000003000 [ 368.522766] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 368.522775] CR0=0000000080050033 CR3=0000000097043000 CR4=00000000001426e0 [ 368.522784] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff862018e0 [ 368.522792] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 368.522795] *** Control State *** [ 368.522800] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 368.522805] EntryControls=0000d1ff ExitControls=002fefff [ 368.522813] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 368.522818] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 368.522823] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 368.522828] reason=80000021 qualification=0000000000000000 [ 368.522832] IDTVectoring: info=00000000 errcode=00000000 [ 368.522837] TSC Offset = 0xffffff380f4b5cec [ 368.522842] EPT pointer = 0x0000000054a9801e [ 368.522850] Virtual processor ID = 0x0001 [ 368.559649] TSC Offset = 0xffffff3880e36d4d [ 368.584278] EPT pointer = 0x00000000a9ae401e [ 368.673477] Virtual processor ID = 0x0002 23:11:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x19) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) r4 = getpgid(r3) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r4, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x100000, 0x485}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x84000, 0x0) ioctl$KVM_SET_TSS_ADDR(r5, 0xae47, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:11:28 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0) write$FUSE_OPEN(r1, &(0x7f0000000040)={0x20, 0x0, 0x5, {0x0, 0x2}}, 0x20) 23:11:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x80000, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000140)={0x1, 'team_slave_1\x00'}, 0x18) r5 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:11:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69}], 0x0, 0x0) 23:11:28 executing program 4: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$KVM_PPC_GET_PVINFO(r0, 0x4080aea1, &(0x7f0000000100)=""/194) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000000)={0x32}) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8a236488}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x90, r2, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x4}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x52}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x4, 0x2, 0xfffffff7, 0x3, 0xa159]}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7fffffff}]}, 0x90}, 0x1, 0x0, 0x0, 0x4040000}, 0x40010808) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000080)) 23:11:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000380)={0x41, 0x2, &(0x7f0000000200)="d152830efeef986a6e4f6b2dec3ba3e5e439021ecf927bb09fd51d95408701ed4a43102fad595bf8b668265aa77c89a3742d0c596daf5abea98b8af20ea9", {0x3, 0x8, 0x3247504d, 0x0, 0x80000000, 0x7ff, 0x0, 0x60000000}}) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="702f161c419f7f5dcf0959c70ecc", 0x0, 0x3}, {&(0x7f0000000280)="0872c034f74966898df60623e4138802513e35b16858a0c14b2d20c4ea4e44c41e566c88d23088c7be9e988aa1dc4727079775c205b9f2af6d8269c0db40eaff2c071076fb7360d6575396fa8ab0381530d232fba1852cc0f956e5e29779287a6f97ebc307dfe7823770fb33fccc98ae93e97ee6a211321aebd9bcc035e17a3b138a9a04deab561cc1d74a72419008b075f79008", 0x0, 0x9}], 0x0, 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/142, 0x8e}], 0x1) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x5, 0xfffffffffffeffff, 0x6, 0x8918, 0x200, 0x7f}) 23:11:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000", 0x63, 0x1400}], 0x0, 0x0) [ 368.980902] f2fs_msg: 108 callbacks suppressed [ 368.980950] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 23:11:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup3(r2, r2, 0x80000) write$P9_RCREATE(r3, &(0x7f0000000100)={0x18, 0x73, 0x2, {{0x10, 0x2, 0x3}, 0x1}}, 0x18) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004, 0x485}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:11:28 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)={0x32}) ioctl$RTC_PIE_OFF(r0, 0x7006) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000080)) [ 369.076968] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 23:11:28 executing program 2: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 369.171495] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 369.241734] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 369.276403] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 369.319586] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 369.369847] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 23:11:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r3, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000, &(0x7f000001d000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:11:28 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/142, 0x8e}], 0x1) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x240, 0x0) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x0, 0x0) r4 = epoll_create(0x4) fsetxattr$trusted_overlay_upper(r4, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f00000002c0)={0x0, 0xfb, 0xe0, 0x4, 0xff, "dbfcdc427a97a7a8793d5751274ecdb2", "066252874ee575a8e4847d5de190870e6b61f7a45bbfdc262f47a94aa45602e789e7ae3d35e668f3c67f444a47e62e283ea79044b8c54a98565c64bc164e3ba8a34e3c41282748a9415ddfee044c0d4200ea175266e9c7bc67ba92ad541a07aa89769bd0753ee59ef1ab09764f066694d8f08bc6fe7032684fe9acc479d05ea2ef688f88a2095f896186d2f27e62d8ebb5a4c2e18d1afb58097ad94d426d7965324074de834a3f2403db26ec9b7589b9576f5d01b52a0010d568384c10570b8421a2b18e781b57780b181d"}, 0xe0, 0x1) readv(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/142, 0x8e}], 0x1) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000080)) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r5, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer\x00', 0x6be11d9a7f2803bc, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f00000003c0)={{0x89, @local, 0x4e22, 0x4, 'nq\x00', 0x12, 0x7961, 0x17}, {@rand_addr=0x3ff, 0x4e23, 0x1, 0x81, 0x200, 0xfffffffc}}, 0x44) getuid() fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r9) fchown(r3, r9, r7) fcntl$dupfd(r1, 0x406, r2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)={0x32}) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000080)) [ 369.416492] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 23:11:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000040)=@known='trusted.overlay.origin\x00', &(0x7f0000000080)='\x00', 0x1, 0x2) 23:11:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69}], 0x0, 0x0) 23:11:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) prctl$PR_SET_UNALIGN(0x6, 0x5) close(r7) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="99b500", @ANYRES16=r8, @ANYBLOB="0fe400000000000000000100000000000000014100000003001700000000000000006574683a726f736530000000"], 0x3}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r6, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000810}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r8, 0x300, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4107, 0x0, {0x10, 0x18, {0x7fffffff, @bearer=@l2={'eth', 0x3a, 'nr0\x00'}}}}}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r8, 0x300, 0x70bd27, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4400a080) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004, 0x485}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) [ 369.766752] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 369.810346] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 23:11:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2442, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x7, 0xfffffffffffffffd, 0x0, 0x2000, 0x20000000ff, 0x0, 0x10000000], 0x1f004, 0x80000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fstat(r0, &(0x7f0000000100)) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r5, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$SCSI_IOCTL_SYNC(r5, 0x4) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000180)) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="b90bdb34266e2bc7ba7183d405881a000000000000000800000038872b410000000005e530acae0000000500000000000000de368664ba87c90b0500000000000000a9b4000000000000000000ffffffffffff7f000000000000f949853a"]) ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x8, 0x4, 0x8278c854e00e339e, 0x1, 0x7, 0x5, 0xd2e, 0x6, 0x81, 0x1f, 0x5, 0x5, 0x4, 0x7fffffff, 0x0, 0x20}}) 23:11:29 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)={0x9, 0x0, 0x8}) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/142, 0x8e}], 0x1) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000080)) write$binfmt_elf64(r1, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], 0x1578) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000080)) 23:11:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 23:11:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getpeername(r0, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, &(0x7f0000000080)=0x80) 23:11:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e00000000040000000400", 0x4f, 0x1400}], 0x0, 0x0) 23:11:29 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)={0x32}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x98141, 0x0) connect$x25(0xffffffffffffffff, &(0x7f00000001c0)={0x9, @null=' \x00'}, 0x12) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f00000000c0)=""/210) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000080)) recvfrom$inet6(r1, &(0x7f0000000200)=""/166, 0xa6, 0x0, 0x0, 0x0) [ 370.307431] attempt to access beyond end of device 23:11:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x71b79a0, 0xa200) write$FUSE_STATFS(r3, &(0x7f00000001c0)={0x60, 0x0, 0x6, {{0x1a9, 0xff, 0x1, 0xad3, 0x4, 0x80000000, 0x1, 0x4044}}}, 0x60) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r5, 0xc0096616, &(0x7f0000000140)={0x1, [0x0]}) r6 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 370.345206] loop0: rw=12288, want=8200, limit=20 [ 370.355479] attempt to access beyond end of device [ 370.376851] loop0: rw=12288, want=12296, limit=20 23:11:29 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f00000001c0)={0xb91, 0x3, 0xb095, 0x6, 0x22, 0x80000001}) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f00000002c0)={0x1000, &(0x7f0000000280), 0x0, r0, 0x4}) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000380)=0x30) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000140)={{0x7, 0x6}, {0x8, 0xf6}, 0x5, 0x2, 0xe9}) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 370.425323] attempt to access beyond end of device [ 370.441240] loop0: rw=12288, want=8200, limit=20 [ 370.459682] attempt to access beyond end of device 23:11:30 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)={0x32}) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x19) ptrace$cont(0x9, r1, 0x3ee6091, 0x3) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) fcntl$setown(r0, 0x8, r1) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000080)) 23:11:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e0000001600000002", 0x35, 0x1400}], 0x0, 0x0) [ 370.487529] loop0: rw=12288, want=12296, limit=20 23:11:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r2, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r3, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000000300)=""/199, &(0x7f00000001c0)=0xc7) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000100)="b9800000c00f3235004000000f309a6d0000007300660f3882414d66b832008ec83e0fba6f0000c7442400390946e0c744240200080000c7442406000000000f01142466baf80cb8e000f080ef66bafc0ced5bf30f09260f35", 0x59}], 0x1, 0x0, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r4, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f0000000200)=0x4, 0x4) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10001, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004, 0x485}) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/autofs\x00', 0x40000, 0x0) ioctl$BLKIOMIN(r6, 0x1278, &(0x7f0000000480)) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x10003, 0x881fa15c98e9d1f8, 0xf000, 0x1000, &(0x7f0000027000/0x1000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 23:11:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$TIOCCBRK(r0, 0x5428) 23:11:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0xffffffffffffffae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x3}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) 23:11:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getpeername(r0, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, &(0x7f0000000080)=0x80) [ 370.825836] attempt to access beyond end of device 23:11:30 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000000)={0x32}) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000080)) [ 370.879114] loop0: rw=12288, want=8200, limit=20 [ 370.918419] attempt to access beyond end of device 23:11:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x3f, 0x600100) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) chdir(&(0x7f0000000100)='./file0\x00') ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004, 0x485}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:11:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e0000001600000002", 0x35, 0x1400}], 0x0, 0x0) [ 370.978975] loop0: rw=12288, want=12296, limit=20 23:11:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000000480)=""/4096) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0xffffffffffffffc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = dup2(0xffffffffffffffff, r2) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r4, 0x111, 0x4, 0x1, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000340)={&(0x7f0000000200), &(0x7f0000000300)=""/38, 0x26}) r7 = gettid() ptrace$setopts(0x4206, r7, 0x0, 0x0) tkill(r7, 0x19) ptrace$cont(0x18, r7, 0x0, 0x0) ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r7, 0x0, 0x0) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x224c00, 0x0) connect$bt_rfcomm(r8, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$TIOCGPGRP(r8, 0x540f, &(0x7f00000001c0)=0x0) setpgid(r7, r9) r10 = getpgrp(0x0) ptrace$cont(0x20, r10, 0x232, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 371.019122] attempt to access beyond end of device 23:11:30 executing program 4: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$P9_RSYMLINK(r0, &(0x7f0000000100)={0x14, 0x11, 0x2, {0x1, 0x2, 0x8}}, 0x14) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000000)={0x32}) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000080)) [ 371.067266] loop0: rw=12288, want=8200, limit=20 [ 371.111803] attempt to access beyond end of device [ 371.121294] attempt to access beyond end of device [ 371.161016] loop0: rw=12288, want=12296, limit=20 [ 371.166361] loop1: rw=12288, want=8200, limit=20 [ 371.205859] attempt to access beyond end of device 23:11:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000000)=0x9, 0x4) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 371.263111] loop1: rw=12288, want=12296, limit=20 23:11:30 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x3, 0x3f, 0x7, 0x0, 0x4, 0x800, 0xe, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x99c7fecfe27ad54f, @perf_config_ext={0xfffffffffffffffd, 0xffffffff}, 0x4, 0x81, 0x3, 0x5, 0x3945, 0x3ff, 0x4}, 0x0, 0x5, r0, 0x8) [ 371.322581] attempt to access beyond end of device [ 371.327965] loop1: rw=12288, want=8200, limit=20 23:11:30 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)={0x32}) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x15a) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000080)) 23:11:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000140)=0x3, 0xb861, 0xc) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x1004, 0x2000, 0x20000000ff, 0x0, 0x0, 0x0, 0x9eb7, 0x0, 0x8000000007, 0x0, 0x0, 0x100000000000733], 0x1f004, 0x485}) syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 371.410449] attempt to access beyond end of device [ 371.415755] loop1: rw=12288, want=12296, limit=20 23:11:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x8, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r5, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:11:31 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x2000, 0x0) setsockopt$inet6_dccp_buf(r0, 0x21, 0x54, &(0x7f0000000380)="38aad7f69de0603322a51aa8c500fe62b7f30487d2a8cab33a81ac36b82c02e9a86acbe4fc4926fdaa0116a3516f3fbe93d37ab0e21bea9e5ba1d99dc7beeaacafa1beba3b6bbb29a8e631b90885522a326151ac26956d52a8f9e1453d803c3aefea6984778316a0afe4b83f79cceba93b11287e5ee4177982e5b5014f67d57a5a9721d1e8ae254ebf659ba737230b65b71adb539082546e6f808b53d54e315a0d3fea19e542a2f670e1388d627f5f61bebc68b5c3f405e0ed44241408ea5d4a07010b06389f", 0xc6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 371.568079] attempt to access beyond end of device [ 371.606728] loop0: rw=12288, want=8200, limit=20 [ 371.654414] attempt to access beyond end of device [ 371.712735] loop0: rw=12288, want=12296, limit=20 23:11:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r5, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r5, &(0x7f0000000100)="25ecba36760575093b6d3190a32453fc845c2e95828c529b0668b6c2c17907304caa89fb22c33d84e1fc450563b29bfd78b5446eb2e9e5fabc198ea524906533b6815ffa72e4c23f0bdea7b015094dc72a5b47459303c88e0004a851bc3e829cffbe250f7be0a25ccf51b2be2893888761abebfce99269ec364d70d40f491ab6f42d5148e0e1525780d3b733e31844037dc8e140716cb98c1baffd906fa6d1d229889f768045a551aa1e3590320c3c689c9b193df97e37117c5b21083da61e15cec7fe6268aecaaf523e14fb999a36567473abf3e626093b50fc44902b110cb1", &(0x7f0000000300)=""/121, 0x4}, 0x20) 23:11:31 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)={0x32}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x25, 0x7f, 0x4, 0x9, 0x6}, 0x7}, 0xa) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f00000000c0)) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x800000}) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) [ 371.797628] attempt to access beyond end of device 23:11:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r3, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000100)={0x9, 0x80, 0x5, 0x401, 0x3, 0x80, 0x1, 0x3, 0x100, 0xe21, 0x401, 0x7f}) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004, 0x485}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 371.844905] loop0: rw=12288, want=8200, limit=20 23:11:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x8000) [ 371.873474] attempt to access beyond end of device [ 371.887099] loop0: rw=12288, want=12296, limit=20 23:11:31 executing program 4: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)={0x32}) sendmsg$nl_generic(r0, &(0x7f0000001200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000011c0)={&(0x7f0000000100)={0x10a8, 0x40, 0x4, 0x70bd2b, 0x25dfdbfd, {0x3f}, [@nested={0x1004, 0x88, [@generic="811d421eb3d3fde3a69f7a9ba20d761fe3d7cef15c1c3fa1d6785f05b9f7251783f0485630ffbd35816c336984f2d7759b06faf5a92ffdc214f8275ac00400c33d12967836eb7999338c5f117191bcd61872ec4938c4bed14b66845dffbc11e223767f47992f1314c4fa9e72b813b87d2eb05884b9e6720d818aebe39de665644c5cb31d091a07a749486437c18cae9994fb6cd5806b95f56139e6314c0f52e6ffa1672550cdc881dc3b5c13c8b2253c6c40895ba38091b2dc65b65f3af209d1e103277a575442b0d59e3f739377a5ccbeca062a226341c2f201ef5bc70744649ab341f7aeb0bf80fd2aa5b996335bc0eaa3a28a1dbc6a5dbd83c0725a1e31107a8c662f1367c4a09a56fe1f064b6bbe49ef1e2346d54ce35bbcea879a76466e099ef112992309c9d644f1aede1f08f55d2d0c2520561f1bb1a7afbc12d20bbc9549df83c04b151075179056b85d90e4d0c4eb53d1020f74f0f971a3834225db9c12e247c8c870c68e31f6750a11c701b5d61f02e2a6095801bf54bfa523ff4bf075170786820d85b6dc9ec274c8fd605ac46503ca2fb6ce43d3a50f6e51d5dab6abd8b715b14640e7a0f8bd0c3ae94f142a52aae12cbd26c71857d694ec6836fe3f572f7441fc01ff932c30219c4f2cead771c91f9f40f548efc97eb2102d64d8e2405772cbfa4068fd2f2cfab8175d24f5c1a9097243c0a90ed2cc0378feaef58172e0f3a7df43fdc51f723895a77cda0be7d99ff814b74f1a3ce6978882e50ee200e5180e4144bb6ee23601a0b780fe6ae7c05e05eb0ebc1422d48c6f633ed4b7adbcdaa1c474d3b911cb4f56bcc43c8101ad2c9961ef9b51081a953f28110213e29f26cfe5b6136a9414b1fa6108b36a043e630769473eee36af6c2f294bf1fd2d50019fdb8bc43528d9b27d999b51ea6ac1378444217ddd365ec7748b3b73f03c9bee43c8e95aa2e417a02b28ed4da2f4107cd48392a76cfef7791d1c0cc69372ebd9f4418120668a0fea4d6996e756c31016e74f7e8cea76c91786019b889ef57ae326478a3eac278b0a60a9c15f45b7c1c307c15b794f2e7c3c4c9f17ff8b1b1276d1f420fb05229a7e29b46bee7edd1660845abba8b42459644267898002853f2de2a9ea558f8dcf5d3c5440b0140d23485ad13346abcaa93e460551343f6196711d85e83862ceb907e72f4ee27741cb7845fe82f7932b6be980663750a3b01515f139fb459a700e6600fe72002036297472b24173fef22e8af7686ba7a47c9e626dd03f8c309c15cf75258679fe224da620ba8d3274f23babbe3a2ee4316d2a0c4d95ba390d34efbc57595c005e430e9dfeb8b9e2cc466759c507c40030eabcd8ed9a12c39de10809411ed1e3e6955491e34c434075263033ea995a0cfe5e4a93236c055a2aadea9215e65b60eda1bfaa99f58a5de4bb95dce03b5f6c38fccd720947a9fc720c3bb6269cb3425136fc3f34f7bb3852dcb787e660b3aa46ae51585d86594ed4e446f5b36e5160f1cba5df6ed7f2d91e0d40df8ba12d22f16c7fef429a3a3075d8c46256a42947f6e86b08b5dd2ff70a2ed231069524d0555735725788fc481706630191fc4142387c500e29a8891681800897e8e60c5401064f38b5b76db05534f3cf427866d58f65daa34d7b8d54ae04288432b4f93e27bafdef6b958e4643404192688376b0e6de9ac46e3c300b4228c92ee4685b6fe2fd6add83b5cc2376e0f762bbceba2e056e4dc44235d900fa4d4e38338d10cf113697f36d6f1178694ed9adcc86ea4476c095ced845e9e39189745f1d50594c9c8990027283502c42fb5cc104cd8902604878a1f69cef16fb6a8659d3336247b43c0ff180b61822c262c704f17d47096d56c438a8db1244c59efcccf64ff7ef556bafcc26f8169f00a918a1894c0072dab23087b09e14895ff11411016ea3b562095f3dfcd5d93419a4adfbe67184a3ad6cb8bacc1330b06d716aa6681a7c44c877aa32b813fd18a451de44eb28962162244ea909e8fe187aff733ad493ada53725d7f82936b3ef22670b10b48196707ff23242eded8d2271af29c1f99fd41961fcf38bfe6a82ca7c518ec92c57697ca60c72dd90c528ca15a56befca27755faba3d1bb9482c10a9d0f1cc45db9060ef25fdcb8aefaa1866aa5fa97e7fb6b1bb2a1cde263927ef7188046ccb97a50b88fab278fbb2c651c72aa5522c8c9ceb9ed1d21653c085f8cf80373c877a51648dd08cef33ec3f78d48f295b19d4b894667b7eae7a5ad363df1af3011b252afe491141549c1b056fa5b9686f8dce9b8396ea7253acf5a9b86969aa83aadb4b0f4eb5f489434b80d2b10d02c945b991bcb51fec4164026620595b3661d15ba7b6e0f6d57180aaaec1c26e43069e6194b888de2139143431973f03f61c9defedba38ea22e8cd6582dbe1ef49911a5d851ebc8b4658acaea36a428d5b0bbbe3be10c96b20b1c338780034b84e876af39ab6a82f5442894fe757dfe0975ad6730fc05c586461e3622d6700ec5944f7857f72dc9ef4e474d3d41e5c6ac37621b5dac51fa4c653b1f949ec020e1ae2a3514e933b5fa89ab44874fdcfd6a0c11f083f7d3283ae1639a15085ad9473ca6558874277f74fc3c62503c61db21a06237888f0006fd86c22d8f91c7c6660f4e620b9e4c6e211788cc11dd98f6b7578bc666eb1981e7481bd6be7196f01cf37b6e10fb6431fb51c94a4ddad08dd7d51d11a3a3892115376cf1536a27a3917f5d6c0ca9d0d9bf397d11214aecc63e85b9b5e78b263abd69c43058cd78650550633781b33eadeedf2a62af8c4662cbf07f832a7cfe57806e319dfa9aa315937b18d63b7fa98440e4c32f319f245429c9d49f465a0e8ed19f4d119217f07d7243494114d6342a9c7e6f55e911f9d81ad548d00fc87720fb313b35da60b294ef6e3101ef770d4eedd864a5a15f1a12aeabdb819e918f3f28d719706c5165816859d63866e2a377f9f676e55c20a669f60b9a605c9766865b2cab3704d6a706d6b9885da2a441a1d3dfea55ab86a9470c32c8c8b3c32ef796b0d2b4322e4f424cd920549520d837a24c8524364b699a64e46b208459d86dffee8f8d41db23c3238973689bea0a410cfddc1a27905cd7d4a332b01cf13ae5ef08fb2d671ba5834c3762a26d20facd60f7381fccde63130d40fe17e7759e9ef58214e370db9d178e604c189ef6cdfd1c97af58ff0030567cb091d351a98f17db58ef6e1c4dc5088592afedebcee8f0a263e3912a06082fde3b22471db865d6582955c882a730ee712c7b2122fa902c8585fb256b7e888744ab2c6ce3fb0dbf590a0ceb25a5aa9ffa255b152d09148584516c17e6ea506ef615c106356ba829bd182c98bccc2e6bfe4683f2588a6056d4a279e978e99c533e38d4e609f49e8e070fff7ff36ca78bf53767ddb2e679288041f45a040e2bba4e5dcaa34c6948131806e79b2d9025b0d70b3af494acd84d693c51dfc9a2b6456385c1fbf89bf008c8ce2a6cacef56c3e622053d4f68605cfd77d50d0aff115cdbd7fec98e87a1e1167bcdf69062cf800789ae0e134ca799efbecc61be406975ecac72f0bb2818e334898802c327a4c2d6da1d9d7c22834e51596a10b80913048e3f4796781109a55967943b5ea36c0d804173a3fa5b6553b5838c0554c90afcdff1afa69d2052119bb723f6c00e941c035d8168ec8d804da41c3a3d8a4af9d368cec5a26f3c97e624d162ff2fd667c2b24057d6dd699645a82d6d16aab6a44941461792bad0aa5c8710d853492b7d8cc16f3ac35d17438c666bb4a0de0e7e5537d1b9066e4226a2009ab261ab6990931425963086efe042098fec43bbd3fa1bbb716b968cfb333479157355b670a98dfeece3649f3a3dc4e8b323d6f2553663f5afebb8017d60f60cd02c073b5a425d36fb2c93e967be442d9ba00341f9fd336472a93368ecb9a6887f4b0e3de1048cfe5f140ddac66924e011a4b0931ffe7865088a398fb70772564c87d12c5d8c5f3bf1e2b5b672df699c92866019c2b67a4e7e595b1999f95bd6ca67fce0f2e0995c2b0a4e9c6b1d6ea84a0f23f7f16510cc9430d2127ba45ba6948a568a50527f6517bbb170582c3a4a07638d05370646fdd488748f423fee6efdf5f0bedaa41676bd67398d4bfc2fe2833643d2d2b3c137eedc1ebf6ad79c977357da4589ad797b92e6e70f83c7aaf36cb2984bfbd887a9d52bcb9c2e199e5b3627a90fe93ef8613f63c420ec5208d6f3feec3e52c4e7c5d2d2ed593ec844d3e73217429ae12b9a5d8c9d9f7ba6e137012a3015671591bb009f78fc317bd74b1536cd9366aad43e9e673ee0403923e3d95f14b1f3266811bf5b0ca8cacf31f20b7e509feae2e59b6a46d9a2ef1304ea2b5992d13dba67373aba703d5853f6e56a8916c3e942bd03fc8d6da7c032e919a32c253d4967cd45ce1bc576b44e52f8314dd24a9bb33bebea32adf495c9f6b510a4435f9e55e1beadad34c37afd86a1de42c23072448687717883cff496f572fa034ab9c9d7830726640559e05d97e6057af75267eeb61fb956c8ac3fb87bb9d1b0e2243f5c154741345623a769ec7c556be16fb3be8ac701ab09343273c1ccc84cd25fb433803e79d21e94ca49d919ae474717bcde855700962f049ccb2fb088871125c1ef18fd5363fbe0c61da67be963d69aa5fb29b651312668dd7485673858f2a08d826645aa35f33a1475b339562f15855a812554f524fb46e68fb7e516e171a6d64dd8958623475702e520d5173395ed149bf06364cda3d8fc9c8192856ecb10c01ca730ad30f55a6167ba6864b1690741d5662d5adcf58ce0d92f649ce2e0f2491318447623c164fc0820423ce2d0a0ebfe90d2a06364a6a2e39a18273f5c85e7ec9205e1cc911cc94f6dc0daf7e33d9a6233af11740171774f05e1f62971e8b878ba4b4f8c6843509b5f1044273b3277bec22d02f2a5ae4fe1b3f4e0e3711876f9bc5f50753a4c7421e2bfc2b90bac03caa93ea6b2606991fa2b5d4ff21a1aca7d1673331e559adb3862a20762cd9ad33a6baae33a737fa77011122d82afd2722da5ffe21cce54817bcfbb8fe168dcdf85e4a5a96e55e08c1d4ba737436e68494146f826e27d3a0f2a629f172e240b8702e8362124c2c3fee31d22004848fc02a556f103dccad454d3e896c9520132ba955b4697eb103694854a94c879635d2da9e726886685c05b12cc3ae2ec82cbd52eaf838a50c6b17701f34b9cceb30e5a5335cb8c11a1bcfa99c904a23e0346c7a5f08f924e74524fb26910ecff342ca468a802cbd7ebb5bfca47372fc9740c9bf463a47efc80fe0d47506fb48787d987587d70db37b51facd5839236a213e35dfd812dd7d3452fe36a94ddc20c72d48487d1cfa2ac0c40c628e131d847448108819dcfcafcca955357f13353e9870cf6e982acdf3a5e1ae894ed677e0ff26290fdf4a6abeb5100c84348980861401d0f5fc45d78c70320296636faee7f5a2a46ce99478e56e619053fdbeb262854e5faa0ff3c9a1d0589e1a45e0685d6e2eef82c5ba8232945a849d93a20efbbf38fb420db067b8b2624ab47bea1c3ddfebdde52fddc4a84ad6b5013f7e21c53925818aec336a7d2a8c89698d60a7f32bbc8aa4ab79a982fea9d587c2b4f726d4ec4636fd59ebf88a9d6b90a1bcec2550675020a9502dec164cc8fef2fe3190fbcbd20b438dac840617d062d898c51852773d7182a1ed33fdd580346eeabd29327fbd0ef0362f968ef0f7f502a6ed4a5490d37b736e344a31d838f"]}, @typed={0x8, 0x2e, @ipv4=@multicast1}, @generic="333f1b30b267355b8e1cffcbb916849e85e9adfc9c88cd4aef27695b4c5c451ce637c621ab020a51140e44e7b99d6b10d830941a55c486ed089924a85d42cd65e4f1c25167e2e24ef4c32720664be3770d9cacf9f2b78c8934a855", @generic="3dc4f17ec6241895ca015897d21599c68474d16bb241f7eef5e4314648ff254a24bfc7bebd96b2b20f11405e"]}, 0x10a8}, 0x1, 0x0, 0x0, 0x20000080}, 0x200440c1) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000080)) 23:11:31 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x3, 0x3f, 0x7, 0x0, 0x4, 0x800, 0xe, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x99c7fecfe27ad54f, @perf_config_ext={0xfffffffffffffffd, 0xffffffff}, 0x4, 0x81, 0x3, 0x5, 0x3945, 0x3ff, 0x4}, 0x0, 0x5, r0, 0x8) 23:11:31 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup(r0) r2 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x63, 0x80301) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x40000, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_pid(r4, &(0x7f0000000000), 0x10000000d) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_DMA(r3, 0xc0406429, &(0x7f0000000380)={r5, 0x7, &(0x7f0000000240)=[0x1, 0x10, 0xc195, 0xffff, 0x2, 0x5, 0x5], &(0x7f00000002c0)=[0x800, 0x8], 0x20, 0x1, 0x9, &(0x7f0000000300)=[0xffff], &(0x7f0000000340)=[0x8]}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000080)={r5, 0x20}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000640)={r5, &(0x7f0000000580)=""/139}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000000)={r5, 0x10}) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 23:11:31 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x0, 0x2) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000000)={0x68d, 0x0, 0x3}) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000080)) [ 372.352235] attempt to access beyond end of device 23:11:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r2, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f00000001c0)="0fc77309b0610000ba4200b000eeba2100ec66b9800000c00f326635001000000f30bad104ecc80080d20067d9f8f80f1bb429000f20c06635200000000f22c0b79ee3af", 0x247}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x189c00, 0x0) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0xc0900, 0x0) read(r5, &(0x7f0000000300)=""/191, 0xbf) connect$bt_rfcomm(r4, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000100)=0x39) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x2, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004, 0x485}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:11:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 372.370945] loop1: rw=12288, want=8200, limit=20 [ 372.394789] attempt to access beyond end of device [ 372.401665] loop1: rw=12288, want=12296, limit=20 [ 372.414918] attempt to access beyond end of device 23:11:31 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/142, 0x8e}], 0x1) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)) r1 = dup3(r0, 0xffffffffffffffff, 0x140000) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000640)={0x7, @raw_data="05ee474cbf9cabe355567bb42803384d82dc3ac2635f67a1843a8e942d0560f990e6d4246304146a4c69efc286d2f92b138ce43ab846284de486566080b99a1c7e6c7b9559c25c1a0c1f3181789a8024d208de0504a71aed6d6ad76674c4a895fcafce210fcec7c7fafdf8c1577583301633d4c7fa0fe44b254cdf0d626fd6aead6941b2f8af4b45e9dcfeb23847b837d827795d908804c07b89f495a25045712e5856ac7f5879c786d86e15bb2e2e4ec1d21ebdf8902d0cbe1cf7c0e9499b56b6477790188e3bf6"}) r2 = msgget$private(0x0, 0x1c0) msgrcv(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000009a8df3cd0c29007b4ad9425f203dc3a56a696de03529021696e6d5c7fa149de2607e637dbb8a4b7fa2413e9cba0aadddd443ae94c0c6874b14adf1efac9c863943e3fe38a3aa61e3ce8101f43d9063ed"], 0x1e, 0x2, 0x800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) getresuid(&(0x7f0000000380)=0x0, &(0x7f00000003c0), &(0x7f0000000400)) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r4, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000540)={0x7, 0x5, 0x2, r4}) close(r5) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000040)='./file0\x00', 0x9, 0x4, &(0x7f00000002c0)=[{&(0x7f0000000080)="b8271fd0ace6f69a94bd202ea7219aa7a5abde03383d09ec9cf2c1d089f4094a3f5ae0ea37a213314bc8d6aaced7e3c784070bf660b4", 0x36, 0x101}, {&(0x7f0000000140)="488155a08d3cfdba3cada12cc0fa362e8cda8517a91f8e58c10689f60c0892fe1ac1f4b109a1d82d", 0x28, 0xfffffffffffffff7}, {&(0x7f0000000180)="85407e1eb12ee52d41c767eca7dce3967386f44be84506c7dc6acb8261a4217f02449e19cfebe83a11342838652b29373a257f2e05020ade149fc911b6ccf2c8778197db2f3bbfcfd47e2041679e687407228b321ae7182f329a658385cf0763336a63f8fc", 0x65, 0xab8}, {&(0x7f0000000280)="730caec41fc017130eb10ce5e2796faabf60f3730e4bb0cd45bcd87e984288bc134f23e44bd03ee2a80dfc7e557e53", 0x2f, 0x7}], 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c726573697a653d3078666666666666666666666666666666632c6e6f696e746567726974792c71756f74612c736d61636b6673666c6f6f723d6e6f6465762c736d61636b66736861743d5c262c7b766d6e657431272d2e5c2a70707030736563757269747903626465765d2b2c666f776e65723c", @ANYRESDEC=r3, @ANYBLOB="2c736d61636b96c143521ca96df4706f7369785f61636c5f6163636573736d696d655f747970652a5c217b2c00"]) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r6, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000740)={"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"}) r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r7, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/142, 0x8e}], 0x1) ioctl$IMADDTIMER(r7, 0x80044940, &(0x7f0000000080)) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r7, 0xc0406619, &(0x7f0000000580)={{0x5, 0x0, @descriptor="b6a349f4b105c45b"}}) [ 372.435162] loop1: rw=12288, want=8200, limit=20 [ 372.445481] attempt to access beyond end of device 23:11:32 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x400000, 0x0) sendto$x25(r0, &(0x7f0000000200)="79fa896bb62a120ad445bb28fbaf232f756154cef160ffa08775f29451ead68eb854886063db81d97b048b02b41f54b0b380ab8948", 0x35, 0x10, &(0x7f0000000240)={0x9, @null=' \x00'}, 0x12) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000000)={0x32}) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000180)={&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000100)=""/108, 0x6c}) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000080)) 23:11:32 executing program 3: syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, &(0x7f0000000480)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = creat(&(0x7f0000000680)='./file0\x00', 0x0) recvfrom$packet(r5, &(0x7f0000000580)=""/91, 0x5b, 0x0, 0x0, 0x0) r6 = dup(r4) r7 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r7, 0x6) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000600), 0x4) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r8, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) r9 = socket$inet(0x2, 0x4000000805, 0x0) r10 = socket$inet_sctp(0x2, 0x5, 0x84) r11 = dup3(r9, r10, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r11, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000780)=ANY=[@ANYBLOB="0200000029e2fd532d8566966ef814cdd9d577aa1492ae4eaa25417745bd3453c19c72aaf7b266c2857f71bb88a2a3350bec644d832e16da7f65284a097c83bf93ad00102dcf8909833be7913945fc8db7d09c425fc2b8cfe7f1d9dacf2a859e565ecb5579f38ee240f0f64c4fb79c1bcf0ad80739035fe29b5e8d8161896100"/143, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x7a, &(0x7f000059aff8)={r12}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000640)={0xff, 0x6a, 0xf, 0x2, 0x4, 0x8, 0x8, 0x5, r12}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r13 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x208000, 0x0) r14 = syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x1, 0x0) r15 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r14, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="70000000d89f46056f2ecc1be19b60b796c033b49364d6a7af013f0a27a8d50a76da78cb63d8fcdf2b41f150c66f8ce3e3d633a6bb031577daa1c619c1ec035fe112099db8132679e0f7420e94", @ANYRES16=r15, @ANYBLOB="100027bd7000fedbdf25040000002c00020008000400e0fcffff0800040004000000080009008100000008000900470d0000080009009061000008000500000000000c000100080009002b000000080005000008000008000500040000003dfe0200080002004e240000"], 0x70}, 0x1, 0x0, 0x0, 0x40840}, 0x5000) sendmsg$IPVS_CMD_GET_CONFIG(r13, &(0x7f0000000340)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x5c, r15, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xe2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0xff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000001}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x5c}}, 0x60020080) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 372.480577] loop1: rw=12288, want=12296, limit=20 23:11:32 executing program 2 (fault-call:1 fault-nth:0): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 372.706341] attempt to access beyond end of device 23:11:32 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)={0x32}) flock(r0, 0x12) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000080)={0x0, 0x0, 0xfffffffe, 0x1}) [ 372.742556] loop0: rw=12288, want=8200, limit=20 23:11:32 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x3, 0x3f, 0x7, 0x0, 0x4, 0x800, 0xe, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x99c7fecfe27ad54f, @perf_config_ext={0xfffffffffffffffd, 0xffffffff}, 0x4, 0x81, 0x3, 0x5, 0x3945, 0x3ff, 0x4}, 0x0, 0x5, r0, 0x8) [ 372.778564] FAULT_INJECTION: forcing a failure. [ 372.778564] name failslab, interval 1, probability 0, space 0, times 0 [ 372.795992] attempt to access beyond end of device 23:11:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004, 0x485}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x301000, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r3, 0x4018aee2, &(0x7f0000000180)={0x0, 0x81, 0x7, &(0x7f0000000140)=0x2}) [ 372.830553] loop0: rw=12288, want=12296, limit=20 [ 372.873548] CPU: 1 PID: 13706 Comm: syz-executor.2 Not tainted 4.14.155-syzkaller #0 [ 372.881594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 372.891012] Call Trace: [ 372.893202] attempt to access beyond end of device [ 372.893663] dump_stack+0x142/0x197 [ 372.893688] should_fail.cold+0x10f/0x159 [ 372.893710] should_failslab+0xdb/0x130 [ 372.911061] __kmalloc+0x2f0/0x7a0 [ 372.914691] ? __sb_end_write+0xc1/0x100 [ 372.919357] ? strnlen_user+0x12f/0x1a0 [ 372.923418] ? SyS_memfd_create+0xba/0x3a0 [ 372.924169] loop0: rw=12288, want=8200, limit=20 [ 372.927727] SyS_memfd_create+0xba/0x3a0 [ 372.927741] ? shmem_fcntl+0x130/0x130 [ 372.927755] ? do_syscall_64+0x53/0x640 [ 372.927767] ? shmem_fcntl+0x130/0x130 [ 372.927779] do_syscall_64+0x1e8/0x640 [ 372.927789] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 372.927814] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 372.927826] RIP: 0033:0x45a639 [ 372.927831] RSP: 002b:00007f8e7358fa88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 372.927844] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 000000000045a639 [ 372.927849] RDX: 0000000020000228 RSI: 0000000000000000 RDI: 00000000004bf6d2 [ 372.927856] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 372.927862] R10: 0000000000001400 R11: 0000000000000246 R12: 00007f8e735906d4 [ 372.927874] R13: 00000000004ca094 R14: 00000000004e2028 R15: 0000000000000004 23:11:32 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)={0x32}) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x10001, 0x400000) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x10000004}) [ 373.133090] attempt to access beyond end of device [ 373.168449] loop1: rw=12288, want=8200, limit=20 [ 373.182734] attempt to access beyond end of device [ 373.188535] loop1: rw=12288, want=12296, limit=20 [ 373.201406] attempt to access beyond end of device [ 373.213824] attempt to access beyond end of device [ 373.231637] loop0: rw=12288, want=12296, limit=20 [ 373.244229] loop1: rw=12288, want=8200, limit=20 23:11:32 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)={0x32}) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000080)) ioctl$TCXONC(r0, 0x540a, 0x8) [ 373.282182] attempt to access beyond end of device 23:11:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000180)=[0x101, 0x100, 0x1f, 0x0, 0x6]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) fsetxattr$security_smack_transmute(r3, &(0x7f0000000100)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRUE', 0x4, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 373.308084] loop1: rw=12288, want=12296, limit=20 23:11:32 executing program 2 (fault-call:1 fault-nth:1): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 23:11:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/\xd3\xfb\xff\xff\x04\x00', 0xb0841, 0x0) connect$bt_rfcomm(r3, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000100)={0x1, 0x9}) r4 = gettid() ptrace$peekuser(0x3, r4, 0x8) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r5, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) getsockopt$ax25_int(r5, 0x101, 0x5, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004, 0x485}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4520080}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x4c814) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 373.354293] attempt to access beyond end of device [ 373.365656] loop0: rw=12288, want=8200, limit=20 [ 373.448084] attempt to access beyond end of device [ 373.474430] FAULT_INJECTION: forcing a failure. [ 373.474430] name failslab, interval 1, probability 0, space 0, times 0 [ 373.501138] loop0: rw=12288, want=12296, limit=20 [ 373.568318] attempt to access beyond end of device [ 373.596022] CPU: 1 PID: 13738 Comm: syz-executor.2 Not tainted 4.14.155-syzkaller #0 [ 373.604383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 373.613811] Call Trace: [ 373.616577] dump_stack+0x142/0x197 [ 373.620579] should_fail.cold+0x10f/0x159 [ 373.624834] should_failslab+0xdb/0x130 [ 373.628879] kmem_cache_alloc+0x2d7/0x780 [ 373.633138] ? __alloc_fd+0x1d4/0x4a0 [ 373.637036] __d_alloc+0x2d/0x9f0 [ 373.640573] ? lock_downgrade+0x740/0x740 [ 373.644794] d_alloc_pseudo+0x1e/0x30 [ 373.648674] __shmem_file_setup.part.0+0xd8/0x400 [ 373.653856] ? __alloc_fd+0x1d4/0x4a0 [ 373.653874] ? shmem_fill_super+0x8c0/0x8c0 [ 373.653891] SyS_memfd_create+0x1f9/0x3a0 [ 373.653902] ? shmem_fcntl+0x130/0x130 [ 373.653926] ? do_syscall_64+0x53/0x640 [ 373.653941] ? shmem_fcntl+0x130/0x130 [ 373.670284] do_syscall_64+0x1e8/0x640 [ 373.670296] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 373.670317] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 373.670326] RIP: 0033:0x45a639 [ 373.670331] RSP: 002b:00007f8e7358fa88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 373.670341] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 000000000045a639 [ 373.670347] RDX: 0000000020000228 RSI: 0000000000000000 RDI: 00000000004bf6d2 [ 373.670352] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 373.670357] R10: 0000000000001400 R11: 0000000000000246 R12: 00007f8e735906d4 [ 373.670361] R13: 00000000004ca094 R14: 00000000004e2028 R15: 0000000000000004 [ 373.687560] loop0: rw=12288, want=8200, limit=20 [ 373.701222] attempt to access beyond end of device [ 373.755705] loop0: rw=12288, want=12296, limit=20 23:11:33 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)={0x32}) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x40, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000100)={0x910, 0x8, 0x3, 0x8001}) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000080)) 23:11:33 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x3, 0x3f, 0x7, 0x0, 0x4, 0x800, 0xe, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x99c7fecfe27ad54f, @perf_config_ext={0xfffffffffffffffd, 0xffffffff}, 0x4, 0x81, 0x3, 0x5, 0x3945, 0x3ff, 0x4}, 0x0, 0x5, r0, 0x8) 23:11:33 executing program 2 (fault-call:1 fault-nth:2): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 23:11:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0xfffffffffffffffe, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x20000000ff, 0x0, 0xb0a, 0x0, 0x40000, 0xffffe00000000000, 0x0, 0x1000, 0x0, 0x4], 0x100000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:11:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x200000, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000140), 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) init_module(&(0x7f0000000180)='%\x00', 0x2, &(0x7f00000001c0)='/dev/autofs\x00') ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 373.956997] FAULT_INJECTION: forcing a failure. [ 373.956997] name failslab, interval 1, probability 0, space 0, times 0 [ 374.063851] CPU: 0 PID: 13760 Comm: syz-executor.2 Not tainted 4.14.155-syzkaller #0 [ 374.072252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 374.081664] Call Trace: [ 374.084355] dump_stack+0x142/0x197 [ 374.088067] should_fail.cold+0x10f/0x159 [ 374.088100] should_failslab+0xdb/0x130 [ 374.088118] kmem_cache_alloc+0x2d7/0x780 [ 374.088274] ? check_preemption_disabled+0x3c/0x250 [ 374.088300] ? retint_kernel+0x2d/0x2d [ 374.110083] ? shmem_destroy_callback+0xa0/0xa0 [ 374.115729] shmem_alloc_inode+0x1c/0x50 [ 374.120850] alloc_inode+0x64/0x180 [ 374.120865] new_inode_pseudo+0x19/0xf0 [ 374.120873] new_inode+0x1f/0x40 [ 374.120887] shmem_get_inode+0x75/0x750 [ 374.120902] __shmem_file_setup.part.0+0x111/0x400 [ 374.120910] ? __alloc_fd+0x1d4/0x4a0 [ 374.120919] ? shmem_fill_super+0x8c0/0x8c0 [ 374.120934] SyS_memfd_create+0x1f9/0x3a0 [ 374.120942] ? shmem_fcntl+0x130/0x130 [ 374.120958] ? do_syscall_64+0x53/0x640 23:11:33 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)={0x32}) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000080)={0x7, 0xffffffe, 0x4, 0x14}) [ 374.120966] ? shmem_fcntl+0x130/0x130 [ 374.120975] do_syscall_64+0x1e8/0x640 [ 374.120983] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 374.121005] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 374.121015] RIP: 0033:0x45a639 [ 374.121020] RSP: 002b:00007f8e7358fa88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 374.121032] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 000000000045a639 [ 374.121038] RDX: 0000000020000228 RSI: 0000000000000000 RDI: 00000000004bf6d2 [ 374.121044] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 374.121050] R10: 0000000000001400 R11: 0000000000000246 R12: 00007f8e735906d4 [ 374.121055] R13: 00000000004ca094 R14: 00000000004e2028 R15: 0000000000000004 [ 374.188654] f2fs_msg: 94 callbacks suppressed [ 374.188685] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 23:11:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x4a8200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004, 0x485}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r3, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0x6) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 374.436755] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 374.477979] attempt to access beyond end of device [ 374.497101] loop1: rw=12288, want=8200, limit=20 23:11:34 executing program 2 (fault-call:1 fault-nth:3): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 23:11:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r2, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 374.521964] F2FS-fs (loop1): invalid crc value [ 374.546044] attempt to access beyond end of device [ 374.569516] loop1: rw=12288, want=12296, limit=20 [ 374.596085] F2FS-fs (loop1): invalid crc value [ 374.602011] FAULT_INJECTION: forcing a failure. [ 374.602011] name failslab, interval 1, probability 0, space 0, times 0 [ 374.602082] CPU: 0 PID: 13792 Comm: syz-executor.2 Not tainted 4.14.155-syzkaller #0 [ 374.602093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 374.602102] Call Trace: [ 374.602128] dump_stack+0x142/0x197 [ 374.602167] should_fail.cold+0x10f/0x159 [ 374.642339] should_failslab+0xdb/0x130 [ 374.646369] kmem_cache_alloc+0x2d7/0x780 [ 374.650557] ? check_preemption_disabled+0x3c/0x250 [ 374.655784] ? retint_kernel+0x2d/0x2d [ 374.660065] selinux_inode_alloc_security+0xb6/0x2a0 [ 374.665291] security_inode_alloc+0x94/0xd0 [ 374.670060] inode_init_always+0x552/0xaf0 [ 374.674686] alloc_inode+0x81/0x180 [ 374.678402] new_inode_pseudo+0x19/0xf0 [ 374.682414] new_inode+0x1f/0x40 [ 374.685941] shmem_get_inode+0x75/0x750 [ 374.690423] __shmem_file_setup.part.0+0x111/0x400 [ 374.697044] ? __alloc_fd+0x1d4/0x4a0 [ 374.701207] ? shmem_fill_super+0x8c0/0x8c0 [ 374.706372] SyS_memfd_create+0x1f9/0x3a0 [ 374.711003] ? shmem_fcntl+0x130/0x130 [ 374.715462] ? shmem_fcntl+0x130/0x130 [ 374.719406] do_syscall_64+0x1e8/0x640 [ 374.723338] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 374.728237] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 374.734157] RIP: 0033:0x45a639 [ 374.737396] RSP: 002b:00007f8e7358fa88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 374.745480] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 000000000045a639 [ 374.753190] RDX: 0000000020000228 RSI: 0000000000000000 RDI: 00000000004bf6d2 [ 374.760503] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 374.767808] R10: 0000000000001400 R11: 0000000000000246 R12: 00007f8e735906d4 [ 374.775106] R13: 00000000004ca094 R14: 00000000004e2028 R15: 0000000000000004 23:11:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/de\b/kvm\x00', 0x14000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004, 0x485}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x80) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r2, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000480)={{0x8, 0x6, 0x8001, 0xffff0001, 'syz1\x00', 0x2fb7b8a7}, 0x1, [0x70, 0x401, 0x9, 0x2, 0x5, 0xa5, 0x9, 0xfffffffffffffff9, 0xaefc, 0x0, 0x4, 0x1, 0x3, 0x0, 0xffff, 0xfffffffffffffffc, 0xffff, 0x40, 0xc0000000000, 0x4, 0x8a, 0x521, 0x7, 0x0, 0x2, 0x5714, 0x2, 0xe9b, 0x200, 0xfffffffffffffff7, 0x7, 0x7f, 0x8001, 0x2cd6, 0x8, 0x7fff, 0x5, 0x100, 0x400, 0x8, 0xbd, 0x5, 0x5, 0x4, 0xffffffffffffff81, 0x115, 0x1, 0x100, 0x80000001, 0x1, 0x4, 0x4, 0x9, 0x2, 0x1, 0x1, 0x2, 0xffffffffffffffff, 0xe3f8, 0x8, 0x5, 0x5, 0x9, 0x1, 0xfff, 0x0, 0x6, 0x100000001, 0x4, 0x1, 0x0, 0x1, 0x10001, 0x80, 0x80, 0x4, 0x9, 0x0, 0xfa, 0x3, 0xfffffffffffffffe, 0x1, 0x8, 0x800, 0x4, 0x0, 0x6, 0x6, 0x200, 0x0, 0x3ff, 0x8, 0x40, 0x8, 0x0, 0x1ff, 0x6, 0xc, 0x6, 0x5d, 0x80, 0xfff, 0x1, 0x2, 0x0, 0x8a1, 0x1f00000000, 0x4, 0x1, 0x838e, 0x200, 0x7, 0x8001, 0x10000, 0x9, 0x7ff, 0x8, 0x2, 0x100000001, 0x2, 0xbafa909, 0x200, 0x2, 0x6, 0x80000001, 0x80, 0x80000001, 0x101], {0x77359400}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 23:11:34 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r3) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="99b500", @ANYRES16=r4, @ANYBLOB="0fe400000000000000000100000000000000014100000003001700000000000000006574683a726f736530000000"], 0x3}}, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r5, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000740)={0x14, 0x0, &(0x7f0000000600)=[@increfs_done={0x40106308, 0x1}], 0xe3, 0x0, &(0x7f0000000640)="20881d788280a6b842d19a4042434ad4aff29160b0bb6b9df1c7038635df0cc3265e0a3a739185418011f5e4e483e10584372863c6ab61aaa958c815c8419cad761f8fc8dfbb096cc26dc0fafbc828d93e49aaedfc7c8a57ce02a825d7f31a745a4d331b541cebec5213672fd2522a7aac49e34d08c7772a97fc1bf7b2081e67fee355c7640754eff787a7b1b5736ad9b0493c5b1e1a8eaa5fd359eb45b2908673a2f832f0f2005d246f6052925bce85eea95904ea2a095e42d04aad2d03209d0bb80e7a72beb68c975a426fccd69ea9cf41b5d1c30177b9e21bf3b9b7e2b44641c2ba"}) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20800802}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x68, r4, 0x0, 0x70bd26, 0x5dfdbf8, {{}, 0x0, 0x4107, 0x0, {0xfe87, 0x18, {0xfffffff9, @link='syz0\x00'}}}}, 0xfffffffffffffe18}, 0x1, 0x0, 0x0, 0x20000004}, 0x2000001) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x2, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x480) r6 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$VT_GETSTATE(r6, 0x5603, &(0x7f0000000180)={0x8, 0x2, 0x1}) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000780)) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r7, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r8, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000800)={r9}) sendmmsg$sock(r10, &(0x7f0000006f80)=[{{&(0x7f0000000840)=@pptp={0x18, 0x2, {0x3, @local}}, 0x80, &(0x7f0000000c00)=[{&(0x7f00000008c0)="6952e2ba547592622c6125a5bd151afd0c2959c60db3e695bbfe1ad3e394a089f0b4f75b47bd863282b60686da", 0x2d}, {&(0x7f0000000900)="d6c1d80bfe057356dc247ffba33c6aa21b37901732b5599d4df97a0eb337ea32d6ddbe830ecef6d450cd2d3f0fedeae0403b900f7679498f6b56cc8fc0940befdd125af26f8773291a20ab9d832e1293b8e21b93cc7af00fada944973d77e3495150790794d39678281d6e52243ad3d9e622457d3974f9c19b3a7c1387f7d2eb7da5d6e8bad0369e029fd7b116e9e5b96ec4f64af16a57", 0x97}, {&(0x7f00000009c0)="f714b7d3c25e72990e1e208c27c8aba7a705d7ec0b33f921a25b76723e5338d61401fb0539b79473b9aeea70c4a267aff9b80388d697225b93e7c17b5845aeff22d31082", 0x44}, {&(0x7f0000000a40)="e6b5f9f7b837f25bcb616f55b68cc5196dc43828cd8de69faea5d674403b9cbe334fa0a70d08a1e0e23b4ea295bd73c1a1872bce040bbac9b7487cc66919c104116e94ffc1e796a1de29ceddd11b31abad6bafc2e68bffcaf4a5e71fd29a4b8c1d15591d951c6a97c48dd78a055e7ecb0049c7db7e663a12c07a90c3fdae2d0e22f27ca832fda21e9807e16c55d08d66af755dfd411ac708048294050ae4e17d5dde2d2c53b6a0a645ec7431c506d2ee32c35b8956848202e80a0adb7ad2821049b139848e222da49d6c7d52de17d0c9e8a2264f1ebb98ebe0166d3c4f7f3e7ab00cb608edc4311cc39a707eeada74d1f977af10e68d8a487d", 0xf9}, {&(0x7f0000000b40)="4bfd098a9ba814ce77f19e569f5fba06ba329ac9a104681f76d7eb32fd7f0f7a7135a17b251bd4153cdf6617e91c20f269cffe1fc31c4869b8ada2c3a02f9ba48cdefec81a699adb58854ce4d1c19c3b90968213e6cbc30a922314f7c683e7e3f8ce275b04747862a97b47fde4c8897bc05c8bff84795d16a4c89e209e4a68d7ef9c353fa30b47cc4fd5435e92bb1ecc2ea0c9659f3a243201d04b9c99a7ba", 0x9f}], 0x5, &(0x7f0000000c80)=[@mark={{0x14, 0x1, 0x24, 0xffffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x7fffffff}}, @timestamping={{0x14, 0x1, 0x25, 0x10c}}], 0x48}}, {{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000d00)="ac083db4e3e4482533e3fc7f9ea3ae858d39ee0e8a652cdd7eb4759dcfd7e934a9f43627692042ef36fae696e4b559333ba80f296560bf2e452b01ae5f6b98d7226750d6571aa8e2317f468490291f2f78f584056bce80e69a7e250186e24eb3168dc819a434d7c024f5463e8392d90256fb86a52ec31e809147548f173d2bea18262c206372d87106b82e5a1451bc5832237a23005a5b022a16349e334b06a4d21f506a9069c9e0c37c42857ee05836d99d70bde8941f3c9c46f08f1af5a3bb3cc9b65d1abe4e24206a1f45a8815cececfd94625e", 0xd5}, {&(0x7f0000000e00)="d94cd7099efba70e8287e6efa4dbd4333ae61a987229c667858c33883354d6d4f56ab7f3df5f3a1d62641b3b784332678aebc2e07ae6834a5fb267bb80e42e1000b24937925e1d3e498ae71c1dad57a886b1b218bc68decaa1fec4c38e1895a0ec7715ae9fe837ee38458df0a6c23fec5a98e1a255a5580c08e76e22c58ade036b8804c98778332a0af2c70715b57fba6a28a153a5234fcb06f5a599e28cd6fe0f43b0de2964a9473ea67ac41fdecfd5887e0c86abdbd79c680201a1f25de98881ed45b8a292b3c8f77d2184ae9c03", 0xcf}, {&(0x7f0000000f00)="07d2f5d3abc0ab8d51eb33316d31ff39532db77c6068b04ad211390daff452d92556a60412c4ada698b57cddda978ed818c10848b0f79079db932a784062ab32d124ed70bc4349131e69038ba6983ecc092e8f38adad4b7e5a5ae437c84f379ee6fff1c428c39823c0a63afcbc907e2eb361011831ec214f4f9cfb23f076dc50878d95241a3c0b772bb181bce77cda8882fdb5561099e3f8876b2eb44c19cce08d", 0xa1}, {&(0x7f0000000fc0)="2bc96f2830b30eb42f9492d07a0498c87a0515459c52070daf11e66807a26d35fdc064f901526c4193fe6ee0c6712a8e58f9c03c1d0eba257c0cf9f5da94948397e4f04ecfe025df0d14008a2d6cf244b2f904b9d959bb9a3f1a07c872d6e2c2c12bbd7b838d522e829deef6a28eb54387c24d74a6f61f0bf191274677d7c0907eb66337f001d4588e413ca7683d94d2ee2aead9c6fb27554ee14fbc322d13c5a0e21b0b9cdbee867b6a78dfd00570f3158f629a7daed2cc6c6a148051880fe86f864bbc3c43ef04746595272e00f4947f648c4f80", 0xd5}, {&(0x7f00000010c0)="20dcfb9d735be25d041ee9b6b1ad73c3f3cac2b45926883c339cc3f267cf8c56f02262f420f4277bbd95251681bac00588428484d36de17df38e2d8b63a8f6411bb97f55b0f5eb1c13d9b77c011c36361db0c3309f9a018b74474b4b151e00c4ea19af21f883d90858f9f88400ac2750c569840ea3797ccb71cf297d3f76a364cb67ace22c82114a51", 0x89}, {&(0x7f0000001180)="db9ee3999eaba30c92f94e16edcc1e85839843d2e9edc5904947b2040f8db8f30d8982f50a01d5d725a13b69d7bd5cdefc0fe0a42d16bf492d14186b6e572ceb7ab95910ddd0cf9575d5bfc68d97603d8f4b78f1f64c0c7fb2c5d81bb3c01db485b1e03ffe6ca368ae08046f511fd11dcd75", 0x72}], 0x6, &(0x7f0000001280)=[@mark={{0x14, 0x1, 0x24, 0x80000001}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x80}}], 0x48}}, {{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001300)="97c54adc26b4259efc94d8469745807dafe15b6b5a32ee2eee6c23b02dd4280913807165f18854bfe16a83c53109408cb1ee329ea5b3d199e733b6b20d1c0935280619fd4027acfa004bbd35be1bc77fbf76fc97dae740c5a1311eadd9e9a23bf27ff02e60736a9249118fe64fa895e1f85a314d2ad2f95e3727e6c54b8b4f66007ec5e3ac93aa8414aaae002e4cd751c61fd8efda", 0x95}], 0x1, &(0x7f0000001400)=[@txtime={{0x18, 0x1, 0x3d, 0xffff}}, @mark={{0x14, 0x1, 0x24, 0x596f}}], 0x30}}, {{0x0, 0x0, &(0x7f0000003540)=[{&(0x7f0000001440)="4dc70b2cbf21efedb82da1edb52059ca65721006443653992be598416b589881f24b13e3cae27afa8ee442ae0e680960de0134c4aaa4bcd2d125b21a3f6e998326b457c11fa2cddfe0356ea7f712a7f3304307d1202c520722706be7417342447471a134a13862a21e9d7ecd99493aacd4e2172c902d37c79c02af40f433999c5a73c550c3616a66eee9e6106b7859b16eccdb32c99728c58fcc375b8e980f123af3ebdab48dc034f16faf5a714671f2b78b71274688edca09a2b9c2254529977fc7527339b034e9b6ee161d7e71634236c36c", 0xd3}, {&(0x7f0000001540)="8e468c78b4e81dd1e25e6407e2029afc19ca446eb5b345af8ba394229cdb3dd8b4c4ef7f79c60fdb7c2e04f554ca822818746885129b29e88595a377454aa26286bb54650fcd6fc66aaa8547e4eca428cff144cef12b3bba6e854e10d0967c0db463e754758bf6c06d19ed96f4424d2d99c7d4a6fcd7bc7bd77140839353d1ff46fbf59f7e9cbb107e154b5d2f818a793d30d7f105e0bd003acfdbd5ae317f192a59ee2b1d31937264ee6df2979dde716d3533406b5e49f9a2eabc2b9193c51400632d2ca464e5707eb2de79f1e02f81d8497444df96d8322a65a8d1b836b7da41e5d2ee0388a0098bf16f676ccd92a1bbdbf9f80edd72531a51a09347c4d92b3988a898589ae2b07aa4cfe8b19ffaa8db5fe074ab6a9b2aedeb938d0efbffdb23c6c545b973e803cb53225399997217c0f48991b19874e8c41e6af77545f9e39c8206b296a28279911a769bd17797cd357f198c8cf693ba51ba1086c5aacf51bc7a765979a02b6a0645d6152fa88656e484bcb5e076ffcccb6be9b86cf609fc2c9bcbcb566991e04e25394caf5274c0ecfe28978c33bc14dbe3885b6473b8de1269167033713856822c1befb87913f913b93d30d92b999cd342efa2b641419b443e5be55babcce27dc99f13ecb03593f4e0989cd49c768d64aff6e64b120d8289fabae02c200a1a769fd64905596f197c608351bb9dd1dab560d48794fdfac96858dea83903100cef74c466e30b25449127728fa8c3123c61e871aa1a7a37226e6b2b17cf3a03ab3d28de7f68c288c00f1435749f2bb95af583de947adf225fe2ca964354d7de9d8044e6bc6baef62dcc52701dd01513e6bbc7dde3f7d49f2513c2f8ce75a9c77619b6c1f38960a6e91b01e92b0cbe50b70d9a6873f06c813a1bd404357cef517cfad0613e82ef1e21709521dd667f521676f19c7f9652b5fb7b41643865fcfa27bf602b6d48099c88d05737079b6e2ba7dbd13deb863487c75dfb0db3bcd0eb07b6c1d9e4e4036edb6218e458bd1726a454be4d3266bdaf7b8ee980173990acf5a3af0d2568d58c4ab360ebc0c0ea2144e95274857a857399726b8ba0834f1036c823526b24726f68ff9b99490782fdb3f6aba056f9a92026a7bf5416f48e3491ef4061628b4afc0f6ce2b00baea76d2e10e5fa97b51f9dcaa6e20339fc4034444c65ea4b610c80de3bdbc2a520c72af8ef20d72e8145d92fb575eac9b8b3c58d8a8aaf8f82f17d7b84f336a43810d4b561ac44cfef893bc9afe046a29ff5c21b0a30ee020d6384412fa566b6cef1d8169a64c7d6837bd2baa37747b880e9f8e331ed8d6df62e1feb7a95cef02ef8b74ce1d0e7f017185a590346b0b1a8c7d832edb2e66c940d8b6b4c19b1ee29bc9cb7729f7945daee009a772de33ac14ef875c98d0afc85da7e9c7ab7810d4bf6a487d82b0b719920b49fb3c9d11f31f940a47105422dff8e7e8752b09c65cb1debe378b8c508ac660db3a65b80f4f4d3657a7c96be8c062e3c1407405c28b26b1b9840e526ad7598cd850926c2dc2cb8c1e3cde72ffff124391a2a2934bed6ce1beaa420ec7e485cd6e8361a84fba931d31a6cb486bb39a7896b562704938dcbf02776fb35ca09b914ebe6b00b05de3cbb12de402bac9278494adee455e5ce5850b89ee8c468e12fc3670bc6e8ba8dac8f585b8121328479a89e0d149518cd93cfb4aa0fd08442965432ae7263439af66ed003a3c37050bd01765aec72bd70f87ee6cd5526d7d91547a73f514f2ddd7b389787d3defb34f90f7030980b4aba13656e67650ca14f3bd6f9dedef0e609451e64e80498537a35a884f6ebd16d8d5da11c76aef1c8628655db8260635935b724a2a4519da90c1b4270cb8bb33e0b1b78b938cac8244ab6aacbfe875795b85e60be474e0b8e8302e380e6f5e683c74efdab36426da98564beac85b6cab70de704e40ef78b10f1b8c4d684d0638b7ea6e4cac50c0a7f6459cd302bab3ef821c15cdf68d85ec11406c980cd97bbb9ad4b6accf7d8d7e1cb2f42ef2de11e5226029d9c1d88332675620dfe43ce6b0981b8a47e7832afa2775ea95e13f8dd4ecb9321593f5a9e5375bf11d926e4179c546facd07c4773b2f98c86b057a08e11b333138816bb57333a5e57774ca5071d1fb591d3fb4ea9617706b4b3e877508b33b2f6965bf4d303cf6e27508faccf1edec1920034cff4b06bd58eabcba79d7934668f8ece5d1a85d5edf1a2f5344e8d15d26e96421d9778970cb6b99dafc5748c0491414743c64effc95325827f94a28c5de639ea53bfa4af37a19649b714187d07f26eb1786f6c3703eb115c211b95d4f9cb7c9dd3ff3876fe6b6b3104c4585fe4216160839910aea06ed47087d3f0633c599dc58f85d45ae28cd2a79074e7726f2f38b327d7c80604496d1961a0f42041ed42bc0a077c834b4b4418c7ca143b54d21032ffeee94901ca0086188b6a19bcba98557524a80d8aaaf88931eaf5d80f818a11a8f4052b43d66495ac865c6a03ebb171da233963fdc5623d356095c9ae0dec541d812edb20a5c2c87e901e1f0366a1a62c78159924a1d5c3f2ef6a154d9195a3f840456d6c4be9973d640d71b24c5ce3f534f49b1d9431f344622c084e69f66a2019cb72a77de651a8fa8088f272f8a754e4168ad5c3310472659ee8aac1ce3d82a63ada58bb98821b24a2751e23691ca241d1f28ddf6e72c07a514df99c6fce3a7c0b54b86e37f6e442d074d79e5a2b29a8e4c7586c6c5cc71d8b4fc4fba1ebd01e08d63d6272c78e143b366f1b667a21d05c2dc4b0cf23e319aedc2425fb39481af9344821cf147c5348bb201f981d3c7f52421631f6abc410ad2b759b2270b33639aed60b788f45eb984142dc7962e98ac0346d320446b3feac5f079f093aa401999b71fc0830a83fe14d6d2c861f04bff98d857eb8baa5cc5cb1415ca6fb447feed5abfdc8bada8e44dac21e0edd16ab39d1f41da289264f1740843a62173b286f52f394e0d7fb6181e19a216445148290d2265b655ea2342e327f89ceed7a58b485b12652ddd491445f7aaaf69e3132110f6903873f1f94590805adf2c6372717bfe430d4a2c04e9023bc90de8d66b314180a720ce7bc59cfd40519e59df277a8ad1a7eeeecf16aa9e935fde5f4ab74cd3f77d4ac2adca7924328ddccdfea8d086018d60df13f79eda8a7a1c2cf388191f8a0b453d4d9d5b32cdc827f1bb64c2df3b1eba27d7eb474e9851261b2f587901b3ba8b209042d5e07717b90a03ab290c47edb4c66e6a81eed4d495c14422185e4e7b515d0fabd7a36207e5e860ded08fa578505d0460fe5186bd9b11b20ec8c7980a486faa4d067545c4c30b7d11bd67ca859b34f0f83b91b2c36ab3d3b748c6c1855d11637902a2fef877682c6425db078e823e4eec0533199202ffa6690f1d82687ea45cd3ea791f10f4deede76a07e5b529bc4a42d050b556190e7fa2bc3355316231804ec57de8cb2fafea63125bb95f0c3b5e23ce2c247fec03a8209017e704b826151905254aa043a689be54f25fb0f56c74f7e1cb16791fa6e20bc8096408748ce6b90c6e744166ffd4c44d54a66d8aa3717a9498bca36aea8c49b14865f1e48699b0a0438e526fe31d0fe5ecd7eae70411e3f63ce23d7f6b17197df55754dfe2f7f948442134982a42e3b56cd06b6ca912443799a55b89b9b0560301f2b4d30c9e1f33b5ab48e4a6551599b6284f834cce53c12aa30d5af1941915044afac9f674dbce3c1ba3671503fd410fd6921867a5518dd975c76a77b41c0cfe22f31a3c8b04a71958e401c737955659dd6ef41c4d3111969b0ffec64991847949cfddbc214bc6d8a46b879cc106a7eb6ca34ed1e7986cef200f1f70e8037044c17fb4e66e9116f614b15ec3b92368eb3a4c32856f295efcdfea0a26c9badf5b829824f765ca886215e59583196377b64c61429091cfcb3827722a4d5b1605de0bc73bf6691e77e4fa4b0d4a11f6c482e044d0a39d445f33935ca1baaa69d3ed5a22ad84ce8b0828cacefb6e13e7af8f82c833e3da96d3c2ce3d518bb26c033f7815a8aa367d770561dd4d452e83353e10bcecbae7e56ddc06d15413fede275d60b360238f944448425c076e9cbd256ce1ffb12850f6caa310a174ab372c4b9f7b37ef18138cf4ffd16bafcb5684aba27683402e9d89563dd6e405b3c6006cee6415ce9e6953b6575b5e0b6be806f94efed4f4deb46cdd79ac1f2f6b4419cd7960c9b4b24afa4b5be797773be50dee77c343adf3d263d4208827b0f53cc840fb53b8e08f5959927e0dc4c8f81e23b2b500ac547f3a361b3dc83ef41535c5a6dcf7aea2d2ef674da3f3571204b07d61cf2d08028a2a373a9c54e65eb56aa21ebb97986af5cc927999e3e7032b690f5c339e5f8f228ca0461e91da65ed79dbe10387f7451aace6f54804253d36400fc0b9acf2c91a24db0633a8ccb7d98edfcbab300533867b9828ec2e76c47113e4bb0f3847c7720775c12675c1b71e881ab28cc1b1e2b911a94afbd7a8dbc79efc892c0ae7d1015c4b16aa4b5b15501159869e67498fde3dd13f0176cb8a5ad96fb6952df7529ce23a8e5954a64faf850d0b3449c8db69aa8298e92d133433589519a40b79216a03d8c3c113421f2b47e20c116add7038f8898d2d1489eef89a83221e5a47d53dc06ae02d8e0c9b028992ad0c84ee6875bb011ecfa94fcbb51bddb1137046809a7b4c466db312c7fa1820c2233ee1fe612b312d5f5da3aa17d8c39d58f7ca1dda1f2b9f4973fe1dcce6385adecbc346e4ed05126bf4376d7f50f1923d74ca97e6ea681f2cba3e72984c55ddcc70d8f932389cb0007eb616c9d05362abe010a8d0cacacbcc48d0216edae7c21521e5dc85fd0fae8be5713fcb06279a3544f5a5cd4fe57c093939249e23a22c0141a392177ed3407877989043d35697a75b440477c39bad45d2cadf8928f0bd17489e1ad2213672c0a55c14ec5caa79ed340ae13c607525a99a91ce6b5fa42494dbfa9144f708c8a52cc30d75aff3847294aafc1db25eb764111a4db4f8f771862428d63e9176c23b8b8978831972e1abd189bd2cd2987abaeec8ab1fcee94711dd34f8db84b6a82e052a4ead07f6989576ece5c0d4ff61b5771ea8d6d019cee101e8497723b1a9ad0e4ce62be098fd6b8b1032812b0842eaaaf84c9344f7ce89ec17ad774e281c1283cc432315be250ac483631369733904e6dd6b716bef0efa345b0665633454bfa34c0b9a6e372b5064a1085936432e40664b6ea9a6f72b223c9a1052a4453d803e666f749de45bd8f41acdb6e28506f9453f622f239ef1c7ac8eca700ffc87dbcc974be36de3ffe56f00101257f25cf8826c7a9d070f273baf26b402d5ab60fd4276595d67e8d03f8cbcfbfd800db313f042232ecf3681fbbc148939eef1502e2f9b651714af8c9f7d76b5c8691fc016e1db28fd8014b72b64bcf367af7b81a7de12fc03a4e89d529b0e9efcb45877bb701445969f04080372e715de5a521c764f56073369f2381938e72619e203ef27a9a95f6fce9da57249f395fd8239d7ec2a66bd5860f61b3ed07cb218b39495df255bc65b43e7d163ecc2f48e5496c286b890e54444f94806c442251591027dd8adc108e1d2b915e723bb95f55e58bf2277c3babf9b39249ffcc4710acac371e7bea10ebbda7ba0dcb1ed4cf653928585bf5bf93282963ae1e8555f953adbb8c0abfe0616db3ff911cb3b961d21f68e3269b23770b4a1447c3154e403f841b49a3677048d0f93ea21d31ed47", 0x1000}, {&(0x7f0000002540)="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", 0x1000}], 0x3, &(0x7f0000003580)=[@timestamping={{0x14, 0x1, 0x25, 0x200}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0xe40d}}], 0x78}}, {{&(0x7f0000003600)=@nfc_llcp={0x27, 0x1, 0x2, 0x6, 0xfc, 0xfb, "7f99f6e813ff17a4f96bbcbde3bc7c8f6ac3fdcd0513d957e4d18b947b32adae8a6eb668bb8496c16a145dcf1ca277c85954c8816c0e1add95b13766792c76", 0x12}, 0x80, &(0x7f0000003780)=[{&(0x7f0000003680)="82bb3832220fabb6f62ec1c5fc13509b9cebc0fdca8a6a6c46d38de6362647506fc2ea8ca957ae0316f95dd51b5726a51a496bb68ad856303a1771a7617c481b38b5a5a63c2b169489c93d9e0116183a82158a4d443fd0bb3a251698679ea21aae242409189c272caeef5db76d19b38876e56a71a7978b35d07c345b0770c2e7bd7e85fd627f4c14ed35e5cca4bcf10a48f4db301c2d9d29b95e5c167fcd329286b486bdc2d557e38d602abf48b8f9a91251111c5f87aeea24721bf78465b8d9a7eb201aee", 0xc5}], 0x1, &(0x7f00000037c0)=[@timestamping={{0x14, 0x1, 0x25, 0xfffffff7}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x8001}}], 0x48}}, {{&(0x7f0000003840)=@llc={0x1a, 0x0, 0x7f, 0x9, 0xf8, 0xac}, 0x80, &(0x7f0000005980)=[{&(0x7f00000038c0)="056a96e2b9261bfc6cc6485df812bd7a130e3e1551d8a3c749d75a17a2d58aa160afc32ce69cbd5b66894991d3b4ee1cfa7674a12ae9548f1b661d7576ef6c60cf15b77134d55fd1ddd81a0e91a12825c4fe2072a4a6010d488df0e22d741e373ff8b37b7ac3dc70572985adcb19d05024a3371b7c0e5a730514a69f4632e4d099ecb7e168e323ffb785971f7cb4ec0165757980c05abc809e677d6ba39cd30fdab83ca8594e841729cb0fbc8d3eab4a3dcbdd5257171c1ee30d5f5974eaa26e10c7997ae1a51797eacc30f5f20b248d0e38df4201af8eb39ce138c56a8ba5fb09881a3659bdc5aebe07b8f9f42a1d0d674e3cd688986b3932d274e1e88130ee6544f55981d1239e398f9657903c72986b0313cc7f87a6b4f355da48759c0b2836d0f1fa91e14266c517dd6df0f9b95b2cf42af5da94262b11cf44ce27951e0279c9921718f343a8579cd32b9054851e97368fe4e8e6ad7a5fb0176a3e6dcaeea880375394b351b703774eb5df40c4b9d42ab9b145042d49b62ab66ce4f16121c0e68ec3c4d4bd5e89ff717bba9e5989eae3586e6b413a533acef63f80f9fd07391a1b20bcec71510a68a41b6cb9b50d91f0438aec981f40514ee2a7232be0c6f861f0e66bf33e49ccd36b17c78d9d2ae4f6320b2179314d6767008cfc63cd0b4b8cbedda580fca2a1d1c70469267cb044fd644b53875aee681d64cf78c15cb0941bd4f9985def4fc693fd3329a17bda00b75511b808800ec3abab8ddcf6f44b3f56242dbb3e345d7d408f15a51dccc32d2dea6f917d2594f5c6ce8f97cda32119b1ce617854e5e28c320033217e93bcceede5beb0de865168f7a5c0c064f78b892d18490b04e31a41a80e0f7cfbe8ddfce695882b387b9b8e5d8ff18b69e1246998579f4d026093d200bb8a20d20d5b973587b9ad1863d8c4a675e86b27fe289fa2558c43ca12172b54dd88e1a91ec2065a8dbfc7bdf9badefa4ad1908af1f406456bbe4dc908766ad7fbadc1f37c046a2f7c6cf5c566445d7272b149ab5d36179cd79aee4479e8d2ff867d40e9643381c50d7e3762019a091f3d6aa13c36576881a5bd99d89e83b978d9f10d240b9a7b716e2b11b57bd25d25ec711ecc0f8ca29a3137b7d0a06bdbf4a19d98008403841f9925dd49f1d03fb505f9a04b19d54c4863432c562ce49cadbfc3bab5db0a6f568757fae48d18b40013e8b5516cf900c3466690d47cbfe1ff4f36fc32fd638f9cfa98d0b2b8d66f1bf083ac88241eaeeee0266a6e9f40b26ccb80ea45c40e19938d3134732e716216cfe31f3ed586252a4da0acf0c1ba7597d1053cf146965e2f873d73f04572c843bf1bf6ac97c6423dad21721975fd312db029115544c51fc0f6b1c27a12bfa12143df9e22143debf8f34140b223ef44cfee2d50a235481a700a43dc2898b3b6c93e07763ef19e4d9ce6c96ba9b30b02ae3ba924564ac748ac0b9256b918f0d29b20fc1dedea03fb6b57d91f50fe47a6c83cb3febbf7f382d4a552b0e81d07d2dc809e01660ccf9042fc3ea6d9ec93a206ba6f201dfb5ed2b193b7ca86459501007d388416656f2644501fb4e93354abb2333d8a312c6db056d5fe6f11e3406b8d8d2b2cf17e3dbab3cab5d6040f3616ff3095a1794c524b995e72a48f02940781fb624d8d66debfe8f506861955baa3634af062b3faa4730be9fd7e32422ab11b58926a347ccfc377789341560b871ad6533c17de8994add7c6d85aeeb4045bc01e3b93f37aad5d775f43b4220ee5c05dab63b2ab7eac7273b2a05aa48be896b9b75a554fcad4eb6ffd4d0eee40c307945120b19400f7f8db5bad87656392064d80cb34164b510cb46a595c5f3083c7cd49e1f099f2553378d84d9e85945bba197a865f5cf20e905a6f949729d0f0075859c18765998d949dc134a1a774f6b2df715bab567564df786e2d8f690aff0ddaf18a5c90b1e1e1947061d52fbc91799824520999bdce07e18d8dce0f7cbe340c2b262cb1f4035c54d9a8ffc8d44eeb1bf9d1e1ba4e989aafdc8ac8d1749e41c644b5182997d635473fefea14320abab64cff42cfacfb68ba717ad2fbf12429015255c567970b6cbd104845fa2d7aa20a5900c43cfd38838efe3046f92f67702640088058029441eba894b7e39471fb8f41caa28732a3d7bf135e911b5e018068bef44b9be5290473ad703e54600807c7b048cc485b4235a5fdcec6fc6395c0b677912179db6a1102662dd36f1ed1a40aade80305d7de4e26b919ffc275d82ba847ca2894a50c7f9a9d4bbc2fdc87b94560cfff7803e7297a672cdd54b377a5ed8896b2f61ebd10eb0bc4e6a859dc9b2dd70e784793ac4d396e8fb2d3776259b64b220d008d40a3ad343d75ec174e9ab5aa2c8c3880854558937f82eb5b7755a68a1aefdc1921492e67a7110d66759fbfffc9cc7e98be1a8667f3d81e68ddbdeef3d6316e3d5d513eb9e08bb53b5cb1b62c7e4644a552be3773e64d55304379d3a0fa79118e48d1e100a2c0498d36e86b898e96e737c17c36f12eae0d9d37d44580a37d9d2ca6aec1bd9290d346101cd8fa2828c76ba8a17c06efc649db7ade5a03c72656dd0919fc7e57bc7b00be55def20a859b2639e171461a50e254df2f4f6e5f9481b2495200c714bd8baa0b92e3029c19f369907c7ce8ac3afdf3e41b0b661164ff70fbc28528ef9241e7b9c525b9bdacfd472a717a446724162b21aae40fc8a86b9cc62525860d15462f317cd33cab7f000f1d9a1241cc6646dc1ea6f476319126c61522068c3427f6e20e56c70136706440f89ab85bf6101b0d735090495b597d5f79528be83c2395afe275e140fd6fee3d453fdfcb87f007736f69dcdc592f3b4701a698df72af22a41c5f72a581b5c7a929f8ae6bc97334e8cffd2c21a2b72ebd6c09bc26dc43e01858ee2045c2732a989460203b8f8d82f76f116e2ec090c0d2d766b1c54ceaf4c47e85385bc804238e6097172dc450ebe271e596e77262872f68258a05fefde4534f6f701910e7c6258909665e58301c8c2b7350d74e38fe1d6e042aec27009a05faabcb53325ac042a5a1bf53efecf5d6a7703cb7da368868592dd7a818d643e8cf2c57cc13ce7f4aeaedde3f86cf8a1f5adac39d6540240d8eb8385efefb42cd966407c476aa940ef0908a336a89da6e87fbdf5db42d8f2151e4a57d419f6af8a8a1289ec2a2ec2aadb2c01a9a0f9bf80898c1034efdfd2ee0f2741c407407550e2413086992b0c18c5a3917615e0b99fac2ea8d945dcee9f3575f557dd6d9aa878efcf6ee204fecd8f270b0fffbabbdd547e1f67631b087ead31901c744c8dfa8263eed75043512910fd99812a11a373e522532d4d9926c604297baee0edd21cbdc6f247e599a49ac9f17b9b30b9b1b2795ef1497ad136cd44ac6f8ef2c762ca9046e78ff15a3a7beea0a19b371db15e355ae937a8837c95ba21f17106aecb42b8662473c755dc24aca73f2f8fa2a22171f9ab7609580c89ceab4f3fc117a96b13ddd5fb759a9b5890ba0e498fbef26e8a2ca1829761a90d175b879c5ab709433acb49c0ab175b993cc280da158cb8ba28cb1f1472e3fb34fd339cd2fe13ecc74dcd56c834e0d1bc8f3334083865125fc039b45999058c6e493e76e3f584019efc1c421fdf89ec783abb2566698e34dfb18d8574f6c80c93f63daacd394aa8d33b688df66656ef5c7c99ea1f1ceb837488503981db04b36b929ee4b4734463797b1f7a6e89c82bc650fae602d23f6ad1ef8fe11dcac17065268c5f4fc9324f40a48dbb287c146a8cdf48656857224e53d18322e08c0e87b0d6fb05703a7355a9b1bb076979e16986173cfe467fb4d5d9ac26dd4aac4a5c5e8d4d072f0dc4d7a928838aa9f27ba09d202490d23189ea50a02142b98b67618bab3f7c7e43300ead2b4f6fc72eab8bf3291c9a866bb8217046f638fd3921acee66b7440e3e4419bb7fa59c4bfc67829a12e12bf9dba0098a7387a3baca85b9cd30152323cc654e78a03c711ef2e9f49566ec651f71ac6c815cf1f784e8d1aefab2828f4f5d0918cef24b79afa3c962d7cff7e75bc6e8db326f4bad6dc64934fe73be6df16f924c75c5b8d6d2acd72d891f34150a952ce40fa813e8b04b6857613c5642b3707cd7e3b1beeec322c99eff9c318c4efa751f93ceb3f52e33849307be7f64d9b4d51cd0c7c06a7333dd2798be607c3f91edf74acc04e854f2a0b77daf82dbdf2451d183a09e7eb2e440d5165ff8e847d8bf87510829cd058b3938f5499fa393a994547aa797a14413c5d3502c4ccab38c049e43f80477084aab4146151a8d9135370ae9d67b7a004305565995a5d6d3b0e0759ba51b2b9593f8f141455210fd11751b2d685983194565ee5a773e5ea2d2bed3d89541cf18809bf70bf0fe88cfd67aff974ca6b292ac346adbcd435ca4dc15b3318a015fec939efe600b5cdae56fa3b0190fb613d25ea7f5c431b7c6a66671f20cbf7a026fd8393566b786180a8ea6bbd01bfa23c84a27e0821c61bcbc41b55c99614733d58b2f5d853d470ec599a3584afc4caa5b7522d10fa1a88e71c548599520f1423587e748ca379324ff83f557625a3663621d2e6708689595be0e9f23c10391ac398454b60ba2af38a17a28002beeb3424919e5b6184daef7fab5f7f8360dca883d42ab86aa4b31cd0536e1ae400f0f7de0f9b42158731350fd560b10a700b3c6164aaf63d396acc4d49888999e1f3fc51e0144961165e6345276fbd5bb4eab030e70b6e18999f3bc91e2e16bff17f518edb41c9f10288b74e487f7fb469d8593fbc45922d18311519ae8f5c132e7165d4c44163901512746b685693e3390a370ee68187525d954eb831ba4ea924930990559dcceac431ca599b6eb2818c2138f1c99e922a314abb119b55a745ed4daf6d79efdf71d8d1492c5be64d5b796a9ba7094ba1154ce1f99ee0401ce2f5e07c3ef1ca570580e5cadba1c67f50f8632f6beda648fa35ebb49063ae672e57ff264cef31354523d2efe332699bbceefd3d175cdaced7487a278bcdfd2d8bff6683dbc1a7a44351ac7615ee32e2c6a54f7646081b121d0db5ee2855f279eb1357f76aa572fc5c3cc8ee4ad942fe991b7ec3540474a39dfa11979ede6cb767d42ffff26d444071dc664b748a6713554039f0d5398f552b43aa62caa1b82d1d1b20785e7011aa2b88769e5028b5e81665e02bbe13535577e637214582b9096a68d13bcc6444662ec642807be41ef8d8fe40849199140d8bf9adbec7c04a68274bf84b63b4104c4efe671409d2f789c0e5024b78a769d6e027a67f9f2796e7dd57daa8c09289a7e431c84c5f06ff61e7da96067ac28520c27de16672c50d84810f9ba0b30d6caf6ac051b678acb877fd42ca3c7effe509881994bf487d68ed4b80b9a2f56a8aebc9f1d16244df5396809b148adc5a353447bd83fb6f5444a9086a0c869719ef8b99a76710ce11482f8a252e1a8fb0f1d2b686305306ec5945bc8450a254f260d62878ea9043fd5eef17447cb2d41c25afe525f9369ee3a44c1346371700717ca4dd5c78ba382b52c29e285782dd08674fe49655c4e7d9b14fca0961320cd35cb56cd54a7c49b44015be55190223d7d35cffce020c9eaafadee9584fcf5fd263060f14b1fc064740fed1ffa43807a8463d657f1380c2982e0ab7314bd60fb90afaebf39b11e8f6bb7a21e88ee88e4219db047a7f807d1a55a9867ae3265c178e6fe5f4473b01e1788e11a2478c69529f96e0b47c6252ce53fd644bf238b66ede57e25a", 0x1000}, {&(0x7f00000048c0)="2ecbc367b51c61ac400b9f37aaea704284fc358c6017527ba7b1", 0x1a}, {&(0x7f0000004900)="875f9d36d494a26b9a77743e62e9c1855bf7737d787786894b7b0ac0e536f6897513866f881633b9c267fe2f", 0x2c}, {&(0x7f0000004940)="a2a0765e402ae9ef7dc858747bc06801919c0e25d1c56bf163bc7e201b84", 0x1e}, {&(0x7f0000004980)="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", 0x1000}], 0x5, &(0x7f0000005a00)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x1000}}, @txtime={{0x18, 0x1, 0x3d, 0xf378}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x80000000}}], 0x90}}, {{&(0x7f0000005ac0)=@xdp={0x2c, 0x1, 0x0, 0x40}, 0x80, &(0x7f0000006e40)=[{&(0x7f0000005b40)="b21187d0c3dd576ab1f701ec3f0d5868e771b6936bf9adf9d9cf3bc3daea6597d42b030337cdb435478c96b8eb4ddf0187afc3ad60a942c30c8780ea83e9b355300980ee28", 0x45}, {&(0x7f0000005bc0)="3a78063c46a5624c0e491c5d6b4ae191b52d6b2add430e2a0b84bccee4fea2e1712ddfd71b2ac7f8617c1b4aed63340d17e31b66898df3723c1206908723f8a691ca35c4489fa812dc530e86789b563be1308ee26e54d9c0d1c6bd4d57a7af5b6d7bc9d0d2bc2a3cbfd3b59eaa7aef2610bd11dd24877ee43d9f026b0cfc153ae97f125b9286c770f98622360ab10a40cd7172fc5b908e1069f85ea83eaaf6c70cba39daf904549560968c5af66c2a8662137c89c28e104e6ef84de88bc0f84d0e6f66abf6e92e0004b383d401d2736f9f9172ce87b865e1ed7795", 0xdb}, {&(0x7f0000005cc0)="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", 0x1000}, {&(0x7f0000006cc0)="73d5c7d46d4e58f0625267030508c34ab18ecf2e4426d13c77c3d820bb244ea395634243fd7d3f41644649488cc90dc7cbad34b7982bb36db9b0cf8231073683fcf7ab022549dfd6f6275639a85533c5a97bd24ec5db7fc23735e7", 0x5b}, {&(0x7f0000006d40)="022ac326bd1a18faf67677536990f4fe803a233fdbce79ed89cdef96160fbe4a0ce00c575b37617fef2f5b088ae16df8822d6473748e2b573eb3c76364de299dfb3ae1bf9291562f0487fb1bcf0665ef446ba8d155c65fe3fc32cded3abe5b5e4ca879d2e92b7dd34059c750c6015c127b436b4e2c8f9909b2a2907b79d2b7b7f5fe3e8ae49667eb237694e2c9027426699d40d282bfa927230556745459eb687abc97fea147ea257deeb19ccc95d1a5504daf4a7c19167b80b69202cf7f6261901b8f1c0af22c", 0xc7}], 0x5, &(0x7f0000006ec0)=[@timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x846a0}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x8d}}, @txtime={{0x18, 0x1, 0x3d, 0xea3}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}], 0xa8}}], 0x7, 0x10) ioctl$TIOCGLCKTRMIOS(r7, 0x5456, &(0x7f00000007c0)={0x39b, 0x6, 0x5, 0x5, 0x9, 0xfd, 0x7f, 0xfa, 0x6, 0x4, 0x5, 0x7}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}}}, &(0x7f0000000000)=0xe8) sendmsg$can_raw(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000002c0)={0x1d, r11}, 0x10, &(0x7f00000003c0)={&(0x7f0000000380)=@can={{0x3, 0x0, 0x1}, 0x6, 0x6, 0x0, 0x0, "f3b01d44a9fbbd8f"}, 0x10}}, 0x24040051) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="0fc79ef80000000f00d0dfcb0f79eef30fc7330f015c828df3260fa4841139100000f3c4e35d5e5e0d00c4c1795b2de7e80000b976010000b80c4b0000ba000000000f30", 0x44}], 0x1, 0x4, &(0x7f0000000180), 0x0) ioctl$IOC_PR_PREEMPT(r6, 0x40046109, &(0x7f0000000080)) [ 374.829342] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 374.865087] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 374.904071] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 374.936135] attempt to access beyond end of device 23:11:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) write$selinux_access(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a74657465785f646174615f743a7330202f7362696e2f6468636c69656e7420303030303030303030303020303030303430393500b0c042e1efd25965fb1c14a1e321eb5887d36c7d97157a1d34fcf167f355430cc4c698f47db97bde232e8bbad91fb4681794ec220adc77180d6f25b36d31bbb8977cb0e2c77b5534138aec36bfbb078bbad38bcec770c5eefc8007e0160b26c976db3d45cef78bf4c3b89b6770ec32f7c7a9580ee4484a3775e6ca3578221e0615373be58e87a68d4a045e46adffc1785cd91a7a956db7a811bd7e37061cb5c6a7e42e66c43c4971f5610854e97af392d303b2"], 0x46) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/142, 0x8e}], 0x1) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000000080)) fcntl$setstatus(r4, 0x4, 0x400) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004, 0x485}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 374.975369] loop1: rw=12288, want=8200, limit=20 23:11:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000280)=0x5) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) r2 = semget$private(0x0, 0x8, 0x0) semctl$GETZCNT(r2, 0x1, 0xf, &(0x7f0000000600)=""/4096) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000001500)=""/233) semctl$GETZCNT(r2, 0x4, 0xf, &(0x7f0000000140)=""/121) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r3, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) bind$netlink(r3, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x20000000}, 0xc) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x80, 0x7}) [ 375.000661] F2FS-fs (loop1): invalid crc value [ 375.041018] attempt to access beyond end of device [ 375.099513] loop1: rw=12288, want=12296, limit=20 [ 375.156917] F2FS-fs (loop1): invalid crc value [ 375.193200] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 375.297904] attempt to access beyond end of device [ 375.312452] loop0: rw=12288, want=8200, limit=20 23:11:34 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @dev}, {0x4000030000000304, @broadcast}, 0x0, {0x2, 0x0, @remote}}) 23:11:34 executing program 2 (fault-call:1 fault-nth:4): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 23:11:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:11:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004, 0x485}) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x101200, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r3, 0x28, 0x6, &(0x7f0000000140)={0x77359400}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 375.339810] attempt to access beyond end of device 23:11:34 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)={0x32}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r2, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$TCSETSF(r2, 0x5404, &(0x7f00000012c0)={0x401, 0x1, 0x4, 0x1, 0x18, 0x1f, 0x6, 0x20, 0x6, 0x1, 0x1000, 0xd}) sendto$packet(r1, &(0x7f0000000180)="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", 0x1000, 0x8000, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='\x00\x00\xff\xe6trh\xda\xdc\x80\x00', 0x40c04, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x0, 0x0) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/142, 0x8e}], 0x1) ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f0000000080)) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000001500)='/dev/audio\x00', 0x40, 0x0) readv(r6, &(0x7f0000000000)=[{&(0x7f0000001540)=""/141, 0xfffffffffffffec2}], 0x1) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000000080)) r7 = syz_open_dev$midi(&(0x7f0000001180)='/dev/midi#\x00', 0x40, 0x1) ioctl$SG_GET_COMMAND_Q(r7, 0x2270, &(0x7f00000011c0)) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) accept4$inet(r0, 0x0, &(0x7f0000000140), 0x80000) ioctl$BLKFLSBUF(r3, 0x1261, &(0x7f0000000100)=0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000080)) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r8, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) r9 = openat(r8, &(0x7f0000001200)='./file0\x00', 0xcdd1b5adbe9919aa, 0x1) linkat(r9, &(0x7f0000001240)='./file0\x00', r1, &(0x7f0000001280)='./file0\x00', 0xc00) [ 375.378874] loop0: rw=12288, want=12296, limit=20 [ 375.421076] FAULT_INJECTION: forcing a failure. [ 375.421076] name failslab, interval 1, probability 0, space 0, times 0 [ 375.426552] attempt to access beyond end of device [ 375.457644] loop0: rw=12288, want=8200, limit=20 [ 375.482979] CPU: 1 PID: 13825 Comm: syz-executor.2 Not tainted 4.14.155-syzkaller #0 [ 375.491136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 375.500625] Call Trace: [ 375.503285] dump_stack+0x142/0x197 [ 375.506966] should_fail.cold+0x10f/0x159 [ 375.511163] should_failslab+0xdb/0x130 [ 375.515280] kmem_cache_alloc+0x2d7/0x780 [ 375.519477] ? lock_downgrade+0x740/0x740 [ 375.523679] get_empty_filp+0x8c/0x3f0 [ 375.527599] alloc_file+0x23/0x440 [ 375.531171] __shmem_file_setup.part.0+0x1b1/0x400 [ 375.536265] ? __alloc_fd+0x1d4/0x4a0 [ 375.540098] ? shmem_fill_super+0x8c0/0x8c0 [ 375.544471] SyS_memfd_create+0x1f9/0x3a0 [ 375.548797] ? shmem_fcntl+0x130/0x130 [ 375.552811] ? do_syscall_64+0x53/0x640 [ 375.556948] ? shmem_fcntl+0x130/0x130 [ 375.560917] do_syscall_64+0x1e8/0x640 [ 375.564834] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 375.569736] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 375.574978] RIP: 0033:0x45a639 [ 375.578187] RSP: 002b:00007f8e7358fa88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 375.586030] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 000000000045a639 [ 375.593435] RDX: 0000000020000228 RSI: 0000000000000000 RDI: 00000000004bf6d2 [ 375.601008] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 375.608507] R10: 0000000000001400 R11: 0000000000000246 R12: 00007f8e735906d4 [ 375.615976] R13: 00000000004ca094 R14: 00000000004e2028 R15: 0000000000000004 [ 375.643236] attempt to access beyond end of device 23:11:35 executing program 4: getuid() r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$addseals(r0, 0x409, 0x345a853e0919c26a) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000000)={0x32}) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000080)) socket$bt_cmtp(0x1f, 0x3, 0x5) [ 375.676096] loop0: rw=12288, want=12296, limit=20 23:11:35 executing program 1: sched_setattr(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x238) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_open_procfs$namespace(0x0, &(0x7f0000000800)='ns/pid\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = semget(0x0, 0x0, 0x2) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f00000002c0)=""/155) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000980)={0x0, 0x0}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x1, 0x1000, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0xba8e}) ioctl$KVM_RUN(r2, 0xae80, 0x0) add_key$user(0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0) keyctl$revoke(0x3, 0x0) fallocate(0xffffffffffffffff, 0x10, 0x0, 0x2000002) open(0x0, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f00000002c0)={'filter\x00', 0x0, 0x4, 0xf3, [], 0x0, 0x0, &(0x7f00000003c0)=""/243}, &(0x7f0000000240)=0x78) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) read$alg(0xffffffffffffffff, &(0x7f00000009c0)=""/240, 0xf0) 23:11:35 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f0000000380)={'batadv0\x00', 0x100, 0x5}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) setsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000040)=0x7ff, 0x4) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 23:11:35 executing program 2 (fault-call:1 fault-nth:5): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 23:11:35 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)={0x32, 0x36be, 0x0, 0x3}) syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x800, 0x20002) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000080)) 23:11:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29085, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbcf}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r3, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000001c0)) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r4, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) getsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0xfffffffffffffffe, 0x0, 0x7, 0xfffffffffffffffd, 0x0, 0x2000, 0x20000000ff, 0x0, 0x0, 0x0, 0x1, 0x0, 0xacc], 0x1f004, 0x403}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x200180, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r7) quotactl(0x9, &(0x7f0000000480)='./file0\x00', r7, &(0x7f00000004c0)="b8ecebddb48ac2f002e0b4a181d85b4b8087a56899449a6a0d209aee299a7f8702e74bfb2a4b38e91b16725d028e56a2e8fabbab52113a9cd9180fc66abc9ef2903d1ebea637a0a7c1c2535e278ace6850a909b4a16d4ef2ae40351b488fed359e73e1586a9840e45c49c8d6de11f52b2759da01a83831e37e158d2845183646bbda44902f74f382d31f69d120a99b4f03b22a554aa093ad5b8a04b3e1c365bf6a2abdf36ce7cfba") ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x100000, 0x10, 0x8, 0x4, 0x5, 0x20, 0x0, 0x5, 0x4, 0x0, 0x9}, {0xf000, 0x0, 0xb, 0x3, 0x0, 0x1f, 0x3, 0xff, 0xfc, 0x2, 0xbd, 0x1}, {0xd000, 0x100000, 0x8, 0x0, 0x7, 0x4, 0x4, 0x51, 0x3, 0x40, 0x0, 0x16}, {0x1, 0x3000, 0x1b, 0x7, 0x3, 0x6, 0x9, 0xd4, 0x6, 0xe, 0x80, 0x1}, {0x3000, 0x2, 0xc, 0xf5, 0x4a, 0x2, 0xd1, 0x81, 0x2, 0x1, 0x81, 0x1}, {0x3000, 0x16000, 0x1b, 0x1f, 0x5, 0x2, 0xa7, 0xa1, 0x4, 0x40, 0x0, 0x1}, {0x2000, 0x4000, 0x8, 0x2, 0x80, 0x8, 0x9, 0x9, 0xf3, 0x60, 0x1}, {0x0, 0x2000, 0x8, 0xfb, 0x6, 0x59, 0x1, 0x5, 0x3, 0x5, 0xfd, 0x1f}, {0xe000, 0x2}, {0x0, 0x5000}, 0xc, 0x0, 0x3000, 0x1801a, 0xc, 0x1000, 0x2000, [0x0, 0x8, 0x79, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0x7fff, 0x10000) [ 376.118289] FAULT_INJECTION: forcing a failure. [ 376.118289] name failslab, interval 1, probability 0, space 0, times 0 [ 376.133285] attempt to access beyond end of device [ 376.152448] loop0: rw=12288, want=8200, limit=20 [ 376.157915] attempt to access beyond end of device [ 376.186909] CPU: 0 PID: 13861 Comm: syz-executor.2 Not tainted 4.14.155-syzkaller #0 [ 376.194960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 376.204947] Call Trace: [ 376.207623] dump_stack+0x142/0x197 [ 376.211796] ? should_fail.cold+0x10a/0x159 [ 376.216329] should_fail.cold+0x10f/0x159 [ 376.220855] should_failslab+0xdb/0x130 [ 376.226063] kmem_cache_alloc+0x2d7/0x780 [ 376.230398] ? selinux_file_alloc_security+0x11/0x190 23:11:35 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x410100, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r3, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r2, 0x3, 0x3, r3}) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)={0x32}) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000080)) 23:11:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r5, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) r6 = socket$inet(0x2, 0x4000000805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = dup3(r6, r7, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r9, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) r10 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r10, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) r11 = socket$inet(0x2, 0x4000000805, 0x0) r12 = socket$inet_sctp(0x2, 0x5, 0x84) r13 = dup3(r11, r12, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r12, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r13, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r12, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r13, 0x84, 0x7a, &(0x7f000059aff8)={r14}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r10, 0x84, 0x18, &(0x7f0000000180)={r14, 0x3dc9}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f0000000200)={r15, 0x8}, &(0x7f0000000300)=0x8) sendto$inet(r8, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x7a, &(0x7f000059aff8)={r16}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000100)={r16, 0x4}, &(0x7f0000000140)=0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 376.230415] selinux_file_alloc_security+0xb4/0x190 [ 376.230430] security_file_alloc+0x6d/0xa0 [ 376.230446] get_empty_filp+0x162/0x3f0 [ 376.230455] alloc_file+0x23/0x440 [ 376.230471] __shmem_file_setup.part.0+0x1b1/0x400 [ 376.230482] ? __alloc_fd+0x1d4/0x4a0 [ 376.230491] ? shmem_fill_super+0x8c0/0x8c0 [ 376.230508] SyS_memfd_create+0x1f9/0x3a0 [ 376.230517] ? shmem_fcntl+0x130/0x130 [ 376.230538] ? do_syscall_64+0x53/0x640 [ 376.240872] ? shmem_fcntl+0x130/0x130 [ 376.240900] do_syscall_64+0x1e8/0x640 [ 376.240910] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 376.240932] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 376.240943] RIP: 0033:0x45a639 [ 376.240947] RSP: 002b:00007f8e7358fa88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 376.240958] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 000000000045a639 [ 376.240963] RDX: 0000000020000228 RSI: 0000000000000000 RDI: 00000000004bf6d2 [ 376.240967] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 376.240972] R10: 0000000000001400 R11: 0000000000000246 R12: 00007f8e735906d4 [ 376.240977] R13: 00000000004ca094 R14: 00000000004e2028 R15: 0000000000000004 [ 376.252435] loop0: rw=12288, want=12296, limit=20 [ 376.268448] attempt to access beyond end of device [ 376.371428] loop0: rw=12288, want=8200, limit=20 [ 376.380035] attempt to access beyond end of device [ 376.396020] loop0: rw=12288, want=12296, limit=20 23:11:35 executing program 2 (fault-call:1 fault-nth:6): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 23:11:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004, 0x485}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000140)='bond_slave_1\x00') connect$bt_rfcomm(r3, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x8) pwrite64(0xffffffffffffffff, &(0x7f0000000180)="1a07730729cfbcbd4f15d8bc17edf4bfe944fb103df06b9e", 0x18, 0x7) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000000100)={0x7, 0x4e, 0x4, 0x2, 0x7}) 23:11:36 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)={0x32}) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f00000000c0)={0x0, 0x7fffffff}) [ 376.588258] attempt to access beyond end of device [ 376.609723] loop0: rw=12288, want=8200, limit=20 [ 376.621341] attempt to access beyond end of device 23:11:36 executing program 3: socket$bt_rfcomm(0x1f, 0x2, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r3, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x2, 0xfffffffffffffffd, 0x3, 0x5, 0x0, 0x40, 0xe0000002, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x4], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000100)=[{{0x3, 0x1, 0x0, 0x1}, {0x3}}, {{0x4, 0x0, 0x1}, {0x0, 0x1, 0x1}}, {{0x1, 0x0, 0x1}, {0x3, 0x1, 0x1}}, {{0x0, 0x1, 0x1, 0x1}, {0x3}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x2, 0x1, 0x0, 0x1}, {0x1, 0x1}}], 0x30) 23:11:36 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, r2, 0x1}, 0x1c}}, 0x0) [ 376.661748] FAULT_INJECTION: forcing a failure. [ 376.661748] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 376.671357] loop0: rw=12288, want=12296, limit=20 [ 376.696895] attempt to access beyond end of device [ 376.736217] loop0: rw=12288, want=8200, limit=20 [ 376.765448] attempt to access beyond end of device [ 376.776260] CPU: 1 PID: 13891 Comm: syz-executor.2 Not tainted 4.14.155-syzkaller #0 [ 376.784731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 376.786036] loop0: rw=12288, want=12296, limit=20 [ 376.794247] Call Trace: [ 376.794311] dump_stack+0x142/0x197 [ 376.794336] should_fail.cold+0x10f/0x159 [ 376.794434] ? __might_sleep+0x93/0xb0 [ 376.794455] __alloc_pages_nodemask+0x1d6/0x7a0 [ 376.810909] ? __alloc_pages_slowpath+0x2930/0x2930 [ 376.810924] ? lock_downgrade+0x740/0x740 [ 376.811029] alloc_pages_vma+0xc9/0x4c0 [ 376.811044] shmem_alloc_page+0xf6/0x1a0 [ 376.819698] ? shmem_swapin+0x1a0/0x1a0 [ 376.819716] ? cred_has_capability+0x142/0x290 [ 376.819730] ? check_preemption_disabled+0x3c/0x250 [ 376.819741] ? __this_cpu_preempt_check+0x1d/0x30 [ 376.819759] ? percpu_counter_add_batch+0x112/0x160 [ 376.861907] ? __vm_enough_memory+0x26a/0x490 [ 376.866572] shmem_alloc_and_acct_page+0x12a/0x680 [ 376.871970] shmem_getpage_gfp+0x3e7/0x25d0 [ 376.876570] ? shmem_add_to_page_cache+0x860/0x860 [ 376.881728] ? iov_iter_fault_in_readable+0x1da/0x3c0 [ 376.887193] shmem_write_begin+0xfd/0x1b0 [ 376.891382] ? trace_hardirqs_on_caller+0x400/0x590 [ 376.896520] generic_perform_write+0x1f8/0x480 [ 376.901171] ? page_endio+0x530/0x530 [ 376.905020] ? current_time+0xb0/0xb0 [ 376.908869] ? generic_file_write_iter+0x9a/0x660 [ 376.913746] __generic_file_write_iter+0x239/0x5b0 [ 376.918727] generic_file_write_iter+0x303/0x660 [ 376.923646] __vfs_write+0x4a7/0x6b0 [ 376.927500] ? kernel_read+0x120/0x120 [ 376.931431] ? check_preemption_disabled+0x3c/0x250 [ 376.936617] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 376.942166] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 376.946977] ? __sb_start_write+0x153/0x2f0 [ 376.951332] vfs_write+0x198/0x500 [ 376.954923] SyS_pwrite64+0x115/0x140 [ 376.958766] ? SyS_pread64+0x140/0x140 [ 376.962692] ? do_syscall_64+0x53/0x640 [ 376.966797] ? SyS_pread64+0x140/0x140 [ 376.970725] do_syscall_64+0x1e8/0x640 [ 376.974652] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 376.979547] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 376.984778] RIP: 0033:0x414437 [ 376.987990] RSP: 002b:00007f8e7358fa80 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 376.995738] RAX: ffffffffffffffda RBX: 0000000020000210 RCX: 0000000000414437 [ 377.003064] RDX: 0000000000000069 RSI: 00000000200000c0 RDI: 0000000000000005 [ 377.010576] RBP: 0000000000000000 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 377.017909] R10: 0000000000001400 R11: 0000000000000293 R12: 0000000000000005 [ 377.025209] R13: 00000000004ca094 R14: 00000000004e2028 R15: 0000000000000004 23:11:36 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)={0x32, 0xfffffffffffffff8, 0x5, 0x400}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) read$usbmon(r1, &(0x7f00000000c0)=""/180, 0xb4) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000080)) 23:11:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x13, 0xe2f1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x4, 0xffffffffffffffff, 0x0) clock_settime(0x3, &(0x7f0000000100)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:11:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0xffffffffffffffb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004, 0x485}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:11:36 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)='$', 0x1}], 0x1}, 0x0) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5acc1, 0x0) 23:11:36 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)={0x32}) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/142, 0x8e}], 0x1) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000080)) close(r1) r2 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x6, 0x400000) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f00000001c0)={0x6, 0x7, 0x7c0000, 0x6}) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000080)) 23:11:36 executing program 2 (fault-call:1 fault-nth:7): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 23:11:36 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r2, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0xffffffffffffffff, r2, 0x0, 0x25, &(0x7f00000001c0)='/devab\xb7&\xdd,\x02\xdd/ubi_ctrl\x00\x1d\xbd4\x7f!\xbe\x8e\xa3\xe3\x84\xa7\xdeI\xb40'}, 0x46) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f0000000140)=0x8) ptrace$peekuser(0x3, r3, 0x100000001) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f0000000040)={0x1, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x28000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='\x00\x00\x00\x00t', &(0x7f0000000340)='./file0\x00', 0x81, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69}], 0x0, 0x0) 23:11:36 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d20004000b404b48000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000200)=@can, 0x80, 0x0}, 0x24004c66) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000040)=@raw=[@map_val={0x18, 0x1e, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, @map={0x18, 0x9}, @alu={0x7, 0x0, 0xe, 0x3, 0x9, 0x40, 0x1}], &(0x7f0000000080)='GPL\x00', 0x0, 0xc8, &(0x7f00000003c0)=""/200, 0x41000, 0x5, [], 0x0, 0x15, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x8, 0x3f, 0xffffffe1}, 0x10}, 0x70) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000300)={r1, r3}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="261d657044102adefd1c44926e462e70a12c25f2eba430a75168cc45d08108e8da8fb05e33aeece2c494e9ad2720049ccbbd061ce11bea59a371803a24fb19dfbbabc2144ba9a6841a2ed99d7b34085a5102f6ca2fdf287c", 0x58}], 0x1, &(0x7f0000000f00)=[{0xd0, 0x8b804d238de87f12, 0x1ff, "becfa148178cc9880b79b5eeb515af81530cd4fe456157716de3bb8b5e154c9c499b03b8d77eff52493b90dace5f15df2ab85dde1d2df23635ee15b47a80c9fcfc4ac2aa11a4a2eca529a8c2130f3cf8407d3d873823569c40ba3ecd0720f3ddf8116a4bb993ea8d1d114ffbe2d8251de04ca88484fdd494c08efbe0963b3baa5ec8b9efc02d57d6ba90c8723b841d447338ffb3340d2bd7b1891766fc590ad6a24667b7033a1c3690245fab5a71512b5977017672ca825bec987f"}, {0xe8, 0x110, 0x3, "21034f48222627081a2ba4059b15673d85c2e4e022f9135735c9188829db7f8adf63032b18cffeae5bf6adab93bcaafb4075af206fd4219be5c1e203add955672ba69bb816b3444d19176e0e043527719132cf0d0c632a04c91d824387a6c6458502bd5311a47af6e0b1d8c986081cafa4737750775b91bf62420a5bdeafe7b4c80cca2364926a120587bd61a062532fbbb401c30a5bc6bdb6d827eb1775bcd561f77a6d1ef71cd9fdef1f52d4b416d5a15b510bc940f50bcda843c30a19c90524d443257371568681d46af054cb64c32ae1d45e8ae745"}, {0x1010, 0x107, 0x8, "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"}, {0xf8, 0xff, 0x6, "1ae0c44544dad5d6fe3d8d11dab5c700aa3915f132ca0ceef85a5db3a4471a8528ac385da8d4f838ea32372befb913b9c1cf00564533bd3384210ed89e8333f4b5673c97785b19c868bf1d55dcd101e48f86c23c9a0ae8e5b5b485bb653d7057ea604dac73ba75f5f58a42ac53cfa557a2c2f08b10f208ff09dc622fc90d5e7eec39819f7e820eed8c7ad9eda70b5189b655d066026665c2eb3573fea11f558854394697b16ca6ba6beb57738a21a18bdc738351529bd86e6cea8cd8673c740d38e96b0b526e1942860a36e602c7c6797a201bc89a3a0807bcb4e8d0751903b7bf70f5"}], 0x12c0}, 0x40000) socket$kcm(0x29, 0x2, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r6) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000380)=0x2, 0x12) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x33c) close(r7) [ 377.457456] FAULT_INJECTION: forcing a failure. [ 377.457456] name failslab, interval 1, probability 0, space 0, times 0 [ 377.469762] CPU: 0 PID: 13937 Comm: syz-executor.2 Not tainted 4.14.155-syzkaller #0 [ 377.469807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 377.469814] Call Trace: [ 377.469850] dump_stack+0x142/0x197 [ 377.469876] should_fail.cold+0x10f/0x159 [ 377.498082] should_failslab+0xdb/0x130 [ 377.502087] kmem_cache_alloc+0x47/0x780 [ 377.506168] ? __alloc_pages_slowpath+0x2930/0x2930 [ 377.511213] ? lock_downgrade+0x740/0x740 [ 377.515389] radix_tree_node_alloc.constprop.0+0x1c7/0x310 [ 377.521054] __radix_tree_create+0x337/0x4d0 [ 377.525868] __radix_tree_insert+0xab/0x570 [ 377.530226] ? __radix_tree_create+0x4d0/0x4d0 [ 377.534928] shmem_add_to_page_cache+0x5a4/0x860 [ 377.539715] ? shmem_writepage+0xbb0/0xbb0 [ 377.543989] ? __radix_tree_preload+0x1d2/0x260 [ 377.548718] shmem_getpage_gfp+0x1757/0x25d0 [ 377.553707] ? shmem_add_to_page_cache+0x860/0x860 [ 377.558957] ? iov_iter_fault_in_readable+0x1da/0x3c0 [ 377.564187] shmem_write_begin+0xfd/0x1b0 [ 377.568476] ? trace_hardirqs_on_caller+0x400/0x590 [ 377.573523] generic_perform_write+0x1f8/0x480 [ 377.578153] ? page_endio+0x530/0x530 [ 377.581993] ? current_time+0xb0/0xb0 [ 377.585966] ? generic_file_write_iter+0x9a/0x660 [ 377.590939] __generic_file_write_iter+0x239/0x5b0 [ 377.596020] generic_file_write_iter+0x303/0x660 [ 377.600812] __vfs_write+0x4a7/0x6b0 [ 377.604551] ? kernel_read+0x120/0x120 [ 377.608554] ? check_preemption_disabled+0x3c/0x250 [ 377.613630] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 377.619113] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 377.623901] ? __sb_start_write+0x153/0x2f0 [ 377.628548] vfs_write+0x198/0x500 [ 377.632152] SyS_pwrite64+0x115/0x140 [ 377.636088] ? SyS_pread64+0x140/0x140 [ 377.639997] ? do_syscall_64+0x53/0x640 [ 377.644008] ? SyS_pread64+0x140/0x140 [ 377.647935] do_syscall_64+0x1e8/0x640 [ 377.651841] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 377.656705] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 377.661913] RIP: 0033:0x414437 [ 377.665254] RSP: 002b:00007f8e7356ea80 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 377.673066] RAX: ffffffffffffffda RBX: 0000000020000210 RCX: 0000000000414437 [ 377.680460] RDX: 0000000000000069 RSI: 00000000200000c0 RDI: 0000000000000005 [ 377.687755] RBP: 0000000000000000 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 377.695055] R10: 0000000000001400 R11: 0000000000000293 R12: 0000000000000005 [ 377.702501] R13: 00000000004ca094 R14: 00000000004e2028 R15: 0000000000000004 23:11:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004, 0x485}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r3, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0xfffffffffffffffc) 23:11:37 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='9\x1b\a\x00@\x00\x00\x00\x04\b', 0x1, 0x2) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x10000, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f0000000100)={0xffffffe0, 0xff}) write$P9_RREADLINK(r1, &(0x7f0000000140)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)={0x32}) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/142, 0x8e}], 0x1) fstatfs(r0, &(0x7f0000000200)=""/237) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000080)) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x802, 0x0) sendfile(r2, r3, &(0x7f00000001c0)=0xffffffffffffffc0, 0x10001) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000080)) 23:11:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff, 0x1], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc0801, 0xd1) futimesat(r4, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) r5 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:11:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000040)={0x7, 0x2}) 23:11:37 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) connect$inet(r0, &(0x7f00009322c4)={0x2, 0x0, @empty}, 0x10) 23:11:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/142, 0x8e}], 0x1) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000080)) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000100)={0x8, 0x99c2, 0x7fff}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004, 0x485}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:11:37 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)={0x32}) [ 378.149639] attempt to access beyond end of device 23:11:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000380)="b8d3098e8cbaf80c66b8e40bb58a66effc0c66edbaf80c66b81482db8466efbafc0c66b851f01b1f66eff30fc770000ce1650fc776b30f300f01d0b800028ee00fc71f"}], 0x1, 0x1, 0x0, 0x4e) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 378.201769] loop0: rw=12288, want=8200, limit=20 23:11:37 executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000001140)='ifb0\x00') pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x8001, 0x0) pipe(&(0x7f0000000240)) perf_event_open$cgroup(&(0x7f0000000280)={0x1, 0x70, 0x3, 0x6, 0x8, 0x99, 0x0, 0xfda5, 0x8, 0x9, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) syz_open_procfs(0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) ptrace(0xffffffffffffffff, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) write$binfmt_elf64(r2, &(0x7f0000000680)=ANY=[@ANYBLOB='D'], 0x1) getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpgrp(0x0) setpriority(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sched_getscheduler(0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0xa, &(0x7f0000000100)=0xffffffffffffffff, 0x1ee) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x40b1) close(r3) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000200)) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x1, 0x7ffb}, 0x14) shutdown(r2, 0x1) [ 378.225733] attempt to access beyond end of device [ 378.239444] loop0: rw=12288, want=12296, limit=20 [ 378.275378] attempt to access beyond end of device [ 378.323694] loop0: rw=12288, want=8200, limit=20 [ 378.355059] attempt to access beyond end of device [ 378.382611] loop0: rw=12288, want=12296, limit=20 23:11:38 executing program 2 (fault-call:1 fault-nth:8): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 23:11:38 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x6}, 0xa) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x7f1, 0x4, [0x1, 0x53c9, 0x7fff, 0x378e]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0x7fff, 0x5, 0x1, 0xe41c, 0x101, 0xfffffff7, 0x7, 0x9, r2}, &(0x7f0000000180)=0x20) r3 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000000)={0x32}) ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000080)) 23:11:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x521000, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000480)={"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"}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004, 0x485}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1f, 0x400) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000180)="440f20c0663506000000440f22c0360fc75db8b8ce000f00d8b863008ed89a727c7e006764660f383cf8baf80c66b8fb5ae88366efbafc0cb0eeeeb8ec008ec00f01d1baf80c66b842b0278966efbafc0cb83c00ef", 0x55}], 0x1, 0x11, &(0x7f0000000300)=[@dstype0={0x6, 0xd}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:11:38 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) close(0xffffffffffffffff) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4) 23:11:38 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xc6001, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000006c0)={0xa6, 0xfffffffffffffffd, 0x8b, 0x5, @scatter={0x4, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/1, 0x1}, {&(0x7f0000000380)=""/232, 0xe8}, {&(0x7f0000000480)=""/203, 0xcb}, {&(0x7f0000000280)=""/173, 0xad}]}, &(0x7f0000000580)="d5a5c1b63e5bb19eb38cab73a630125e63a9ff090f0d84f4ebed69b31eed1e22c18521e8d7ee5b1d784e70a7487a7d0629d1807ca30fd24cdef7f2dd4b87b622b694f0041ca009c94fb90682f318119f8cf50975d7254a510be1e8d6ed9f7e758314b142f2979768cb0ff20fbd17ae7dc05c912511211ad93a43bb4405b49d925a4ac5777fecccaac86b26", &(0x7f0000000640)=""/64, 0x3, 0x1, 0x1, &(0x7f00000001c0)}) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000740)=ANY=[@ANYBLOB="71ef000003967c5bd7f39f1f19dcabc00672eb084c0000058182"]) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000000)={0x7, "73b40b160f5f291a5612efc05442c8f00339342309c2910fe38be47e21c68c9b", 0x0, 0x3}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x45a00a, 0x0) 23:11:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x6, 0x200) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x7a, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000140)={r8, 0x2008000, 0x55f8a563, 0x401}, &(0x7f0000000180)=0x10) r9 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:11:38 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)={0x32}) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f00000000c0)="5178e333fb976572638813d81fff387415b2be69241f05afc9d71295482af53287ca4b469a32fa05649b56cce93a1b4652d295dc11") ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000080)) [ 378.646496] FAULT_INJECTION: forcing a failure. [ 378.646496] name failslab, interval 1, probability 0, space 0, times 0 [ 378.692814] CPU: 0 PID: 14026 Comm: syz-executor.2 Not tainted 4.14.155-syzkaller #0 [ 378.700806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 378.710205] Call Trace: [ 378.712861] dump_stack+0x142/0x197 [ 378.716539] ? printk+0xb8/0xbc [ 378.719956] should_fail.cold+0x10f/0x159 [ 378.724201] should_failslab+0xdb/0x130 [ 378.728258] kmem_cache_alloc+0x2d7/0x780 [ 378.732497] ? vfs_write+0x25f/0x500 [ 378.736294] getname_flags+0xcb/0x580 23:11:38 executing program 1: perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8}, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000340)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f00000017c0)=""/165) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = dup2(0xffffffffffffffff, r2) r4 = accept4$inet(r3, &(0x7f0000000140)={0x2, 0x0, @initdev}, &(0x7f0000000180)=0x10, 0x80000) fstat(r4, &(0x7f0000000740)) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x400000000081, 0x10000000}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r6, &(0x7f0000005080)=[{{&(0x7f0000000440)=@ax25={{0x3, @netrom}, [@remote, @null, @bcast, @null, @remote, @remote, @rose]}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/233, 0xe9}, {&(0x7f00000000c0)=""/29, 0x1d}, {&(0x7f00000005c0)=""/144, 0x90}], 0x3}}, {{&(0x7f0000000680)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000bc0)=[{&(0x7f00000007c0)=""/162, 0xa2}, {&(0x7f0000000880)=""/221, 0xdd}, {&(0x7f0000000700)=""/15, 0xf}, {&(0x7f0000000980)=""/80, 0x50}, {&(0x7f0000000a00)=""/249, 0xf9}, {&(0x7f0000000b00)=""/152, 0x98}], 0x6, &(0x7f0000000c40)=""/179, 0xb3}}, {{&(0x7f0000000d00)=@generic, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000d80)=""/141, 0x8d}, {&(0x7f0000000e40)=""/138, 0x8a}, {0x0}], 0x3}, 0x1ff}, {{&(0x7f0000001000)=@nfc, 0x80, &(0x7f0000001240)=[{&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000001080)=""/45, 0x2d}, {&(0x7f00000010c0)=""/68, 0x44}, {&(0x7f0000001140)=""/213, 0xd5}], 0x4, &(0x7f0000001280)=""/243, 0xf3}, 0x3f}, {{&(0x7f0000001380)=@un=@abs, 0x80, &(0x7f0000001640)=[{&(0x7f0000001400)=""/22, 0x16}, {&(0x7f0000001440)=""/236, 0xec}, {&(0x7f0000001540)=""/133, 0x85}, {&(0x7f0000001600)=""/39, 0x27}], 0x4, &(0x7f00000016c0)=""/135, 0x87}, 0x5}, {{&(0x7f0000003880)=@caif=@util, 0x80, &(0x7f0000001780)=[{0x0}], 0x1}}, {{&(0x7f0000003a00)=@alg, 0x80, &(0x7f0000003b40)=[{&(0x7f0000003a80)=""/162, 0xa2}], 0x1, &(0x7f0000003b80)=""/174, 0xae}, 0x31}, {{&(0x7f0000003c40)=@hci, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000003cc0)=""/4096, 0x1000}, {&(0x7f0000004cc0)=""/232, 0xe8}], 0x2}, 0x3}, {{&(0x7f0000004e00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000005040)=[{&(0x7f0000004e80)=""/12, 0xc}, {&(0x7f0000004ec0)=""/116, 0x74}, {&(0x7f0000004f40)=""/149, 0x95}, {&(0x7f0000005000)=""/56, 0x38}], 0x4}, 0x3e8000}], 0x9, 0x0, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) symlink(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00') fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r9, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) [ 378.740157] ? check_preemption_disabled+0x3c/0x250 [ 378.745218] getname+0x1a/0x20 [ 378.748577] do_sys_open+0x1e7/0x430 [ 378.752347] ? filp_open+0x70/0x70 [ 378.755925] ? fput+0xd4/0x150 [ 378.759139] ? SyS_pwrite64+0xca/0x140 [ 378.763243] SyS_open+0x2d/0x40 [ 378.766763] ? do_sys_open+0x430/0x430 [ 378.770710] do_syscall_64+0x1e8/0x640 [ 378.774933] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 378.779866] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 378.779883] RIP: 0033:0x4143d1 23:11:38 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x4, 0x80040) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000140)={0xfffe, 0x9, 0x400}) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000000)={0x32}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r2, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f00000000c0)=[0x8001, 0x4]) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000080)) [ 378.779889] RSP: 002b:00007f8e7358fa80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 378.779901] RAX: ffffffffffffffda RBX: 0000000020000228 RCX: 00000000004143d1 [ 378.779907] RDX: 00007f8e7358fb0a RSI: 0000000000000002 RDI: 00007f8e7358fb00 [ 378.779913] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 378.779917] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000005 [ 378.779922] R13: 00000000004ca094 R14: 00000000004e2028 R15: 0000000000000004 23:11:38 executing program 2 (fault-call:1 fault-nth:9): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 23:11:38 executing program 0: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1d82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x37c, 0x0, 0xbf8}, 0x0, 0xffffffffffffffff, r0, 0x0) keyctl$join(0x1, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000000)=""/79) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9) [ 378.935814] devpts: called with bogus options [ 379.026731] attempt to access beyond end of device [ 379.028854] FAULT_INJECTION: forcing a failure. [ 379.028854] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 379.043733] CPU: 0 PID: 14051 Comm: syz-executor.2 Not tainted 4.14.155-syzkaller #0 [ 379.051686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 379.051693] Call Trace: [ 379.051725] dump_stack+0x142/0x197 [ 379.051748] should_fail.cold+0x10f/0x159 [ 379.051765] __alloc_pages_nodemask+0x1d6/0x7a0 [ 379.051776] ? fs_reclaim_acquire+0x20/0x20 [ 379.051788] ? __alloc_pages_slowpath+0x2930/0x2930 [ 379.051808] cache_grow_begin+0x80/0x400 [ 379.051820] kmem_cache_alloc+0x6a6/0x780 [ 379.051829] ? check_preemption_disabled+0x3c/0x250 [ 379.051844] getname_flags+0xcb/0x580 [ 379.051855] getname+0x1a/0x20 [ 379.051864] do_sys_open+0x1e7/0x430 [ 379.051879] ? filp_open+0x70/0x70 [ 379.083306] loop0: rw=12288, want=8200, limit=20 [ 379.085759] ? fput+0xd4/0x150 [ 379.085782] ? SyS_pwrite64+0xca/0x140 [ 379.085798] SyS_open+0x2d/0x40 [ 379.085815] ? do_sys_open+0x430/0x430 [ 379.103633] attempt to access beyond end of device [ 379.106185] do_syscall_64+0x1e8/0x640 [ 379.106198] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 379.106223] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 379.106233] RIP: 0033:0x4143d1 [ 379.106239] RSP: 002b:00007f8e7358fa80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 379.106259] RAX: ffffffffffffffda RBX: 0000000020000228 RCX: 00000000004143d1 23:11:38 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)={0x32}) bind$tipc(r0, 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000080)={0x0, 0x0, 0x1}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) setsockopt$inet_dccp_int(r1, 0x21, 0x10, &(0x7f00000000c0), 0x4) [ 379.162901] RDX: 00007f8e7358fb0a RSI: 0000000000000002 RDI: 00007f8e7358fb00 [ 379.162910] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 379.162915] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000005 [ 379.162919] R13: 00000000004ca094 R14: 00000000004e2028 R15: 0000000000000004 [ 379.307624] loop0: rw=12288, want=12296, limit=20 23:11:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r5, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$TIOCLINUX6(r5, 0x541c, &(0x7f0000000100)={0x6, 0x3f}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 379.362610] f2fs_msg: 43 callbacks suppressed [ 379.363613] F2FS-fs (loop0): invalid crc value [ 379.412295] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 379.444744] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) 23:11:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x16b000, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000140)=0xffffffffffffffff) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004, 0x485}) sendmsg$nl_generic(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x405894}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x70, 0x3d, 0x400, 0x70bd27, 0x25dfdbfb, {0x13}, [@generic="4a0729fd7874510b3d8dbc911a34474283a262b75c520c2dcbe42ac2bcf7ceafb97881c315e94834ebd3642f1aa0f9ed86682d7a0d476fff7530393655acadb4f9221f9852a485ba2ff8709ba7411fdd12e1c91ee9acad25f324"]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 379.504611] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock 23:11:39 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffff7c8bfcfeb0f5a360b850ffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef67000000000000000000000000000000000000000000000000000000000100"/106], 0x74}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="840000002c00010700"/20, @ANYRES32=r4, @ANYBLOB="0008008000000000030000000800010075333200580002001400050000000000000000000000000000000000400006003c0001000000000000001020898dde66057433b6ef3a41d22be225e0001b00000000000000000000000000000000000000000084e1a912c5998bcbf050000000000000000000000000000000798a3c067277da1a290b9613a33c575c36fad473382c8f5532ef3f0e1d2c450a7decbf3431a69f9b2ecb3291bed174245a962fe0484676958265e2988326a89db3139d91fe4aee6ae7e745abdfc21a9f61f2035979c1e3e9fea5b3958bc14fce6e66a36d1ab3194534ba4e973684b27793bff837d3"], 0x84}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev={0xfe, 0x80, [], 0x23}, @dev={0xfe, 0x80, [], 0x10}, 0xd, 0xdd77, 0x800, 0x400, 0x3, 0x4000000, r4}) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)={0x32}) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000080)) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) [ 379.562422] attempt to access beyond end of device 23:11:39 executing program 2 (fault-call:1 fault-nth:10): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 379.595912] loop0: rw=12288, want=8200, limit=20 [ 379.624256] F2FS-fs (loop0): invalid crc value [ 379.647880] attempt to access beyond end of device 23:11:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x20000000000000}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x0, 0x0, 0xc) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000180), 0x4) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r6, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='pids.events\x00', 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x1) sendto$inet(r6, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r6, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0xfffffd89}], 0x1}}], 0x1, 0x100, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x2) modify_ldt$write2(0x11, &(0x7f0000000140)={0x71, 0xffffffffffffffff, 0x2000, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r6, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) [ 379.710188] loop0: rw=12288, want=12296, limit=20 [ 379.715257] F2FS-fs (loop0): invalid crc value [ 379.717895] FAULT_INJECTION: forcing a failure. [ 379.717895] name failslab, interval 1, probability 0, space 0, times 0 [ 379.736084] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 379.754359] CPU: 1 PID: 14082 Comm: syz-executor.2 Not tainted 4.14.155-syzkaller #0 [ 379.762342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 379.762349] Call Trace: [ 379.762373] dump_stack+0x142/0x197 [ 379.762403] should_fail.cold+0x10f/0x159 [ 379.762423] should_failslab+0xdb/0x130 [ 379.786267] kmem_cache_alloc+0x2d7/0x780 [ 379.790457] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 379.795940] ? check_preemption_disabled+0x3c/0x250 [ 379.800970] selinux_file_alloc_security+0xb4/0x190 [ 379.805998] security_file_alloc+0x6d/0xa0 [ 379.810241] get_empty_filp+0x162/0x3f0 [ 379.814229] path_openat+0x8f/0x3f70 [ 379.817955] ? generic_perform_write+0x34f/0x480 [ 379.822741] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 379.827445] ? save_trace+0x290/0x290 [ 379.831253] ? __alloc_fd+0x1d4/0x4a0 [ 379.835075] do_filp_open+0x18e/0x250 [ 379.838896] ? may_open_dev+0xe0/0xe0 [ 379.842723] ? lock_downgrade+0x740/0x740 [ 379.846895] ? do_raw_spin_unlock+0x16b/0x260 [ 379.851409] ? _raw_spin_unlock+0x2d/0x50 [ 379.855577] ? __alloc_fd+0x1d4/0x4a0 [ 379.859416] do_sys_open+0x2c5/0x430 [ 379.863146] ? filp_open+0x70/0x70 [ 379.866714] ? fput+0xd4/0x150 [ 379.869919] ? SyS_pwrite64+0xca/0x140 [ 379.873824] SyS_open+0x2d/0x40 [ 379.877110] ? do_sys_open+0x430/0x430 [ 379.881218] do_syscall_64+0x1e8/0x640 [ 379.885127] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 379.889999] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 379.895209] RIP: 0033:0x4143d1 [ 379.898403] RSP: 002b:00007f8e7358fa80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 23:11:39 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004, 0x485}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$jfs(&(0x7f0000000100)='jfs\x00', &(0x7f0000000140)='./file0\x00', 0x3, 0x2, &(0x7f0000000380)=[{&(0x7f0000000180)="8faf816509ab07d49c887635277a805b642fba3aadef84d288949e5793728a1fbea9d956f4a086136c854a2af8aa3004bac8c0d95af283d3cfed966271139d2eff60b456478f1fa68a5a47b959c71617c01c4bd68746adffb41a14a1ea41af90617a95f02e9f1ba98ac1326a3c00a275b1c2fce0cb44d2e625682b71bc349f37761df2db7bbce164372731", 0x8b, 0x80000000}, {&(0x7f0000000300)="78ae7954cd4f71ce13c6956549d57bff09725ac0e3a872465626e462c572893f41c3c88a180f1786590c89c66385bf08d1b9fb817a76bbc7ddcdc34edd1fbd21b9b3a4502d832bc0981561e7aca7c4de4ef84cabda21daba61d1c4e6e4b51194b34ead36dd90daa648be1782f2e90db2ca387cc6ad", 0x75}], 0x214b414, &(0x7f0000000500)={[{@discard_size={'discard', 0x3d, 0xfffffffffffff001}}, {@nodiscard='nodiscard'}, {@gid={'gid', 0x3d, r1}}, {@umask={'umask', 0x3d, 0x7ff}}], [{@fsmagic={'fsmagic', 0x3d, 0x2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/kvm\x00'}}, {@subj_type={'subj_type', 0x3d, 'keyringppp1em0security\x0e*%@bdev\xb8'}}, {@fsname={'fsname', 0x3d, '/dev/kvm\x00'}}, {@hash='hash'}, {@dont_appraise='dont_appraise'}, {@smackfshat={'s\x97\x84\x8aK_shat', 0x3d, '\xe4'}}, {@subj_user={'subj_user', 0x3d, '/dev/kvm\x00'}}, {@dont_measure='dont_measure'}]}) [ 379.906122] RAX: ffffffffffffffda RBX: 0000000020000228 RCX: 00000000004143d1 [ 379.913415] RDX: 00007f8e7358fb0a RSI: 0000000000000002 RDI: 00007f8e7358fb00 [ 379.920690] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 379.927965] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000005 [ 379.935241] R13: 00000000004ca094 R14: 00000000004e2028 R15: 0000000000000004 [ 379.952093] devpts: called with bogus options [ 379.974654] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'. [ 379.989123] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'. 23:11:39 executing program 2 (fault-call:1 fault-nth:11): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 380.457471] FAULT_INJECTION: forcing a failure. [ 380.457471] name failslab, interval 1, probability 0, space 0, times 0 [ 380.487138] CPU: 1 PID: 14110 Comm: syz-executor.2 Not tainted 4.14.155-syzkaller #0 [ 380.495132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 380.495139] Call Trace: [ 380.495172] dump_stack+0x142/0x197 [ 380.495198] should_fail.cold+0x10f/0x159 [ 380.515085] should_failslab+0xdb/0x130 [ 380.519111] kmem_cache_alloc+0x2d7/0x780 [ 380.523343] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 380.528875] ? check_preemption_disabled+0x3c/0x250 [ 380.533948] selinux_file_alloc_security+0xb4/0x190 [ 380.533966] security_file_alloc+0x6d/0xa0 [ 380.533982] get_empty_filp+0x162/0x3f0 [ 380.547320] path_openat+0x8f/0x3f70 [ 380.551125] ? trace_hardirqs_on+0x10/0x10 [ 380.555450] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 380.560190] ? save_trace+0x290/0x290 [ 380.564018] ? __alloc_fd+0x1d4/0x4a0 [ 380.567858] do_filp_open+0x18e/0x250 [ 380.571694] ? may_open_dev+0xe0/0xe0 [ 380.575537] ? lock_downgrade+0x740/0x740 [ 380.579709] ? do_raw_spin_unlock+0x16b/0x260 [ 380.584224] ? _raw_spin_unlock+0x2d/0x50 [ 380.588401] ? __alloc_fd+0x1d4/0x4a0 [ 380.592222] do_sys_open+0x2c5/0x430 [ 380.595955] ? filp_open+0x70/0x70 [ 380.599661] ? fput+0xd4/0x150 [ 380.602909] ? SyS_pwrite64+0xca/0x140 [ 380.606919] SyS_open+0x2d/0x40 [ 380.610208] ? do_sys_open+0x430/0x430 [ 380.614132] do_syscall_64+0x1e8/0x640 [ 380.618050] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 380.622927] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 380.628160] RIP: 0033:0x4143d1 [ 380.631359] RSP: 002b:00007f8e7358fa80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 380.639094] RAX: ffffffffffffffda RBX: 0000000020000228 RCX: 00000000004143d1 [ 380.646383] RDX: 00007f8e7358fb0a RSI: 0000000000000002 RDI: 00007f8e7358fb00 23:11:40 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) write$cgroup_int(r1, 0x0, 0x0) 23:11:40 executing program 0: r0 = syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x3, 0x20001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/142, 0x8e}], 0x1) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000080)) fsetxattr(r1, &(0x7f0000000040)=@known='user.syz\x00', &(0x7f0000000080)='nodevGPL\xacsystem@/[keyring\x00', 0x1a, 0x1) ioctl$RTC_PIE_OFF(r0, 0x7006) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0xb0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) shmget(0x1, 0x1000, 0x1000, &(0x7f0000ffc000/0x1000)=nil) 23:11:40 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)={0x32}) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) [ 380.653671] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 380.660960] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000005 [ 380.668243] R13: 00000000004ca094 R14: 00000000004e2028 R15: 0000000000000004 23:11:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sysfs$3(0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0) recvfrom$x25(r3, &(0x7f0000000480)=""/4096, 0x1000, 0x40000000, &(0x7f0000000180)={0x9, @remote={[], 0x3}}, 0x12) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r6, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) write$P9_RSYMLINK(r6, &(0x7f00000001c0)={0x14, 0x11, 0x1, {0x2, 0x4, 0x5}}, 0x14) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x200, 0x0) 23:11:40 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)={0x32}) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000080)) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) 23:11:40 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x3, 0x3c) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=@newsa={0x13c, 0x10, 0x963ddcda599079f3, 0x0, 0x0, {{@in, @in=@loopback}, {@in6=@loopback, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}}}]}, 0x13c}}, 0x0) 23:11:40 executing program 2 (fault-call:1 fault-nth:12): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 380.808803] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 380.817235] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 380.890014] attempt to access beyond end of device [ 380.925577] loop0: rw=12288, want=8200, limit=20 [ 380.943623] F2FS-fs (loop0): invalid crc value [ 380.955408] FAULT_INJECTION: forcing a failure. [ 380.955408] name failslab, interval 1, probability 0, space 0, times 0 [ 380.972477] attempt to access beyond end of device [ 380.983781] loop0: rw=12288, want=12296, limit=20 [ 380.988943] CPU: 1 PID: 14139 Comm: syz-executor.2 Not tainted 4.14.155-syzkaller #0 [ 380.996875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 381.006272] Call Trace: [ 381.006321] dump_stack+0x142/0x197 [ 381.006349] should_fail.cold+0x10f/0x159 [ 381.006370] should_failslab+0xdb/0x130 [ 381.006380] kmem_cache_alloc_trace+0x2e9/0x790 [ 381.006395] ? save_trace+0x290/0x290 [ 381.006533] inotify_handle_event+0x2ca/0x4b0 [ 381.006550] fsnotify+0x63b/0x11e0 [ 381.029545] ? __fsnotify_update_child_dentry_flags.part.0+0x300/0x300 [ 381.029558] ? fsnotify+0x11e0/0x11e0 [ 381.029579] ? __might_sleep+0x93/0xb0 [ 381.029598] __fput+0x4a6/0x7a0 [ 381.044614] ____fput+0x16/0x20 [ 381.044629] task_work_run+0x114/0x190 [ 381.044651] exit_to_usermode_loop+0x1da/0x220 [ 381.044661] do_syscall_64+0x4bc/0x640 [ 381.044669] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 381.044691] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 381.044701] RIP: 0033:0x4141d1 [ 381.044707] RSP: 002b:00007f8e7358fa80 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 381.044718] RAX: 0000000000000000 RBX: 00007f8e735906d4 RCX: 00000000004141d1 [ 381.044723] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 [ 381.044734] RBP: 0000000000000006 R08: 0000000000000000 R09: 000000000000000a [ 381.114464] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000005 23:11:40 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f00000000c0)={0x9d006, 0x6000, 0x2, 0x0, 0x5e}) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)={0x32}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000280)={0x18, 0x1, 0x0, {0x8}}, 0x18) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000080)) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x19) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) rt_sigqueueinfo(r3, 0x19, &(0x7f00000002c0)={0x13, 0xa33, 0x2}) connect$netrom(r2, &(0x7f0000000180)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x27a49c2e2bb1e8b, 0x0) ioctl$IMCTRLREQ(r4, 0x80044945, &(0x7f0000000140)={0x4005, 0x4, 0x80000000}) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r5, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) bind$netrom(r5, &(0x7f0000000200)={{0x3, @bcast, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}, 0x48) 23:11:40 executing program 1: socket$inet6(0xa, 0x2, 0x0) 23:11:40 executing program 2 (fault-call:1 fault-nth:13): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 381.121968] R13: 00000000004ca094 R14: 00000000004e2028 R15: 0000000000000004 23:11:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x84000) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000300)=""/200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x2400, 0x0) ioctl$IMCTRLREQ(r4, 0x80044945, &(0x7f0000000200)={0x4005, 0x401, 0x6}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) pipe(&(0x7f0000000100)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000140)={0x10000000}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 381.185220] attempt to access beyond end of device [ 381.245347] loop0: rw=12288, want=8200, limit=20 [ 381.262411] attempt to access beyond end of device [ 381.279633] loop0: rw=12288, want=12296, limit=20 23:11:40 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)={0x32, 0x0, 0xfffffffd}) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000080)={0xffffffffffffffff}) getpid() ioctl$KDGKBENT(r0, 0x4b46, &(0x7f00000002c0)={0xff, 0x3, 0xfff}) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x19) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r3, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x2f2, &(0x7f0000003bc0)}}], 0x3a6, 0x0) getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000380), &(0x7f00000003c0)=0x4) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x2) accept4$x25(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000340)=0x12, 0x80400) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r4, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) getsockopt$nfc_llcp(r4, 0x118, 0x1, &(0x7f0000000200)=""/150, 0x96) rt_sigqueueinfo(r2, 0xe, &(0x7f0000000100)={0x31, 0xffff, 0x4b52}) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r5, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x1c, @rand_addr="00b5fd92b6e40ab0f60200000100"}, 0x13) listen(r1, 0x6) r6 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_stats\x00', 0x0, 0x0) connect$inet(r6, &(0x7f00000001c0)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) prctl$PR_CAPBSET_DROP(0x18, 0x5) 23:11:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736662002c00020028000100000000000000000000000000000000000000000000000000000000000000000000000000580638432b3b9b87a26742c39ee8cd20845989078dc8730614393c766d2de39a7d4c12706cb823b5ab2ec0e4fe6f5f1526520b996a42507be84a5c18f06d0125f262697fe055e0175061791dc8c0e4b5efb75766c23363138d9f9b065d03700056e38f6f83ca6607c8babda355789ae46329063c38f8f96e8798fd741f39f9cc0dc5732be4cd5982533351135da929fa85abaa4a46cecc31433eb2870536f598edbf9c1ff6d282a1fd44de6d4861d551"], 0x58}}, 0x0) 23:11:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 23:11:40 executing program 2: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) socket$rxrpc(0x21, 0x2, 0xa) [ 381.593709] attempt to access beyond end of device 23:11:41 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 381.642940] loop0: rw=12288, want=8200, limit=20 [ 381.674079] attempt to access beyond end of device 23:11:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r2, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff, 0x0, 0x0, 0x0, 0x0, 0x18], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x3, 0x5}, 0xc) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:11:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x180, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 381.698937] loop0: rw=12288, want=12296, limit=20 23:11:41 executing program 4: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x19) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) sched_rr_get_interval(r0, &(0x7f00000000c0)) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000012c0)={{0x80, 0x20}, {0x9, 0x8}, 0x5, 0x1, 0xff}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r2, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000001440)=ANY=[@ANYBLOB="811c9c8e47cf7c86be1af8c1d42102000100", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x7a, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000001340)={r6, 0xfffffffd}, &(0x7f0000001380)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000013c0)={r7, 0x3, 0x100, 0x2d}, &(0x7f0000001400)=0x10) r8 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r8, 0x40046109, &(0x7f0000000000)={0x3f, 0x3, 0x0, 0x1e}) r9 = gettid() ptrace$setopts(0x4206, r9, 0x0, 0x0) tkill(r9, 0x19) ptrace$cont(0x18, r9, 0x0, 0x0) ptrace$setregs(0xd, r9, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r9, 0x0, 0x0) wait4(r0, &(0x7f0000000100), 0x8, &(0x7f0000000140)) socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001280)={r8, &(0x7f0000000200)="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", &(0x7f0000001200)=""/116}, 0x20) ioctl$IOC_PR_PREEMPT(r8, 0x40046109, &(0x7f0000000080)) [ 381.734992] attempt to access beyond end of device [ 381.760418] audit: type=1400 audit(1574550701.263:95): avc: denied { set_context_mgr } for pid=14180 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 381.784912] loop0: rw=12288, want=8200, limit=20 [ 381.803948] attempt to access beyond end of device [ 381.827217] loop0: rw=12288, want=12296, limit=20 23:11:41 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 23:11:41 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x866000, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 23:11:41 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="28000000ffff000001"], 0x9}, 0x0) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x900000000000000, &(0x7f0000000000), 0x28}, 0x0) 23:11:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)=0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/commit_pending_bools\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0x9, 0x3, 0x0, 0x9, 0x0, 0x413, 0x124, 0x5, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x8, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x7fff, 0x867, 0x6, 0x6, 0x6, 0x4}, r0, 0xffffffffffffffff, r1, 0x15) 23:11:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x3, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x3, 0xffffffffffffffff, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r5, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) write$P9_RREADLINK(r5, &(0x7f0000000100)={0x10, 0x17, 0x20, {0x7, './file0'}}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:11:41 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 23:11:41 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x1f}], 0x1, 0x0) 23:11:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$sock(r0, &(0x7f0000003940)=[{{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="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", 0x1000}, {&(0x7f0000000000)="60ea1bee983c35f9589912e13d06f08927434e643fe09e47485457b295ccdb3a0b42a83b29ccd9267b3bd43937abf19b3509f68b9c0c930457974dfa508a863d6494c78e270a94862405c1d038c4a71ec3c9cbb78515ba6736fe7927452e824bf63af6d3e2c93aad90639ff644d6645f91b90fbf16293c50330f1728b34929f859979054", 0x84}, {&(0x7f0000002380)="8f61ef36c33c20be597f1d5fccc5f72f6808ce2a19f17b1e5342792448ae48596b9cb9f67a46bd7b61bd596338e82bb492fcfc37faf72af7a6c027764a8c3a6a7556844700a68d3a503d45ec66ef4afa5cf1aa2bac1b7323770e40ebbe966b0c665783f717d6d231fe2c7478d2b8ec1c9d077b5d26a08d282d78010533edfa55347207de09f0eb6ee73ce055e0d0e3bb9a9638dde45a90cf4849405196bc2e79e92680d274305e10c355988f2e665f073cd5f32b68a3c46d15cc16c906bf9c6498c101269ef37659e7c815406a6e5aed2c3a0d0a44e75955", 0xd8}, {&(0x7f0000000140)="21575221fc1310c0515caa110a4d6be2d53efbc27e94ce4bbfa014c508f0ce58f8993fb1e36442f2f184861adc4cade277013b8b3188226bc0768c004a513c0cace773dafdd28f1eb8bc0efecd4479005a616b355b17e8aafc6631bde09b16b50110dbf708e656e27943ae72158ed3012adc3d981726b4d22985376b3b29a9", 0x7f}, {&(0x7f00000001c0)="a843f43ee693943f7237fe5a6cee403a6efb378a456733c218786986cf73277e25b9bdaf1dc41c5043e0661e9784ce1f3d95abc295b70d036d522859", 0x3c}, {&(0x7f0000000280)="3f99d8a5350ab50c61076267efed1f9f2afcf3740825ce1accd9d7e42946972a070e65ed7b88e3e5c3ef27ef178e69c13a72b660354233d9949c24fab9d2e304d9a6a45446c54dee474bd8e37d45c1e46137f16945676773e628854c168f141dff0bd5e9facfa385f74c06603efac4e394a6d3b53afb90ed410f0d5741e074709e0ccf12558ee33cf93a", 0x8a}, {&(0x7f0000002480)="1b08c332fd2d4133d00845feeb914ac37e6fd43c2ba5e2eb7a87a0403c951d72552674173918473bf66d0b2c8dd76a6e266355111216287916ea9666a5f6c4bb4608825434d8abfd0d11ad86ba918a41d39036ef83c866d4433be27a8094d927e033ab10aada4cbaac55bf137a3a8627460dcf5b5aa70a0247ddb8b391a8a2669e6d887a8a933497df356227d52bda762fd8de36950859cc8c1ce5f09f0ad5119ebf6ae3f32a03f5f6e50a865018546819939cae34c7ead33c213dca800a0c369a27c4d5bc613eea7ea33149d71b202dbd9658a090b1db90c639dca3453948a1ae1f42835e1311beedfb0b28bcb91b2c54c4cba3310a6c773c212fe0b768f41f5621dfdff8f9fb4c62982823539035928d3d5f1654fa4152f42165ef10f5deb5a554aecfffaa3ab0373a28b4054486ebca4dbfb4c91c7c8a2ee7f291476a2317509d64909d439e4ae4d7602267f04701c7f3f0f62f31aa3a1bc6cdbb8587d504412df1a224dfdf4f7e3fa113386030efdce2438607b3c1a29c25986d858fc95a2870ea0df371cebed47062ef1eccd14b1d2daa31bd7ed11b2a7474d55fd385466470134c31cd939e34c0dffe680991a584c63e8f9cb1da20b912364d66b736ebede8b3d943df8a808b4925ab1ca9648d5824675dad629748a08b0539ab3e0a0d4d5dc0549305ba005ee006b57a2a638f39d92650e94c8e9aa2d3befb50acd1a99616fe3d59913fafab15b6cc05b222c6035bfa86834c40c19951df74fc370d7a54719e9707bd3fa8b967088e755c0c6ec9c353baa5e9a40a53bc3174bb658381b0aee165887f57771b1c28019e9fab048cc13c7060af992c2e20d19b5686fe630a8b25ed2371657a4360c5b84dcf4b5474156a1d4806ca5ad71e80dda955d3851551f97c9f4fefb710a8522645f0fdefbd7d82fc231cebe5a86ad608e5e3881854a082de09687bdf2cd8fa2f66ea1558d69b60961498a1d7da163a5f93423171d82fd6e86ae96b86757925b088edde7cf9bc430d814ee1d15d43fcb654bf0f02fae19ef1f0e1f9767d03b3da6485b43ae62b93565dedd1461c44d0a6c0503b014fa3bd197aec418480ac590f13a514ea3d32c4330544657cd0e9e036d712e8bceec730b6e7c137be65cb9ab68f1c65cb11ad122f48e24e05e2960a4dc8bdfebb8d0b46b2ceb6a891055fe4ee2ed692d7457c511370f4f693994afddf6993bf02256ba0356a5cfbfbc45744252b8c198ca069a17ae864c3599ca94fd5ae2b84f1a823e56ac782b7029400d3862230419ed3d505c3991bda1e9e0239999069074e8d220e1f40c267d0bd098d3df92de44f0b4496b110b4a396a6f9947fb73cee5786c83e8476f4e71f177b2a72c0c3310d541bb6dd9c2b8b08ab0ee7ab40524706ede3c9377f500db641c0321b83250b2d30a5135b6fc2fd24eaf2d912aee9cc19aaf978c523f08c0506fb4339af52f6bfc78d335acb550dfb96b6fabfc6499101d3f00c08138fc4f0c5f694fcdf3b9f41e15624dd197e0ad84a6b0446f59a29b228d101a53402e3ade6e94c85772b4d3795b45c30fe5c514b65c35a349aff8028ed44baaba5afa3a1a94f1602918c5ac25d20f12482aa1e954da4cb405c38076efd3f01a938270d7dc0a537c431ba9a4eb4fcdd8a536b8c0bbec6748eeca5b1f24cb43a8d42f093f53ac603d8383b6d930fc9936eced9ee95f18ea4e4c4f890eeda3132ba22752fe7f76bb1e14f0290636cf1e5868b404ebf3d9758d3c89349475e4e98552d8be29bb0fd342c9b3e4105846fe0ed536a36b52118c818fe0b3e5fcdb2841dc4eba129fde5223ffdc342a2b40a908d5dc4c7661b405bd67be0c4ceef9d769d4336db8274bc6683aca5c68abe16fd8d57f5612233c2ade9bbef3e9a237f4714bf12f588dbfe4568cbaad40fdebc285f930548fff1b68f0dd5b22d9cdb52cdd71c40e1d1f8bed26ddaaeeabd5bb277bfef0a2b748b8986ee147a4849898ed7d9e6b9698360e85b5b5cc104181b0f6e498c862def13caf2ff822f75275afbafab41fbfd916ba3b5a2647f7df76e9ec8ab8239842c4037a66d6cf83d93ffb0fefecbcad5b3ed35b4cf71dd8431587cac1b1fe6cfcb9046405f0dd4f33986525bac094343e3bf111e7b0409321c1c6411327107aa819eea97c595a38ccf27928f20afba3af3bfaf55c245e35b4aa4646494d1688248229164d97cec1ac86bf38f068145e3dfe146b21b99adee18eaa67b12c9cf3e87915c68a7d5f4abb46e884d7dde64aba2e265de300ec71c6e3f37dbb7d7bc37e07ab411f45198c47f0956824c4f1f0b4ffb35f03f5fcc72f52a0eac982c293b7788f27d99b76bb0bdad67bb8a4fb4faf16a1f866529b4bc2a9fae6cf058f092b4ee642e50f586742cea1db5a24c6f3314d9604f6a2bd0670adbb62bad0892466255c5d84fa2e5a86a3c28496d5a25da2e7c573a37f9c6ba9bb4f0d480a8e95f2258b9761108784c81705925e4432c638f71c70b721aa722a83563dcae18954f01aa349f0a20b5fb7fd157f2532304fde447a1c2d00103379b98bb015ef99e502c82639319bad6d2367cd71e870a004f79b3d473b4dc0c4f87b951791b47d00521763a197bafe3f44d6683fca99eab6aef84c68804e517f930234e75a1e7141acdbaab7edd3c4d26ea21c354a0a379e634c59df40eb7933a798a99e3e0101785278f560b6c20249a6192a0acf0cf07acb034ee752a3e7ef56ed3abf51380b0d62db317084254684edfaae7c32b034d786eb234ccfafbca9652e9127c48a8956f25ca686d251d596c425da98e48eee9643f212833b2fd8ca2031db3e83977869965b702454fb2420f44298bcaba3a126dc00ab314d3d20c906891dfa3b26a701c775a63c78ea290ce7da3e40f1eaa1627baa45fd704899dad6a1d9902748ca7313d1cee0f2fc83f97364c97b9cd28ce523e62363304f73e072ab228f23e6ddaccdfc0f4348088d045d5da14fe825e8ab3c43294b51d84e1ff11b277b66db1492d09d91c8b1ea771e620c3b26e255c2208d97c106dc3c09897cb4e8558260825c108c62a7670fad25ca66c199f6526f4f7666d4272a5190e3c85080eb375bf0e8e3e0c9d954a1eea3263f62128d3772b53b8939248170971d68e16859e9ae83a2ef322c3281e92bf499fa86c5ecc68b3e46b5abba8cdf18f4e97510a42ba722961ec319fc1eb1dad49506bd93e37ed717804853d676f036e6caef2957c22aacdc65c243904095a47397b854682ef219e84f6d7a9cef35f099baa33cf9217b0f1797d807cae79e93108e99267065d9967d5ad94572609f583da4b27201862b688f1aaf7d8483c7c43c07784d80c356bd0693da7cb664e27aa787b39b7c31618ad8b5ef9d29fd6d38061d068a4cbd971ae2d74ab9ced8c22df0d7fdcc41068c3ad4f8a3d0f2a279992ce13a36d0c6326579e74dd39de537d495a16f7e535e7352b166da187bd22880e5ca20904b752212afd130494a17b61181a56b16cc310e892f80e63116f8565305bf8526b264213ce6ff39017d1e0b2cc38d3398c4c6fe4edda74c26627c8f18cf1e137fdfa11c21fd995dba7c90069121c1dfb61ecbee8c39f2c1b8e7fbcd7524e1795b5c17f70223b7990f033ffd3f099238e028f2a8591c34f5e44cfeb4ccb4cf854c118800014309aa5b32eac058c35269d7ba17de433cd8db0daa6d84c04c704d7f1db53752348fc5d0cac1a480dab5157278a77a68847c3a16e5a09def6271c6048d56e2d3f6830bed0d7287480ea7f696a185881a2ec4a62bacbb5cbb91559179591393715ecb1c171142166a0bd803c96ab793df3375e6911b96623c31f342bf5689371e9f0490257a54203871f0e1abf71699b4e33d63090b349ec4839dd0820912033f06c741ed1d52f1dfdfba97dab912e67d4d7351e0788ccb20e73a5edd8f17264db5448b7340b41d72d11f9efeb72b91f515de53271f1e8ea9c76123f243464ea3c7b33be64a6892daee1659d344faaba9e165d3cb90fc5bf1d90428fedcef7de69fc1e0b0611c17a9a639d02967c8aaa61016239679f4b5a4fdca1ffdcb38eef5c3753cb1849aa47b8b3ba9a531485203c806d356215066282883198d917ac152b7e1e6d6f62b91379a05bebf35f8660a6bce8ac6d49c15a7c6a7de66fc8b1c0565080a189c4c039a6043c7a30f848c228c0e38909ad91652618415948cb174aa731de2acf60e0119c3e58ebee0c8041fd48e91ba22d78c3645787b2e698e217c9c3de731d1dd528f9c715a2198854cd837baa8448f96fc2eb109e178a0eb8860649b46efc5a05160c246a8a22c0279e7a49f5cf7456944f33d01afda73d93e41d65627ad4ec530004f2287e02351df6e24adf452dea0cb989a633d0c37663792992a6750e99c192f8f1c9cedc5cb3e5b9debe8433cf024d6c7b9a9bfda83eaa83f6dc090367095e766dd802ec9a9b528f8953e24ad421fd95d048705bd384a85bb5115d6862e9f7fba5173327039c3ed97bdd633d5aae855f72f41d04735f9a9140629cdb194f4d90a307f888edace48ee4005b486110c501aadb2e55836d6c0a241eef3624f69e11786f68e4c0729f916bd24d85d93ed739b89fa0c05d39bfa92e06baf3caa1f9ade3c1f2cb3e1985031426993ed3e98e3d53deaa3452bf6ab9343c1b986a5f10806c4d34c3034cabbd64b2c627637ec935414f5ff2b632118ec34c4c74b75a1c6e42ebda6f10d9e217f395f32d1dd89c39e2fb491023690d635769b01a5d0709b43323de61f2de38505fb0adfdda4cd0059ddfa2c04fc18f390195f39074a6305f656b850db7c88f0868294dfbeb52a5d588acfd375085d8cdc247b789d402cfdefb6d7dc0068d23beb9f2ca6d2e2106873d3504021fe2063af786e475fed549e8fd758b998f1dc19cf379ca3b27739f2931a2e3ac16dc091ce1af18a4f3a9c978bb442f42dba4a9ec775a80053d8678274210488091d59e1db0d942b03eecb87894a4920046bddf7c92db7303b4251e632bca30bb7cff70d584b5af5dff0c90937ace0ea27c14e82b9dbe46c82acf8628c1c69500da4ef3dc9c8f822608751a088e2c3e6b72f82f5978dfee7aed7abf74f6f5d1725228a2a5f666b2110246d2634f8414d164f0ec880ddcb2a98920f31a534aaeed1a78e48205cdad0803f159f46f280162e8ed3bd82fd0094a24c3da007a6312c3a19be5f56be2fd394fec5698fd07af3254476823ad0875a1958d8b7512cb30f4237fb7b6652e00642ec01af8510c1160b5049be4f97bbab3784c42c583987234d839a1b878fc7d314486e90c02338f7e48686c926fc4faedc5f03f99c12ba002c784ff5efdd5c3e2ee34821d3e76384c1ccfae19fa14169d5ec44b2b6db2a80660e14e1fdf2fb68c5301b5c16b24521e67618d54d6e0fe106dc40d3a6fa923920fe91f0d498df46abec9e0fe982aaa557379e05fafea145b65e0aed2a72fed9ca432a15d5f32d2b91ce728a335e9c0108cd72cb6cb8fa585fa91842642f9b86691cfaa20c528751c0999a05f67880db239c5364934cbf51186cc269a44cf1bb894f97cff257c45c1a441321cec54d2239c83b3d98a5e101b12eb2639934717d29c61abbf8c5e22d3a99e41be99f12d22d25bd01666132cdbb1fec5b7d7f3cd6121443e9c79ec0c2e59a8aba83009a62afc68420ae1c5f76984ea5b72b8ff6ae00320362ed9274dceef95cf3a063eeba790eb42b950c842f104f5bcc0534378572e2309a5a0de891573a8ad49a1f84c3723217d4299a96ade00f22be6644e", 0x1000}], 0x8}}, {{&(0x7f0000003500)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x0, 0x1, 0x2, 0x2, {0xa, 0x4e22, 0x101, @loopback, 0x95e}}}, 0x80, &(0x7f0000003640)=[{&(0x7f0000003580)="a43d0ffcadb16c7aeca4928a25fef4519c357b79fb48de0bf19fec8fc26125fd89e7002da2d3d8b7f1fe86a1d5b5c7833b8db0c452f4de13f7323b63b52912bdc6244b3e29aa403d701361e44e75bda7187cc388eab89c3f07acf39cb8950947de479bb6ddd5", 0x66}, {&(0x7f0000003600)="30cc0bf335e0d855b54e5d1d6e6d833630f234a9250b43cc48c6e2", 0x1b}], 0x2}}, {{&(0x7f0000003680)=@l2={0x1f, 0xd5, {0x7f, 0x3, 0xfc, 0x7, 0xe0, 0x5}, 0x8e, 0x20}, 0x80, &(0x7f0000003880)=[{&(0x7f0000003700)}, {&(0x7f0000003740)="daf53e16dbaf64eaff2d19f4cc18d26703ed33fedb4ae1f8cffef420a0b3823617d36d2aac826573553099472ec70bda2b92a54e8ff9189449c5f51f3f9015a8a38e63ef608a8893fcb678c0840c9f9c5183916a8b5a699fc594a817e4ac1e9a8744d6d376b068cd8e5b8cd053fc61e08c52bded1357de34737ce4b41fe0c05222b227b1cd131a6306eb13d2ce53fc78f5f439e5c36ba4e50a916f760eaa4c6ea9afe1115b114693fc201e16f9180dd20012a0d926a2fdf3a63705fb91eaafcb5c42ebb244", 0xc5}, {&(0x7f0000003840)="51957ade6768cc79bbe80cfdfb10327c1416a0923bce20d32bd042592272819d39a4d23359", 0x25}], 0x3, &(0x7f00000038c0)=[@timestamping={{0x14, 0x1, 0x25, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x48}}], 0x3, 0x800) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 382.157399] attempt to access beyond end of device [ 382.208974] loop0: rw=12288, want=8200, limit=20 23:11:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0xff46, 0x3, 0x2, 0x100000001, 0x2000, 0x20000000ff], 0x1f004}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0xdea8fdd44829f630, 0x0) ioctl$TIOCLINUX3(r3, 0x541c, &(0x7f0000000140)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 382.235783] attempt to access beyond end of device [ 382.273495] loop0: rw=12288, want=12296, limit=20 23:11:41 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 382.338088] attempt to access beyond end of device 23:11:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xa7d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x200, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) getrlimit(0x7, &(0x7f0000000000)) [ 382.374617] loop0: rw=12288, want=8200, limit=20 23:11:41 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x1f}], 0x1, 0x0) [ 382.423779] attempt to access beyond end of device 23:11:42 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) [ 382.467761] loop0: rw=12288, want=12296, limit=20 23:11:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:11:42 executing program 2: ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x20000, 0x0) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x7a, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={r4, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}}}, &(0x7f0000000040)=0x84) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 23:11:42 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) r1 = getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x100}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000000)) 23:11:42 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x1f}], 0x1, 0x0) 23:11:42 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) [ 382.847951] attempt to access beyond end of device 23:11:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000140)={0xffffff88, 0x9, 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000100)={0x4, 0x4, 0x4b, 0xdd, 0x9}) 23:11:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) epoll_create1(0x0) syz_open_dev$loop(0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe7) syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0xf6, 0x5, [0x100c0000103], [0xc1]}) [ 382.884070] loop0: rw=12288, want=8200, limit=20 23:11:42 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) [ 382.937920] attempt to access beyond end of device [ 382.987594] loop0: rw=12288, want=12296, limit=20 [ 383.018220] attempt to access beyond end of device [ 383.057249] loop0: rw=12288, want=8200, limit=20 [ 383.095339] attempt to access beyond end of device 23:11:42 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x9) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) pwrite64(r0, &(0x7f0000000380)="bbc117f87dbdaa66a105b5472ec387e1528733eba9cb16687eeb8a5fc6be89b86a34853b38fc92f6cfb36b33fcb394b31552f310430ef6ad05a4f536479b0b6586c93dce63679d1360e72cb3f8d413bc9390c80bf6cafd1b20dfa905167a814d943898ed3e70b730ec718bb4f92acaf2dafa55ba53170e55", 0x78, 0xd391) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvfrom$unix(r1, &(0x7f0000000000)=""/137, 0x969, 0x200, &(0x7f0000000140)=@abs={0x2, 0x0, 0x4e21}, 0x6e) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000001c0)={0x0, r0, 0x32a, 0x80, 0x8000, 0x8}) [ 383.126781] loop0: rw=12288, want=12296, limit=20 23:11:42 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) 23:11:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = accept4(r3, &(0x7f0000000100)=@isdn, &(0x7f0000000180)=0x80, 0x800) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f00000001c0)={0x0, 'veth1\x00', 0x1}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:11:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f0000000040)=@ipx, 0x3f7, &(0x7f0000000440)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000400)=""/28, 0x1c}], 0x5}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) dup(r0) clone(0x7f8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = memfd_create(&(0x7f0000000040)='u', 0x0) dup(r3) r4 = memfd_create(&(0x7f0000000040)='u', 0x0) dup(r4) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4034ccdbf2bb01402120148d0f34379736bf3e6b2f97160c42c07bd0091b2d1c5a72d39ba83441eae0d002e200006886b6fd680d1facec00000000000000"], 0xe}}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x40) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5}) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 23:11:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x7, &(0x7f0000000140)=""/79) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x10080, 0x0) 23:11:42 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) [ 383.409447] ptrace attach of "/root/syz-executor.4"[14317] was attempted by "/root/syz-executor.4"[14318] 23:11:42 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x14) 23:11:43 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) 23:11:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x40000) write$P9_RREAD(r3, &(0x7f0000000140)={0x43, 0x75, 0x1, {0x38, "ec4ab2f35cc4958cc634744190f08ddb6acceba7429471ec3a6195ecf3a7cead7a78d79dd3a06522085ae27cc77cf6e7c9c2193fdbcfb219"}}, 0x43) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 383.583518] attempt to access beyond end of device [ 383.623965] loop0: rw=12288, want=8200, limit=20 23:11:43 executing program 4: ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)={0x31}) ioctl$IOC_PR_PREEMPT(r0, 0xc05c6104, &(0x7f0000000000)) [ 383.649165] attempt to access beyond end of device [ 383.696418] loop0: rw=12288, want=12296, limit=20 23:11:43 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) [ 383.717026] attempt to access beyond end of device [ 383.736443] loop0: rw=12288, want=8200, limit=20 23:11:43 executing program 4: ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)={0x31}) ioctl$IOC_PR_PREEMPT(r0, 0xc05c6104, &(0x7f0000000000)) [ 383.768809] attempt to access beyond end of device [ 383.787840] loop0: rw=12288, want=12296, limit=20 23:11:43 executing program 2: r0 = open(&(0x7f0000000000)='./file0\x00', 0x30000, 0x20) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r4, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="3295de8274a4c2", @ANYBLOB="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", @ANYRES32=0x0], &(0x7f0000a8a000)=0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x7a, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={r5, @in={{0x2, 0x4e23, @empty}}, 0x490a, 0x400, 0x1, 0x5, 0x20}, 0x98) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 23:11:43 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) 23:11:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:11:43 executing program 4: ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)={0x31}) ioctl$IOC_PR_PREEMPT(r0, 0xc05c6104, &(0x7f0000000000)) 23:11:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x8040, 0x0, 0xfffffffe}, 0x0, 0xfffffffffeffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0x1, {0x0, 0xfffffffe, 0x7fff, 0x1}}) 23:11:43 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) [ 384.158363] attempt to access beyond end of device 23:11:43 executing program 4: ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)={0x31}) ioctl$IOC_PR_PREEMPT(r0, 0xc05c6104, &(0x7f0000000000)) [ 384.198099] loop0: rw=12288, want=8200, limit=20 [ 384.242610] attempt to access beyond end of device [ 384.276275] loop0: rw=12288, want=12296, limit=20 [ 384.303415] attempt to access beyond end of device [ 384.319946] loop0: rw=12288, want=8200, limit=20 [ 384.341032] attempt to access beyond end of device 23:11:43 executing program 4: ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc05c6104, &(0x7f0000000000)) 23:11:43 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) [ 384.357069] loop0: rw=12288, want=12296, limit=20 23:11:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000040)="87a244f203cffecce89ee9f80194cfd537c2a84d31af96f902a20d") syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 23:11:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r3, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000100)={0x2, 0x6, 0x0, 0xfffff5dd, 0xb, 0x8, 0x6, 0xfc, 0x3fc000, 0x1, 0xffff01c1, 0x9}) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 384.396738] f2fs_msg: 55 callbacks suppressed [ 384.396760] F2FS-fs (loop0): invalid crc value [ 384.423953] F2FS-fs (loop0): Failed to get valid F2FS checkpoint 23:11:44 executing program 4: ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc05c6104, &(0x7f0000000000)) 23:11:44 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) 23:11:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{0x4}, {0x3f, 0x6}, 0x7, 0x6}) 23:11:44 executing program 4: ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc05c6104, &(0x7f0000000000)) 23:11:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:11:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) r0 = shmget(0x0, 0x4000, 0x200, &(0x7f0000ffa000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x6, 0x6, 0x4}, 0x7}, 0xa) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x80880, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) 23:11:44 executing program 4: ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, 0x0) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, &(0x7f0000000000)={0x31}) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000000)) 23:11:44 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) [ 384.838297] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) 23:11:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) 23:11:44 executing program 4: ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, 0x0) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, &(0x7f0000000000)={0x31}) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000000)) [ 384.915125] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 384.950469] attempt to access beyond end of device 23:11:44 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) [ 385.034735] loop0: rw=12288, want=8200, limit=20 [ 385.040023] F2FS-fs (loop0): invalid crc value [ 385.071911] attempt to access beyond end of device [ 385.101247] loop0: rw=12288, want=12296, limit=20 23:11:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r4, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x100000001, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x8000], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f0000000140)=0xffffff01) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) r7 = msgget$private(0x0, 0x0) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r8, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$TUNSETVNETLE(r8, 0x400454dc, &(0x7f0000000100)) msgsnd(r7, &(0x7f0000000500)=ANY=[@ANYBLOB='6'], 0x1, 0x0) msgctl$IPC_STAT(r7, 0x2, &(0x7f0000001480)=""/4088) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:11:44 executing program 4: ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, 0x0) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, &(0x7f0000000000)={0x31}) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000000)) [ 385.131650] F2FS-fs (loop0): invalid crc value 23:11:44 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) [ 385.187288] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 385.231194] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 385.277384] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 385.309787] attempt to access beyond end of device [ 385.331833] loop0: rw=12288, want=8200, limit=20 [ 385.351027] F2FS-fs (loop0): invalid crc value [ 385.367965] attempt to access beyond end of device [ 385.420291] loop0: rw=12288, want=12296, limit=20 23:11:45 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) 23:11:45 executing program 2: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x6) ioctl$TIOCCBRK(r0, 0x5428) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x6) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x7a, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e24, 0x8, @remote, 0x8}}, 0x67, 0x9}, 0x90) 23:11:45 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)={0x31}) ioctl$IOC_PR_PREEMPT(r0, 0xc05c6104, &(0x7f0000000000)) 23:11:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:11:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x900, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000a99e555e2d", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x7a, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={r5, 0xfff, 0x4, 0x7, 0x6, 0x3}, &(0x7f0000000080)=0x14) fsetxattr$security_capability(r3, &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000400)=@v2={0x2000000, [{0x79b, 0x8000}, {0x2, 0x7}]}, 0x14, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) accept4$nfc_llcp(r0, &(0x7f0000000440), &(0x7f00000004c0)=0x60, 0x80000) r6 = socket$inet(0x2, 0x4000000805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = dup3(r6, r7, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r8, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x7a, &(0x7f000059aff8)={r9}, &(0x7f000034f000)=0x2059b000) readlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/78, 0x4e) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r9, 0x4}, &(0x7f0000000280)=0x8) 23:11:45 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) 23:11:45 executing program 4: r0 = syz_open_dev$cec(0x0, 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)={0x31}) ioctl$IOC_PR_PREEMPT(r0, 0xc05c6104, &(0x7f0000000000)) [ 385.733081] attempt to access beyond end of device [ 385.792035] loop0: rw=12288, want=8200, limit=20 23:11:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:11:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000140)={'batadv0\x00', {0x2, 0x4e23, @multicast1}}) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{}, {}, {}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000080)={r3, 0x2}) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 385.814491] attempt to access beyond end of device 23:11:45 executing program 4: r0 = syz_open_dev$cec(0x0, 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)={0x31}) ioctl$IOC_PR_PREEMPT(r0, 0xc05c6104, &(0x7f0000000000)) [ 385.854753] loop0: rw=12288, want=12296, limit=20 23:11:45 executing program 1: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r1, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) [ 385.922763] attempt to access beyond end of device [ 385.937139] loop0: rw=12288, want=8200, limit=20 [ 385.968468] attempt to access beyond end of device [ 385.990837] loop0: rw=12288, want=12296, limit=20 23:11:45 executing program 1: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r1, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) 23:11:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=""/15, &(0x7f0000000140)=0xf) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r5, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x9) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:11:45 executing program 4: r0 = syz_open_dev$cec(0x0, 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)={0x31}) ioctl$IOC_PR_PREEMPT(r0, 0xc05c6104, &(0x7f0000000000)) 23:11:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x101, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 23:11:45 executing program 1: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r1, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) 23:11:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000180)=0xe8) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x2000840, &(0x7f0000000480)=ANY=[@ANYBLOB='mode=01777777777777777777771,mode=00000000000000000000000,uid>', @ANYRESDEC=0x0, @ANYBLOB=',uid=', @ANYRESDEC=r1, @ANYBLOB="000032bba07c4d24d245ee66dbf5133918bddbf2715501682f5e7821e88a1de9732aaf9ae3c23242614ce6a31c134e1b25599f6c2af9e1428247f51935e8371e90ac9a0f190e481d0043255fa7526c346afb7cf7c3c83f86c01fed4413cf18e6bffc90bbc2b7a8bcd6b8cadeef5d291ad01715455045ad406d289216bd5093000000001b5bf1"]) bind$bt_rfcomm(r0, &(0x7f00000001c0)={0x1f, {0x4e, 0x3, 0x7, 0x0, 0x3f, 0xee}}, 0xa) 23:11:45 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, &(0x7f0000000000)={0x31}) ioctl$IOC_PR_PREEMPT(r0, 0xc05c6104, &(0x7f0000000000)) 23:11:45 executing program 1: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) 23:11:46 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, &(0x7f0000000000)={0x31}) ioctl$IOC_PR_PREEMPT(r0, 0xc05c6104, &(0x7f0000000000)) [ 386.513004] attempt to access beyond end of device [ 386.518235] loop0: rw=12288, want=8200, limit=20 [ 386.550970] attempt to access beyond end of device [ 386.556421] loop0: rw=12288, want=12296, limit=20 [ 386.594475] attempt to access beyond end of device [ 386.599776] loop0: rw=12288, want=8200, limit=20 23:11:46 executing program 1: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) 23:11:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r2, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) getpeername$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000440)=0x14) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r4, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) sendmsg$nl_route(r2, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xa}, 0xc, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="28f3a9749e66c13f8f7fbeab0200000400000000bd06000000df25fb138a00ec931ee228e3fac3e96ef008950a6b41df71e46357867e3335a7bb9715e34bd99724d547e0d4811d6ab5c3308003fa517b9bfa20e1b74154065e29f0960c309932958f467dff1ebd559429c3c4b4614a4d6c501df82a09a21b41b22ea9fdc92dd2627b53a0a89c88fb829e1fa89f1cae40b28e81eaed31e29e35a07f8014d7f5c5da81f0c8a6daeb010000349af112b9b5e90b1d19b28fc671fc3bc24c42ad99f2ee7ff6155c969d5419956856155028dba93b50613076f94d866890ddf101f40109cdbe2baeb416cd368e35", @ANYRES32=r3, @ANYBLOB="000001000010000008001c00", @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r5 = accept(r1, &(0x7f0000000140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x80) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000680)={0x5, {{0x2, 0x4e23, @rand_addr=0x5}}, {{0x2, 0x4e23, @multicast2}}}, 0x108) sendto$rose(r5, &(0x7f00000001c0)="d2", 0x1, 0x4, &(0x7f0000000280)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @bcast}, 0x1c) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000000)) [ 386.644294] attempt to access beyond end of device [ 386.649662] loop0: rw=12288, want=12296, limit=20 23:11:46 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, &(0x7f0000000000)={0x31}) ioctl$IOC_PR_PREEMPT(r0, 0xc05c6104, &(0x7f0000000000)) 23:11:46 executing program 1: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) 23:11:46 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r2, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r3, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r6, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000480)={"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"}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 23:11:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x723e9cd069025d7d, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = fcntl$getown(r0, 0x9) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000080)=r2) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000040)) 23:11:46 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0xc05c6104, &(0x7f0000000000)) 23:11:46 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) 23:11:46 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0xc05c6104, &(0x7f0000000000)) [ 387.112196] attempt to access beyond end of device [ 387.151692] loop0: rw=12288, want=8200, limit=20 [ 387.157397] attempt to access beyond end of device [ 387.207373] loop0: rw=12288, want=12296, limit=20 23:11:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:11:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x44101c4a, 0x3}, 0xc) 23:11:46 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0xc05c6104, &(0x7f0000000000)) 23:11:46 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) [ 387.248256] attempt to access beyond end of device [ 387.277811] loop0: rw=12288, want=8200, limit=20 [ 387.300792] attempt to access beyond end of device [ 387.319403] loop0: rw=12288, want=12296, limit=20 23:11:46 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)) ioctl$IOC_PR_PREEMPT(r0, 0xc05c6104, &(0x7f0000000000)) 23:11:46 executing program 2: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 23:11:46 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) [ 387.481627] attempt to access beyond end of device [ 387.510808] loop0: rw=12288, want=8200, limit=20 [ 387.540413] attempt to access beyond end of device [ 387.570921] loop0: rw=12288, want=12296, limit=20 [ 387.599599] attempt to access beyond end of device [ 387.626127] loop0: rw=12288, want=8200, limit=20 23:11:47 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) [ 387.647570] attempt to access beyond end of device [ 387.666315] loop0: rw=12288, want=12296, limit=20 23:11:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:11:47 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)) ioctl$IOC_PR_PREEMPT(r0, 0xc05c6104, &(0x7f0000000000)) 23:11:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x800}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) 23:11:47 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 23:11:47 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) 23:11:47 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)) ioctl$IOC_PR_PREEMPT(r0, 0xc05c6104, &(0x7f0000000000)) 23:11:47 executing program 2: socket$bt_rfcomm(0x1f, 0x3, 0x3) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8, 0x200000) connect$caif(r0, &(0x7f0000000040)=@dgm={0x25, 0x0, 0x3}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 388.048380] attempt to access beyond end of device 23:11:47 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) [ 388.074985] loop0: rw=12288, want=8200, limit=20 [ 388.102411] attempt to access beyond end of device [ 388.129074] loop0: rw=12288, want=12296, limit=20 23:11:47 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)={0x31}) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000000)) [ 388.157355] attempt to access beyond end of device 23:11:47 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) 23:11:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 388.200338] loop0: rw=12288, want=8200, limit=20 [ 388.206056] attempt to access beyond end of device [ 388.228120] loop0: rw=12288, want=12296, limit=20 23:11:47 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)={0x31}) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000000)) 23:11:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r3, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 388.327543] binder: 14665:14667 ioctl c0306201 0 returned -14 23:11:47 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000000)={0x1, 0x37e, 0x1f, 0x101, 0x8}) 23:11:47 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) 23:11:48 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)={0x31}) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000000)) 23:11:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='N$ev/ubi_#trh\x00', 0xc2c40, 0x0) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000000380)={"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"}) [ 388.656904] attempt to access beyond end of device 23:11:48 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) [ 388.697820] loop0: rw=12288, want=8200, limit=20 [ 388.711042] attempt to access beyond end of device [ 388.727774] loop0: rw=12288, want=12296, limit=20 23:11:48 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)={0x31}) ioctl$IOC_PR_PREEMPT(r0, 0xc05c6104, 0x0) [ 388.764819] attempt to access beyond end of device 23:11:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0x4, 0x0, [], &(0x7f0000000040)=0x3}) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 388.790627] loop0: rw=12288, want=8200, limit=20 [ 388.808979] attempt to access beyond end of device [ 388.817312] binder: 14698:14699 ioctl c0306201 0 returned -14 [ 388.831510] loop0: rw=12288, want=12296, limit=20 23:11:48 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)={0x31}) ioctl$IOC_PR_PREEMPT(r0, 0xc05c6104, 0x0) 23:11:48 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) 23:11:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r2, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x800, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r4, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x176, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$CAPI_NCCI_GETUNIT(0xffffffffffffffff, 0x80044327, &(0x7f0000000100)=0xb49) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 23:11:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) 23:11:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000380)="e5e998e515814233f00a24b2b94838ef6e86196e3d8a1c8e3e7406d590a3d6ca50256a7cc7ab045c64b2e92ce23e474e7cd2c467c3b851f902b9bd0af89b8a5f9ce2d18ab04b24fecf1de30a1ae3bcc3b18efc37b0d6b753f73a3016e02b0038c3affe0fe3976c4c7ed5f3c5a53d099f4dde6e33176db7c54437e1c8b8b0e8da40057dc272ab772ba07b57502b927ef46fdcc0c3053866a72e08394a0e07468c3400377367f4d432b1b1eb0c2c1b2a9faf0f4ec150de06688d1726cfae6d1b0147367a54dcbe9f29dcd732b1f4fea125ad4bcbc9e3af98728954c43254b9bc55e15f33e6cc73c20644c8893e92d5117198", 0xf1, 0x5}, {&(0x7f0000000140)="65bfc46d45e824ac091ded2287531f4aa70742549344c9250591e4e1d7e4d6b62ebcff7198e50639a92820d23cf8b9d874db39c496871a83fc40b594646e7359669b2f394434ff56bec25a9938b429f814d6941c46772f35d39e176df761fa40e81a230eab12fe6b4190a9678f0e01e2b51792b916f239e32ae750d9dc05cea8b4973ac614d2f3049d254bdad2dbe6fdf9fac10fe7fd9273a2779f4bb9fc34e1381b058ecbce", 0xa6}], 0x0, 0x0) 23:11:48 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)={0x31}) ioctl$IOC_PR_PREEMPT(r0, 0xc05c6104, 0x0) 23:11:48 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) 23:11:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x22, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x10000, 0x0) write$P9_RMKNOD(r0, &(0x7f0000000040)={0x14, 0x13, 0x1, {0x8, 0x2, 0x8}}, 0x14) 23:11:48 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) 23:11:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x40000000000c0182) sendfile(r4, r2, 0x0, 0x6f0a77bd) 23:11:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 23:11:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000100)="3c0066ba420066ed670f01ca430fc73c55b5000000c401f85aa36681d338c4c2ad935c2700c463f9cebd8c000000f366baf80cb855535f82ef66bafc0cec660fda760466b834010f00d8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r3, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffffffffffffffbc, 0x0, 0x6, 0x8, 0x1f}, 0x0, 0x0, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x6000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004, 0x41010}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000180)={0x1000, 0xc212}) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x410000, 0x0) ioctl$RNDCLEARPOOL(r5, 0x5206, &(0x7f0000000200)=0x101) r6 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:11:49 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001740)=ANY=[], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) [ 389.573918] f2fs_msg: 78 callbacks suppressed [ 389.573965] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) 23:11:49 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001740)=ANY=[], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) [ 389.622614] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 389.646194] attempt to access beyond end of device [ 389.664752] loop0: rw=12288, want=8200, limit=20 [ 389.679207] F2FS-fs (loop0): invalid crc value [ 389.692406] attempt to access beyond end of device [ 389.708784] loop0: rw=12288, want=12296, limit=20 [ 389.730839] F2FS-fs (loop0): invalid crc value [ 389.749597] F2FS-fs (loop0): Failed to get valid F2FS checkpoint 23:11:49 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001740)=ANY=[], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) [ 389.795382] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 389.821445] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock 23:11:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r3, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) perf_event_open(&(0x7f0000000100)={0x0, 0x1f2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:11:49 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/142, 0x8e}], 0x1) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)) lsetxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='trusted.overlay.opaque\x00', &(0x7f00000002c0)='y\x00', 0x2, 0x2) signalfd(r0, &(0x7f0000000000)={0x8001}, 0x8) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) write$P9_RWSTAT(r1, &(0x7f0000000180)={0x7, 0x7f, 0x2}, 0x7) [ 389.844338] attempt to access beyond end of device [ 389.861168] loop0: rw=12288, want=8200, limit=20 [ 389.873700] F2FS-fs (loop0): invalid crc value 23:11:49 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) [ 389.892214] attempt to access beyond end of device [ 389.928499] loop0: rw=12288, want=12296, limit=20 [ 389.958177] F2FS-fs (loop0): invalid crc value [ 389.988018] F2FS-fs (loop0): Failed to get valid F2FS checkpoint 23:11:49 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) 23:11:49 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x10040, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$sock(r0, &(0x7f0000001c80)=[{{&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}, 0x1, 0x0, 0x1, 0x4}}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000140)="3950eb1618d96287911fc112cce6ea6264d99b19f4655e362af115792d635f784c9ddc0cb60dcce44dbdbc0fe4e35b3a6692f9166170797ff60cce2bb3a1bccba3d7c1f97cc65006bb84847e6a99a02bdcb3aa7ebe4c", 0x56}, {&(0x7f00000001c0)="cb0af6d6c18219389a1ac302e4cd2716e772289804d56e26ee4629130c078a0f730367ad9fc9526d57f7dbc13f3bc8", 0x2f}, {&(0x7f0000000380)="8fcaabfe0d5eb6b42238bd829decd1e1ca8a9476cd67bbee36f459bdd19eaf07b413f369556abed68813642c65f32a1341d062a3ba8e3dea5e12ade99eed93ad5af2eae3b03a79a3886eece3daf6463efa1aa5a0f48ea7806d416af9edba134dbaf04b861121ce5978d23ebfed93f575c92bc77a0c8c4794c5b9257c4021093639bccd88b643af42208feb1bd45395b6db5f6dd9fc56e2e354087b01471afd60b6da86cb56acba4b38efef8d716afc9383bc750d66cb54691475a3ff4f76ea72e50e0f19e98bca16e6192f665a14cffdd7105f403357d456f3c20d285e90f3ae", 0xe0}, {&(0x7f0000000280)='6C', 0x2}, {&(0x7f00000002c0)="799d750963d1343d414bf9bc702f954fc615b54fb8c456dc291bfd204f1def4a2a797796b7ca25a861ad1d36f76c2d5a3014cae7f8b55662d1aec3d43d11d97632d98fb5472f709c954f620f966d4af7926c96322a96684f70e8da36b6086795d3260cc021770805f3974b6e04fe0f0af2fadca6fa49dfd9ecb80b", 0x7b}, {&(0x7f0000000480)="72904fb754f74f5600f46cabdc909b2da7aa62c76c98a4e7aa132d665cf981ebd8a7b441b367e69c91beb70ea5d170d7941cc689ca814bf7f95828b07cc1037504f6199d390bfd76bb2556be659b750c008bc357a731a31d76f9b91489fcd9ee74894ef01143bf0be2b8f4043565533a76e02fc07cb7f879d5e1cabdfbc1a40df2ed4a592143534fa56cdc39537a82e1a8cc3287695a56208e432124a734220329acb0368f3546c493828fcbd8c8c426dfe9c6f0ca7d513c4fa312fb4e4813aa17ab187d4fac17c3bf4d", 0xca}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)="b4acfae1db304b57e5ccf6d1d4cd4d8988e44fff0748d235ce12196ea3500049848dc0b643107cb08bdaf24e754306e2144967a73f2ee4c17253929d36f96a963aa6dade5fa517fefff8cd242a2b917c86432d91d2c64962a316e3b5beeed9e879780747cb56560005a2c66561164a8c9b71467e716634022ce05d8d2e939af82b0401cfccdc83bac255a49f46d4a010874cec660a365b8ad86a3039eedff331dec283b004dd99a08637f7fee1262ce9249a3604fb7e7f380902c99936f254a1917c5bb9267886f9824d9ef0f2d26f977ab7ef84039d7b08c92a39e425bbcb140c0823e4423fdba8a9949f8d", 0xec}, {&(0x7f0000001680)="880c6a7832632a4ca960eafe2b1fe5a4b753c4bc9ddb73a06ea0710581178cc1b7a2cb5f030a87c00aee9e4a19f2482e88b0e358437c50621dd5cc69dad1c223ddaadb04582ac84c99a12d04d48918ae9d57c8e0539a73b050d1f8830edb9f75797d86256e12add4bfa7eeba5d56e53232b412e7f77c0f88da890bfcba13ac4fd401e79f799d3a9bc96ed7fe8f5308574d82e0dd969cc31c94b8f5a3781b22cbffdeec9e7a4ceab89bb947479a73ca843ed3671d9be7bb32b4a7394b2b2f0159a86ff1bf2164510d7a9eb2c24bcadbe9d97f9e4c", 0xd4}], 0x9, &(0x7f0000001840)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x200}}], 0x48}}, {{&(0x7f00000018c0)=@in6={0xa, 0x4e21, 0x9, @mcast1, 0x3f}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001940)="4eabff95cf02bbc5cebd6045113d60aee2547d3ae494037f28b518e16e69a5d45ddd5b2702a7cd8e66e1a41336c00da368076f24df5a53f06a273d48da83cb44892ad5cd3a9f131c492c00047c73c8f88f0fca8c84f8e97ec6f6ea738f5cd3026267038eed6d56ea928c2a257767019e5e04b98c9ebf8f2ba36fbb160311ee404e4457eca27a9f0a14f6d461c29de28919ea27a3602573d35aeb6c97e9871dc580858ee84a92da7186b805a5b9cafe2064e9b794876b71c604470b8100f8f061301ed6cb8aef0a1908e9d3", 0xcb}, {&(0x7f0000001a40)="8b78ba52121c651823611467844ac51dbd3c4e68c388f4e4f9fc602e71564646f343e13c6ada203043313fe5335062487f2d93bb073e6c36", 0x38}, {&(0x7f0000001a80)="2a2aec201565d264ee32378ccde4e2f2b8e1fb7c1639df2e1a5d7f047ecbf6d4c946943d278f1e5b575fa9c5f3999ffefe5b5c02bbc3aa1f70d1995ec37f0fbb7f34466cbec60a1f32d46a6dc8f68cf0d2386a7dafd6f244386fb58ab017cf227d4a", 0x62}, {&(0x7f0000001b00)="3746a2d10774936e84e3ab492ef5857b72885f68f357d6b8b2d85a2c1f9e6f478e3fa26c1a23557d4b622ef1a0", 0x2d}, {&(0x7f0000001b40)="c7abd6b28c54a735af8c81f74234783c229175d156876b586e7ae6", 0x1b}], 0x5, &(0x7f0000001c00)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x80000001}}, @mark={{0x14, 0x1, 0x24, 0x29}}], 0x60}}], 0x2, 0x4) 23:11:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 390.296247] attempt to access beyond end of device 23:11:49 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x5, 0x0, {0x5}}}, 0x30}}, 0x0) [ 390.321049] loop0: rw=12288, want=8200, limit=20 [ 390.337498] attempt to access beyond end of device [ 390.359523] loop0: rw=12288, want=12296, limit=20 23:11:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r4) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000180)=0xe8) setresuid(r2, r4, r5) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000027000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000100)="c422ad8e8300800000440f20c03506000000440f22c066ba420066edb9800000c00f3235000100000f30660f13273647d014bf66ba2100ed410f09660f38418308000000c74424000d000000c744240200000100ff1c24"}], 0x1, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r8 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 23:11:49 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) 23:11:49 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RATTACH(r0, &(0x7f0000000040)={0x14, 0x69, 0x1, {0x4, 0x3, 0x6}}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 390.394881] attempt to access beyond end of device [ 390.427804] loop0: rw=12288, want=8200, limit=20 23:11:50 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x3, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x90}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00'/248, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x14) [ 390.455200] attempt to access beyond end of device [ 390.499557] loop0: rw=12288, want=12296, limit=20 23:11:50 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) 23:11:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x10000, 0x0) 23:11:50 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = dup(r0) syz_kvm_setup_cpu$x86(r7, r6, &(0x7f0000004000/0x18000)=nil, 0x0, 0x115, 0x0, 0x0, 0x0) [ 390.711178] binder: 14820:14823 unknown command 25349 [ 390.726783] binder: 14820:14823 ioctl c0306201 20000200 returned -22 23:11:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8402}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 23:11:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 23:11:50 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r0, 0x0, 0xe, &(0x7f0000000500)='./cgroup/syz1\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000940)=ANY=[@ANYBLOB="000057b6a5fa70c23389f66c7fbbd3f03dc5ec9bacdc54887242b6cd9a3f05000000000000009eed12c2b5130bf8c738f15968c8f6529592062d19b5000100"], 0x3f) sendmsg$kcm(r3, 0x0, 0x800) openat$cgroup_ro(r3, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe2[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5\xc4x\x00\x00', 0x2761, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000780)={r2}) perf_event_open(&(0x7f0000000480)={0x3, 0x70, 0x9, 0x3f, 0x3, 0x9, 0x0, 0x1, 0x80, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x81, 0x5, @perf_bp={&(0x7f0000000440), 0x4}, 0x2000, 0x8, 0x8, 0x9, 0xa4e, 0xfffffff7, 0x9}, r1, 0xd, r2, 0x1a) r4 = gettid() perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0x17, 0xde, 0x8, 0x0, 0x0, 0x7f, 0x8030, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x1, @perf_bp={&(0x7f00000000c0), 0xa}, 0x20, 0x101, 0x4, 0x6, 0x6, 0x43, 0xac}, r4, 0x10, r0, 0x9) r5 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x100a5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5, @perf_config_ext, 0x40, 0x0, 0x0, 0x2}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x0, 0x70, 0x81, 0x0, 0x7f, 0x2, 0x0, 0x8000, 0x84, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x81, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x14000, 0x1, 0x3, 0x8, 0x2, 0x3, 0x13}, r6, 0x3, 0xffffffffffffffff, 0xa) socketpair(0x5, 0x80000, 0x9, &(0x7f0000000200)) r7 = perf_event_open(&(0x7f00000003c0)={0x4, 0x70, 0x2, 0x81, 0xf6, 0x1, 0x0, 0x10001, 0xa0, 0x13, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000380), 0x1}, 0x4, 0x2, 0x4, 0x95a292f9e07ccd63, 0x4, 0xfffffffa, 0x1000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_DISABLE(r7, 0x2401, 0x27da74a) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x1200, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904014865160b00012401000000000100140e00060000000001000000000300", 0x2e}], 0x1}, 0x0) 23:11:50 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) [ 390.941604] attempt to access beyond end of device [ 390.960302] loop0: rw=12288, want=8200, limit=20 [ 390.983472] attempt to access beyond end of device [ 391.005014] loop0: rw=12288, want=12296, limit=20 [ 391.028269] binder: 14846:14848 unknown command 25349 [ 391.046538] attempt to access beyond end of device [ 391.057636] loop0: rw=12288, want=8200, limit=20 [ 391.062515] binder: 14846:14848 ioctl c0306201 20000200 returned -22 [ 391.099402] attempt to access beyond end of device 23:11:50 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/142, 0x8e}], 0x1) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000080)) sendfile(r1, r0, 0x0, 0xfffffffffffffffa) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) 23:11:50 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) [ 391.139638] loop0: rw=12288, want=12296, limit=20 [ 391.233855] binder: 14856:14857 unknown command 25349 [ 391.278751] binder: 14856:14857 ioctl c0306201 20000200 returned -22 23:11:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000001c0)=[{}], &(0x7f0000000240)=0x8) 23:11:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7f, 0x2) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/142, 0x8e}], 0x1) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000080)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f00000002c0)={0x0, r2, 0x15, 0x101, 0xbd9, 0x200}) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e24, @local}}, 0x2, 0xff80}, &(0x7f0000000040)=0x90) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={r3, 0x100, 0x1, 0x5, 0x0, 0x101}, &(0x7f0000000280)=0x14) 23:11:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x88800, 0x0) openat(r1, &(0x7f0000000100)='./file0\x00', 0x8000, 0xc38f627e88d998cf) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) r2 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x400, 0x402321) connect$bt_rfcomm(r2, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='+dev/ubi_ctrl\x00', 0xf1687ee3720e99c4, 0x0) connect$bt_rfcomm(r7, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000180)=0x6) unlinkat(r7, &(0x7f0000000140)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23:11:50 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x3, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) 23:11:50 executing program 2: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8008, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xd, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 391.445382] binder: 14868:14873 unknown command 287493 [ 391.496108] binder: 14868:14873 ioctl c0306201 20000200 returned -22 [ 391.596673] attempt to access beyond end of device 23:11:51 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x3, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) 23:11:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x8001) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000040)={[{0x0, 0xc7, 0x1, 0x7, 0xe1, 0x1, 0x34, 0x2, 0x80, 0x20}, {0x7fff, 0x0, 0x5, 0x6, 0xa8, 0x81, 0x0, 0xe1, 0x4, 0x3, 0x78, 0x7f}, {0x3f, 0x7, 0x0, 0x2, 0x20, 0x0, 0x7, 0x80, 0xf7, 0x4, 0x91, 0x0, 0xfff}], 0x4}) 23:11:51 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r1, 0x9) r2 = accept4(r1, 0x0, 0x0, 0x0) close(r2) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000000), &(0x7f0000000100)=0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r4 = socket$inet6(0xa, 0x40000080806, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000340)={@rand_addr="ddeba30ae9a2dd2537adf8c12d91254c", @ipv4={[], [], @loopback}, @initdev={0xfe, 0x88, [], 0xff, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x7f, 0x40030a, r3}) socketpair(0x10, 0x1, 0x1, &(0x7f0000000180)={0xffffffffffffffff}) accept4(r5, &(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, &(0x7f0000000240)=0x80, 0x0) [ 391.662999] loop0: rw=12288, want=8200, limit=20 [ 391.708966] attempt to access beyond end of device [ 391.733514] loop0: rw=12288, want=12296, limit=20 [ 391.747803] binder: 14890:14893 unknown command 287493 [ 391.778316] binder: 14890:14893 ioctl c0306201 20000200 returned -22 [ 391.778801] attempt to access beyond end of device [ 391.820322] loop0: rw=12288, want=8200, limit=20 [ 391.834458] attempt to access beyond end of device [ 391.847574] loop0: rw=12288, want=12296, limit=20 23:11:51 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x3, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) 23:11:51 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x16, 0x0, 0x0) [ 392.015092] binder: 14903:14908 unknown command 287493 23:11:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x6) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) 23:11:51 executing program 2: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cachefiles\x00', 0x80, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/de~/mIS\xc2\xff\x02\x00\x00\x00\xff\xff', 0x0, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/142, 0x8e}], 0x1) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000080)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000080)={&(0x7f0000000140)="f142b8984c218a46c0693773e426440e185e8c72c4c8f23ef6993000753fd5814132838a15c718df0a0876010abf75cf7c7edf4c7b1d80e9d486e347c39b43ac290f5c065b9003991b55e96e484f6718fc707e712c86e011343b6b3bb07317e60c2c9074b581049ef86c90f6ec10b01d1a7f88556c50e98fcbe639601e57c8799434c5683514928c0959c2", 0x8b}) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 392.039704] binder: 14903:14908 ioctl c0306201 20000200 returned -22 23:11:51 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) 23:11:51 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) 23:11:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r3, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="74000075780d010021b6abb90024000705000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="840000002c00010700"/20, @ANYRES32=r7, @ANYBLOB="0008008000000000030000000800010075333200580002001400050000000000000000000000000000000000400006003c0001000000000000001020898dde66057433b6ef3a41d22be225e0001b00000000000000000000000000000000000000000084e1a912c5998bcbf050000000000000000000000000000000798a3c067277da1a290b9613a33c575c36fad473382c8f5532ef3f0e1d2c450a7decbf3431a69f9b2ecb3291bed174245a962fe0484676958265e2988326a89db3139d91fe4aee6ae7e745abdfc21a9f61f2035979c1e3e9fea5b3958bc14fce6e66a36d1ab3194534ba4e973684b27793bff837d3"], 0x84}}, 0x0) bind$packet(r3, &(0x7f0000000180)={0x11, 0x14, r7, 0x1, 0x81, 0x6, @local}, 0x14) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r10 = gettid() ptrace$setsig(0x4203, r10, 0x1, &(0x7f0000000100)={0x5, 0xfffffffd, 0x6}) [ 392.239714] attempt to access beyond end of device 23:11:51 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000000)='.\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x40000, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000040)={0x6, "cb3985b26e27f4b7c14361f535d1bf267f5587848c5fdbe8b984689e31b8da22", 0x1, 0x9, 0x3, 0xd67951bb5e908c53, 0x8}) bind$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) [ 392.263953] loop0: rw=12288, want=8200, limit=20 [ 392.292699] attempt to access beyond end of device 23:11:51 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) [ 392.316851] loop0: rw=12288, want=12296, limit=20 [ 392.362657] attempt to access beyond end of device [ 392.379884] loop0: rw=12288, want=8200, limit=20 [ 392.401208] attempt to access beyond end of device [ 392.430665] loop0: rw=12288, want=12296, limit=20 23:11:52 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) [ 392.470912] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3448 sclass=netlink_route_socket pig=14940 comm=syz-executor.3 23:11:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x424, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 23:11:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x5fa102, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRUE', 0x4, 0x1) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 392.614650] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3448 sclass=netlink_route_socket pig=14940 comm=syz-executor.3 23:11:52 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, 0x0) dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) [ 392.777477] attempt to access beyond end of device [ 392.805931] loop0: rw=12288, want=8200, limit=20 [ 392.813740] attempt to access beyond end of device [ 392.833949] loop0: rw=12288, want=12296, limit=20 23:11:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x3, 0x10001, 0x80000003, 0x80000000000000, 0x0, 0x2000, 0x20000000ff, 0x2, 0x0, 0x0, 0x0, 0x400], 0x1f004, 0x800}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/142, 0x8e}], 0x1) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r5, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r6, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) sendmsg$nl_route(r5, &(0x7f0000000340)={&(0x7f00000001c0), 0xc, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000005a00040027bd7000fbdbdf250008000300", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00'], 0x1c}}, 0x0) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r7, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) write$P9_RMKDIR(r7, &(0x7f0000000380)={0x14, 0x49, 0x2, {0x0, 0x2, 0x4}}, 0x14) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000000080)) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000100)) r8 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 392.853821] attempt to access beyond end of device [ 392.859166] loop0: rw=12288, want=8200, limit=20 [ 392.880915] attempt to access beyond end of device [ 392.886162] loop0: rw=12288, want=12296, limit=20 23:11:52 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, 0x0) dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) 23:11:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in=@multicast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000000000)=0xe8) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, r1, 0x2}, 0xc) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 23:11:52 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, 0x0) dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) 23:11:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xe) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@NDA_LLADDR={0xc, 0x2, @link_local}]}, 0x28}}, 0x0) 23:11:52 executing program 3: prctl$PR_GET_FPEMU(0x9, &(0x7f0000000100)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, r0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:11:52 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x19) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x80}, 0x1c) r4 = perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5253a966ef325efe, @perf_config_ext={0x3778, 0x5f2}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0x4) r5 = dup2(r3, r4) r6 = getegid() ioctl$TUNSETGROUP(r5, 0x400454ce, r6) r7 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x80}, 0x1c) r8 = perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5253a966ef325efe, @perf_config_ext={0x3778, 0x5f2}, 0x0, 0x0, 0x3, 0x0, 0x200000004000007, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0x4) r9 = dup2(r7, r8) r10 = getegid() ioctl$TUNSETGROUP(r9, 0x400454ce, r10) r11 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r11, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x80}, 0x1c) r12 = dup2(r11, 0xffffffffffffffff) r13 = getegid() ioctl$TUNSETGROUP(r12, 0x400454ce, r13) getgroups(0x8, &(0x7f00000004c0)=[r6, 0xee00, 0xee01, 0xffffffffffffffff, r10, r13, 0x0, 0x0]) r14 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="9f09000000000000000000000ca8a7abbb0000000a000000020000000020000c020000000030725f5f2e2e001800"], &(0x7f00000002c0)=""/98, 0x2e, 0x62, 0x1}, 0x20) r15 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r15, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/142, 0x8e}], 0x1) ioctl$IMADDTIMER(r15, 0x80044940, &(0x7f0000000080)) r16 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r16, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/142, 0x8e}], 0x1) ioctl$IMADDTIMER(r16, 0x80044940, &(0x7f0000000080)) r17 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r17, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/142, 0x8e}], 0x1) ioctl$IMADDTIMER(r17, 0x80044940, &(0x7f0000000080)) r18 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r18, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/142, 0x8e}], 0x1) ioctl$IMADDTIMER(r18, 0x80044940, &(0x7f0000000080)) r19 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r19, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/142, 0x8e}], 0x1) ioctl$IMADDTIMER(r19, 0x80044940, &(0x7f0000000080)) r20 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r20, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/142, 0x8e}], 0x1) ioctl$IMADDTIMER(r20, 0x80044940, &(0x7f0000000080)) r21 = socket$inet_sctp(0x2, 0x1, 0x84) r22 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r22, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/142, 0x8e}], 0x1) ioctl$IMADDTIMER(r22, 0x80044940, &(0x7f0000000080)) r23 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r23, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/142, 0x8e}], 0x1) ioctl$IMADDTIMER(r23, 0x80044940, &(0x7f0000000080)) r24 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r24, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/142, 0x8e}], 0x1) ioctl$IMADDTIMER(r24, 0x80044940, &(0x7f0000000080)) r25 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r25, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/142, 0x8e}], 0x1) ioctl$IMADDTIMER(r25, 0x80044940, &(0x7f0000000080)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000d40)={0x0}, &(0x7f0000000d80)=0xc) r27 = getuid() r28 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r28, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x80}, 0x1c) r29 = perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5253a966ef325efe, @perf_config_ext={0x3778, 0x5f2}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0x4) r30 = dup2(r28, r29) r31 = getegid() ioctl$TUNSETGROUP(r30, 0x400454ce, r31) r32 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r32, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x80}, 0x1c) r33 = perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5253a966ef325efe, @perf_config_ext={0x3778, 0x5f2}, 0x0, 0x0, 0x3, 0x0, 0x200000004000007, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0x4) r34 = dup2(r32, r33) r35 = getegid() ioctl$TUNSETGROUP(r34, 0x400454ce, r35) r36 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r36, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x80}, 0x1c) r37 = dup2(r36, 0xffffffffffffffff) r38 = getegid() ioctl$TUNSETGROUP(r37, 0x400454ce, r38) getgroups(0x8, &(0x7f00000004c0)=[r31, 0xee00, 0xee01, 0xffffffffffffffff, r35, r38, 0x0, 0x0]) r39 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r39, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/142, 0x8e}], 0x1) ioctl$IMADDTIMER(r39, 0x80044940, &(0x7f0000000080)) r40 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r40, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/142, 0x8e}], 0x1) ioctl$IMADDTIMER(r40, 0x80044940, &(0x7f0000000080)) r41 = fcntl$getown(r40, 0x9) r42 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r43) sendmmsg$unix(r1, &(0x7f00000030c0)=[{&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000140)="ad09a31aabe01983cc6bba13b44db01c1dc3e471b43a677b98d34ca98d51edcbf3c125561a5e0624c1b2a277575a2f6439977bc316d183f55f5a2c78eb16f8be25169f2841cda04fa73a8e", 0x4b}], 0x1, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r2, 0x0, r13}}}, @rights={{0x1c, 0x1, 0x1, [r0, r14, r15]}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r16, 0xffffffffffffffff, r17]}}, @rights={{0x28, 0x1, 0x1, [r0, r18, r19, r0, r20, r21]}}], 0x90, 0x40001}, {&(0x7f0000000480)=@file={0x39f28539e551f701, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000500)="301edf845948887aa71e89f3ba14b9e61e30ef78ea55092ed63c511d4cc1276d1d8444c23b9d551e19bce873da33bc43fcfa6b1ad66e382e937fc4ebce0ad042abe08e591af46d90cf71389eaa8b190e1a59f651a2cd40342fca7573bfb0ff4998709ae95aa3462eadbce80a3ec858921a55529ef7b91a709f2ac697954194e5bae248ec6e467fbfc258a25893b8b0541c86caa4f55f6043ae6a71e8c1b2d7a190ce35987ba497ab3cbfb6f09e5dc7c6b443aec53a2c14adb538faac67ee", 0xbe}, {&(0x7f00000005c0)="2a371a7a45eae669d81ac52950093dccf206ea4755ba559a45de31643fbb9822651556792162352199ae8d8f25d9fb6b1f44318186f3c4497ffabf9761a21f2ce77202bc688ee8ff3ef87e20448ec56f8ef384ed5c87c4031ed868f0c4", 0x5d}, {&(0x7f0000000640)="11e7d9b93e9965d28b2542daeea7a9cf61baf97bcc7c9a79395435e95ab99feaf301aed6c06a64f8871dacb569c94471531848961b66a6ca91fbbcabb366c7dc24", 0x41}, {&(0x7f00000006c0)="da12c238c62d47ce80fa7e24bcdc4aee71fb4ff9fc1c2140e9edb21f3675b84b3e5ce319644a3e9f572e7ad95031d811546a01d5aa849147e1b878216b30228f9d3b0512228a13a4a4a62da8659111832e5831172611d87e82949acd96be140130118793f5b7f5164d4368744c898ee71f97175d9d69881fd731c7269c1b647117f699f28f8fa2ba1d11527ca7be1e1c7fc37a6b3ad9a9c8842c29ea26d52e86871e71f482eb98877e88d7570a130d2ce93f939f05617c21769e0ba97c7e42dce4e9d20410371c62f9450501f55bc754e2685a5e", 0xd4}], 0x4, &(0x7f0000000800)=[@rights={{0x1c, 0x1, 0x1, [r22, r23, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r24, r25, 0xffffffffffffffff, r0]}}], 0x40, 0x4000}, {&(0x7f0000000840)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000cc0)=[{&(0x7f00000008c0)="63d167e2285990994a02b6322831cc03fb99eb4fe2cd6ec575c96a1575495d82c79777e787844d1446f34234fb993320384f022bfcd5f8f245c0be9e8c079fc8c1c5f0e5cb82731a8b53d99ac27fb828d6ff8ed05de96d38e6a0beccb97b9a00fd8a8bcb1246c9c8db850e8bddc392c10368de5f093b3b5d4f2673d324be2d15205ad6f52160574463478fa6fb2115afa360f558bc5762c15d4b08868538a9f137dea5b3787e183c59e817ca392b49a60357b58c80b80e560c37d201", 0xbc}, {&(0x7f0000000980)="2a14e190ffd2a45a60adaf5984063aada32a9d7f7417cb4c69625915a03f07b85dd928af44436f4530282a8b8753eb1778e8bbdd1ea1842dbdcfbc1e644b1609a0b4cbe083148c17b55823896ca92f633f7f3c1abcf488f0f9e0f2835c5611631d90aee76983e9f79561685b5b8852e09b9a0cc06bbe45e84d8cb224dfd9c9fb93c4057dfb296f337d262585a6cbb3ba8cb3b5716dbb5369", 0x98}, {&(0x7f0000000a40)="82e52d3db57e285d0d864c44aeed99b7a465f139debbf4eaf08c124e51f1a4571c744bab704247e4dfb1c27623dcf644eff5d4b14e03e548ca02702ea3accf97ecb4979a5c13ccf84561129a7c213abe6e4ef3314f4759c0795ca046797594239f4de35aad55abafd09e617479bb0b2d09d14bbc841de96deb4ba0d0f1a610ea4d59", 0x82}, {&(0x7f0000000b00)="11166a37b1f5f7a5f70094422a12e557880c59c1b10d6a16ae30590b0c4d7cd99a69ec77beb6dccf828a038ddca10f6eb1d2b0cceeb497b741e2d5b112689016390442992ae9608c2157053b4e2f811f03e1002b62fca08e8bbf1fa88520ae7417dfa516635da5c6eb7e4eb4915952d208f90ea6aeda0debde9f93e7ba561a701d5d1a9799c64cedb41067b4ab16f940b01814adef54bb0a24b703cd19af4ebca5536bd178105f6397e4e68c180e7fcba9914a0fdb87bb68699cb5e37cfd73790fc9d52d9584e3492e00a831ae3350c2", 0xd0}, {&(0x7f0000000c00)="c8a24a7fd262c2f88a27ca8e314dd1e48c8ca2690f55fba2af7c11761bb0be8a0edada9cd1c9e27f012e8f78d1a478bf630cacf81454eda090497afdba73720bc2f30858b80242091bc863bcd68e67b20c3a2f25a77096482344", 0x5a}, {&(0x7f0000000c80)="ddf21e79f776c432dcba5d058bb43939839363af9e920ef864f13b59b84c163441d684", 0x23}], 0x6, &(0x7f0000000dc0)=[@cred={{0x1c, 0x1, 0x2, {r26, r27, r38}}}], 0x20, 0x40000000}, {&(0x7f0000000e00)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000003000)=[{&(0x7f0000000e80)="8f0bbe3f3a8468b07073a93b3d0f125b8f4ef7874bebdc2b7603dd3623b6b414e311f1b0586505f06f7e3739862e030d479d7f3996b371b661541516a63b11", 0x3f}, {&(0x7f0000000ec0)="b017409164542edd866579429484b7271e50bdecf27ca84e9b2f9cf4f8d2193d9520e6873b044f003d9ebc4fada29b76db8529ae79d3c8b035d51eac674c34d5208f738257a9ba6d6607d02ead7ea2774ca49996c1638ea363b7fc", 0x5b}, {&(0x7f0000000f40)="0f7f0b321ca79dfd90e60e1f790517c6b9dfafcfd07f23fb293daf0459959f56595513a84931d2fe3ab38ec47a8d6e77130190bead7aa763ed47cb8a7484c5f69cd47b9e1f9d893b62f58528f6654d60f8fa4bd57dbb6a3d1a22cf08810dbacde890eee4395f239443163066b0a2023bb0727a3efd9be45db3561892094d60d726fd9e0b6c7b5e2c18006de7df7d8f7cd93892622d9ee60c4869151432b6f1e4482aac8546a4cd51c6eee6b16fbb46289cf4fe2b5a11c3212e60fcbf68728cf4d0a4de679028baae9b1b86de18ee9fdb0f477c89ea5076a8da36f505ec7fd1a3ac61a226c844ca2b0352665aeeef81d1b037f3266e3424849eda35a1e1cc278bc75e453a980943dacd94cac0f7d2b5ab2c8d39cbec22b0bcbce87e4dff305b7a5e10132fc27758b8d585ffed87a1af5bb6bcf6a9daa429d21225bb1cdc2e5a64a3a2a5a75223796d6686dd6b6922c0bc7a7c63963e6eacfe721e3000a2f6b5f1290ad51c5952b2b655ec05d413d28fd38230bf2df6059eeed1eeac5d03700755a013c2e93c52700939af8fff97b06bf16ade90ad06e822cc2b5ebbb5a1a87025e7d3b106ddef68ceb05e1cb3630d12704adac952ef4b6b897b2cf6baea86fbd6345a3439afc2c23395d89b3acf7acd1c42c82b2a526d5330b27952a994cd0282ed01f7d4eef040e626116f7c34f08c18402c9a38d939fb2b8019690d960094d02d614e33b7d28852612440aee47650dfb3e6ae03278b86ec2968c466b5f0a5cee9c1ae1f522826ffbcfa863a9dadd3f6f03a963cde3b4b21680b5a1d9aeeede330d64b6a2c314ee440792d8c4b8aadfddbf0473e3d13870710c93ed9cad79fd03b86af7f3edb6b3de5813eaa06babd6fd0d8d9a59c7d4ddbf405f05f6ab329e82896d9095fc804d9a25fb226eb71e81b5631d17063e4b55d50043904835da607c6e57caf4b902484c1b186b11bef08691f32a82ec2482c83f17f679dc01ddbfa0138bf03b112e0ae9fac93a75dedc1ac48ae9831d4931f7589ad6ba5872f51f419e1d498a5b1996b301f6031272449dcbb7f642573d5fc894f3c25a13225d4d443edb1e1dda78bc11a66cad9c9dc2830c52c8ca9457bf4b7b35de4a820706a2183924d3e2be13a2108b047dc5555ccb416654a996fc9d00036b1ff73ba6e507f5892605e81a8674e74cf66480c1bc09e1b23fdb99e50b5ecbe751b0f587316745b212adf4881ed549bdb8a35ac7f82cb5e74519ba1ef97282663cf3eda62341b7fe3079b1cf5352361f3f37800190fdfa41f3fb3ae899b16ff5d7c8f5546d68cbefcd82393dc511be42d70a22744192184297cba1ef88e97a3f2b228a7d0e03273f44f028174fe826ff6547b7050f15e2bc166b5085001b19d4b099618654262bf0a98d583459d582419ac0255f321bcd2aa8edb81c87ec5caecd501da984a30af6c864115dba3ade86cef88af45961faf0c40a02c483006ee1121b55fc5b25d8af9653c6b07ae898f4e98b323ee8cadeaafbca0ab7f12ec9a5a5adca957d7b9b50d3a3989b0aff712a52e3463468791abf3cb39987cd4e867deddfc48a0eced006957b48c26a31610fe23ff85a953c95b0925526bcf6d17bd60423f25514d6c8c0c94a4c4c8ef5322ac9e6cebae5825551520e5d767179e2fbb108d66eefd40b6f08a6ce4fc6ddb902ce9c7190343b27c053b15361be462e522073a79c61455a833a9bb9689367418e19cb8e3653fb10a4c9aeb7fcf50f2886056bf2f993819f404cbc57d0d29a3105072f50800819993917afcb938a2ee5d5d1d3060fcfae7a14f5ada6ba54c3f76509df0f0e3016a63589a498a425f952d4f09b0a68b3f98586e10f1b20df7cfb281b87fa22171fb0b232a3ad08b7c3836faf320e275e2a68ebe47625145eb430bfa8c8100f33492391933ad0e8639ff343847615a381bca7f5cd4a9e0233eef4e32b7a6d971d0b1198c139c2f80de5674f4a64470f0cad75ba8485133a5f076c7043c9794f10663d1d7a5036d94c92505221f58db3b2eb1b7b674a18e3fb68b6e95041ca8268c1864b3aa28bc99e82b50ab3b423b30789fd3a7e58497246f803e6f58b4b9fc9173c9f9cf4baa2eb25cd7e820771b1780bf9511e8b6e1b4f3b1e57bd856d93e79dd3934b8794f192428008cdfc73bde8c3f966cb50ed90b54871ccd004574791e7f111d0a78d3fa3df031287945c1d115745fb25a1cbe88c4ce8b82ca790098e96b59be231842b3be951abc17d1e5e5833106a4f8ad7f6de4a151e3fd49130331b4501d9ac82acf0ab52fe0fc66194b23e4ffc05b4989b233216b23c1f7a6f057cad7bffd01f2112a2c0070e7166b8ccf5baa7ec97fa3de096ea40ca7c932fd9db5861849f4d046918bd021e1e6ef6cabbc710c102fb31c8cdbcb3357829f62ccdaa483f00c1e62271d6a4b914dbd95138d82bb68364f60b0f82974abc1eb8ef9d3a9f9f95053043c2de080ae7e0607681d7f5e9d93139982d40876540b25733cd6d4b6f7c01ef853226df5093e44d67e2fcdc3a09d75bcf4b455ea54f9ca7e900945d182eb29bd6e39aa2408790b89cec6b2bad8a002096f56d2cee15caa01831fc1f99ed9ec0e7b4c2fe241f91339b2dd702484a1256b56cfe58cb11fd1667f17c281a0b1e6225b42fe6f145d450eebd204aaf8056e770f8006cdd1ed4a1bb5863c9909e68be847607075d46882e588b038e7b1af0ee9e0ddadb9ef8a37dd87da7ed4b9990b20164068982c8a3f15a42c74cd7a9b39bb899d865da3e1d924ffe4d6a5ba1fb5ed1cc0141294b1bbba2d4b36782cd0305d51764f21f26bbf8e462c19955798b72db624ecd0b81bb1b665557cf14a2df5447b03311d1843700c6b3af425610b28ddbe87f728cf30475425f48c495785ffd484c2b77212b265d1eee2e378ec5d365de74560902c8f29421e64b12a551910993daca902d8c2769dfc98c0810583ceb466463ef245fc742bc01831aab07f8edfc061c807381b388c16eb11289dd3ba4994575cc554ecfd5ea61583778f79bc3baa7810feb488d7638dfcf00e23cb00ab6841a9801393be5f90143897b6c76f50b7d3e23befd5006b51e26f5c00f363cd7ffb99c58ad470bb0e8e7e76823806efc1672466e1408d70caf54a0e96a56b4371b87e82c4bd2dfd08fea431ee44d2e90e88e4d50a3ba21384050b34791fe25a8951e637375df78ee9f0abe314fa76c19c5b31949aea194f6beb6ec5e51a7387cf4c25130307af1bc8dd4705551527b4b989bb4eab6e92132ec9787d5576e827f2ee0d49bfcf47785e719d4bae3bbde75611b90b51181e2316c75dab7aa91e4dc61e2d5781dec9dfba7cf65e15191c51896fbd93fe6b70b00295cf296ace78e2012e56d1467df2b6bce4aeb2c51390affee941b1bf1f6b8e67ebe70663b9362b75549c1878c012a52a40b7c9ae25d56f013a0f8adcbe94427f510ed770a2d6ea9de6b52435020eb249c107f3fe265eba9c64884be45c3befd2d00f1f27695b6232bfd638c4274e7943cea04214041d7ac47785506f0ed8e2834598ae187a2d194a7ffdb83d8d212bc3bdedbce48809c238370bd6c16f3a7f6967c5647c1f1a8d0105f45e1ed9ffbd7cdfb9e9601fd6fc2555a9c9f5dd2baf009e8201250a034474cd9c50ff6629c05f6541a54e86d3399d420fffb47e5d8da57806f5e36569740b43e1712703ce837992b9a7d870ed9951f83b459bf1eb3519afa258693df6dad980978cc345bf95a58fde26af6aa2fca4b9a06983ac4fe0999f5c9a0ffc7077f55e7a6e41e96189f219153d1f745274d71e5774dbef5d0f3eeac2bd4c7dd93bb6402d558651e9545bb1fcbe56ff81964c65eeee3f6d8f259d5beaa5c7b970f312f92adc37e2bae10556489e98e4a405da42be8bc19b8bdc7634dcc30e14b085bb6df799e32e6e68f7bcdc4e7587cae4ed2dbbec8d3ef9720d321aedb0475588bed1fd96ab312a480de8de479d830fdbf5266bd59eac49c9b2c6ee4f8ecc6247b5a4d76e8622da33aea5d07146f7f412cc58a2a78ba279adc56b99bbc430e15d8b8479475dac0d477e515b1bef5a2605d03dd77b5c4053396fe7589ec24bf8bce5760b3e4c4b0db31261b5f76e91f1af6494ce42fb5659ed5e1d0c349d979195eab2025f39ca24ae5237eb0bd6cce3c789ae6acc865f0c785050c48fe63ec119920476d953a4ce178b3548d7d668ce62aa73d32bc0f702ebea2ada678ccfe183c4a237346b31244b094c0eb0b857686fdc54aae9fba37022cced5dab57cf0f1a5a765b374bd441b51c2dfe8ae8e384b1bfcbf7d4577770edba05934df14b7267caa351f0ef9cf04234142618140f02f2ed461de1f2e621fd191c0706b1f8e5419bcc5e30fced258d9852090253ab4626bf3bf4477c5f045d794653e8eb73113e91ca10e034accd3d6bb2287d43cdf21995975a3bb6982b76af43b5d83b0ae8280ac49bf6545cfecf1928d0b8bd98481d118f40001b77fa0e529463da0271d5657c00e5cea92416b853a0c35abb70d12ed7fab1b7de9758ca27582cce714041ef0a6a2091cf54e3860a09f89c00d3d71211ce4911ca3ed9e8c72d8db214cd43a7e241009670808ca77ac85189d12fcb853c640cbbe0bb12beeb66e71dac29cf5dcd57c2ebd25d2c633be22a7c20aa44e738b1ea3626a8e3809fdeeb4a08c11f3bf2ec207e2540cccc9fb7c4ea4c73e2becdb991915e7ec18e9e1eb9edd1850214eb172354c4adc7275461baa0eb56febf83595720cc87c99cc17415171703300293b6d4d776ebc8fc1a5695c970b557fe6b4db79e1e2d1fda6f85a0d8c59955b0eb922d066de1e1385e8d8b535b4ae6dd4e769939a29e26b09607785f8520e0fdc2e9fdc722f5aba8b42206a9d2f684a1be1fa7717022d1dc24ec5c878a9ccd5cb351420f64ecded61b82731c299846112ce1e67dd2228e536e62a8bae8f890bd891c0c965cd8f1ec497d25fc43067ca83cb184fbedc96eebc586fdee2163c5b6373fc44585056964f5d671beea90f0580c3823494bdfd57db3007211bbe1c3d7ecae8a3edbf4c06eb5e8b6c1b3d724c9afc517e175272cb6f6791e51ba2ef6a76104edfdc383cacbdaaccf724539f4df6895001ff835d09414b10d126ffb705836df90a2f40e3de6c9c0fffefb9cb5f0cd8b8a2b4fe7d98302aea48615e21c22a1bd3ea63a0f6f53ef969db4e7c78b43f7087320ec8edffa5566943c4c408c81a9ada79626c82cbe039f0acc0bcb479f38b6317a26275325ef070bf11ce335166cce00dc1e3e5f3d8e4c699f547cb562f30e8cf9a78f628e19d15aaf2611c051d5c8d73bdad0f1a87c3f1b66533116a24dc91d280e57e74381ac58276e186bf9a822802d1f0482c18c88e1b85ff2929cb1e9f6a3ddded090bd22a5e2fe2b80fac32cc9f29e2f65e087ab9c72e593f4d4a536c0557cb5dd889c439bca8ff77f070baf5c886202cfa77f4703ef8185b4320c6dbfceb8d641b531c2c97c9b1497c2362b81d27d24980c763f2e2dbdb3e2a80a2115b74bd78eddc5b50a07bf1ad7a7dded09b06c1cb3783ac699f0faf7a0e9db334f9c25fc9e0d72a9846f3aeadc765a1a5d38cdb4b5335c10067f924a0010db00cd731ef064ee3319b722cf3ccedb560d8ea765ef246e7b84d17ba673e2a163236d1f093e19cfc22f242e38aa2da1f42114f9da88c8c11ca525b6f90cee0fc86f017ad9018187b0f49ea087332fd88c4a91401eba009b6687552a1ef2ba29195094f150f1e0a6aee8106b542c4f45edf3f85a8fbbb4ec1331", 0x1000}, {&(0x7f0000001f40)="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", 0x1000}, {&(0x7f0000002f40)="7ad345983295efedce522b509c79b25347d2022e88b03003a356cf24b8c7d39ebdbe2778491389fd2412248a9287ac4615a4b4262ace957c21747a1b829c8ecd3f473aed1bf3a031ce0aa408", 0x4c}, {&(0x7f0000002fc0)="5fccbb9828662bc95ac7631891cb2c4c7c4ac4ed3f2e4d15bf", 0x19}], 0x6, &(0x7f0000003080)=[@rights={{0x1c, 0x1, 0x1, [r0, r0, r39]}}, @cred={{0x1c, 0x1, 0x2, {r41, r43, 0xee00}}}], 0x40, 0x44}], 0x4, 0x3000085c) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 393.256507] attempt to access beyond end of device 23:11:52 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) [ 393.292218] loop0: rw=12288, want=8200, limit=20 [ 393.307209] PF_BRIDGE: RTM_NEWNEIGH with invalid address [ 393.323654] attempt to access beyond end of device [ 393.350784] loop0: rw=12288, want=12296, limit=20 [ 393.384294] PF_BRIDGE: RTM_NEWNEIGH with invalid address [ 393.412693] attempt to access beyond end of device 23:11:52 executing program 2: ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)={0x10c, 0x9, 0x1, 0x9, 0x7fff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000040)={0x1d, @loopback, 0x4e24, 0x2, 'lblcr\x00', 0xaa8fd22dd57248a7, 0x1, 0xf}, 0x2c) [ 393.441765] loop0: rw=12288, want=8200, limit=20 23:11:53 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) [ 393.474379] attempt to access beyond end of device [ 393.501370] loop0: rw=12288, want=12296, limit=20 23:11:53 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$unix(0x1, 0x10004000000002, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000004c0)="f21d83", 0x3) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @local}, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x2, 0x2, 0xf000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000500)={0x7}, 0x7) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 23:11:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r5, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) sendmmsg$alg(r5, &(0x7f0000003280)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="f5b1e1fa5cb7ee86cdf842ee844f43c4c30090abfec805b20e356c4619ae3173fa8fcd940408c282022a7903e760b916fad8fed43389cd", 0x37}, {&(0x7f0000000140)="bbb686defecc587eece309c2957bed3962ba87cf82c9614765ccd54ee426b7fa43df251efd2ba83bcd07716d66459c5866c85c3a8c5177c3337c2e86", 0x3c}], 0x2, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18}], 0x30, 0x10}, {0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="4489dfcb9f8b1d73bfaa597cfa7bb64633ff", 0x12}, {&(0x7f0000000300)="dd845e1f6228914f", 0x8}, {&(0x7f0000000340)="2b5550c7852e403555ef86ccb9218abd9d2cff244ff8acf5f33859a7787dc1451ff690908c8097fb635eb0c1916693d8dfcbf76f7ffb9a2a344503aaf75645259dc0229a8654f6955b92ef0af0b7bef7a0d72b682294e0d1f2e2c1a8797ded102edb22c03d43bd0c0f9ad64d831d4f0d0d64034868f472eb0b9df70c88d7c427e8c69ca79493599a2d046ce191812138b43c49d4b68e323d5c34fb02c3f1882beb31e20e39966bf7f3f3ad1f10e15d9f3f0e1b8b31dae8e9", 0xb8}], 0x3, 0x0, 0x0, 0x24000000}, {0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="5c0be7b46bda15b3097448c61b94a2a8596b664f5149d2806bc8a3223080b1078a749a2c3a4f5bfeb2d888c0c71797b466a7e2b09134cd5f57e77b2fc41eb0043a62049ef47271a34b61bda70ea0e5340ffb055b84cb8d9a1c47215413bfd94a514f7977128274907eacbdfa8c6d9b0afbc986b429553c6241fb0ffe0934d9b5141dbfa62887b01f5c15e9e6d761475f7d5ce8", 0x93}, {&(0x7f0000001540)="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", 0x1000}, {&(0x7f0000002540)="3e8c6d36a64927b8cb5e881670ce766b5356daacee15457049301ff0ea3f68861f4e102fa437baf7a0c550818787a7f20cf368b2622d020ebc7608566789c42d1ba757818e2a70ffbabbde0d090b57e143753ae2a0d2894c4ff90cb7d2f5cfb9d1", 0x61}, {&(0x7f00000025c0)="6ada61ad2a0a00a35730b84bc869d35460cbb559", 0x14}, {&(0x7f0000002600)="444d96799fd0b803d505a5941832a75fab01c0147d7a96b7a45a0472d8bfeb19d30c08cca3f33f5c3004d7d88f18c31973590daa280b9e78b0823bc947590e476c91e2c303a1302a71e078a3c450655c43144d1f9a91055e02117ca01355fe32a69554b0ac5ccfc76e2a58da00193e24c00faefe8ea73c0121293a18275275c07fa9727b0c8ae7f16420b9ce6f959df0983058b7061c32492df7ce574bcae211c8da122e78b2c169a9a2d4de84abb404fb7809bfa713b7b73c57", 0xba}, {&(0x7f00000026c0)="737fd43ab6dc94d973fff6422ebb84acf11d98450611ab43", 0x18}], 0x7, &(0x7f0000002780)=[@op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x5}, @op={0x18, 0x117, 0x3, 0x3}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x10001}, @op={0x18}, @op={0x18}], 0xc0, 0x48051}, {0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000002840)="a721ca77bc266eb9dfc2bf32c216e07fbd89782cac6af4d862fd591bfdd3d08e8ac7b11d7b39b193d13cdb0d031b2ce0c69ea3b82a405c64af623825d31922535e233312146269b8ab1cd86f5aa92a5c1e028c8a2989b46225b7d313f9dd09c091902b9c49f917966010c96160167f0fc9ef73e0eff7ffd5e5408e55ea34f39ca1257ed92fc027102ed04b7b095fd90092644a159e06d28ac957c80f743c6d965bed2f9fe4e6e976bad5b0433b11273483ebfab8d300c072e9cf94bb7df740a64300877e076584dfc9e4b621aee9", 0xce}, {&(0x7f0000002940)}, {&(0x7f0000002980)="792a2465a5be4239c37e2cca9f04463e2dccc18662f123f48b595cf163ad54aacd0c3fa6391bdbe3cfd692fd136cc3455ac3086e9d2cea9ec137799e1ea12e814ab2f6278bade4d39c9d778daac78a1c83dc223fa1cbd1ad7cc98929677c81f66b12b250638a40b113a8af44136dfe4fb9ea54dade461adc7fd78bfb13493c071e1d2e0dacea7808743281ba75e21b00e33634dd6ec42f849534a7501a9fd7982e2bbd1b37903b3b42d8ba445f2f4cb7f53d169967eb9f916667d407f19f57246e8370d46dfe97b9a56239da19d1880a25", 0xd1}, {&(0x7f0000002a80)="310658ea39af5595e8d1aeae485661f600a2c61564f4df97ca21dc93e92cb7c68f1c19c2b34c4e8b7026114f591a93fd928a4e60c383c7619661c8854982e9cb785c757f9001b7443e1fd880f509619bf962e7652346dd08e3814599b1deb782", 0x60}, {&(0x7f0000002b00)="89fcbc4e34fb7b045953ce38974a12edbe363b9b0c08fe2f1a3e2837675a94cc2b456f9cb684676ece36173220fae3f4fd085f70bf75bbe10471e42f25d5c5cbebd3100261284bbeb50146440b8b9a687fccd1a6321cdec0f92e8dd60dcf6b1c3a1e55b23f43ed0ec76ad80f96dbc7df2d5866c33118ccbd53d1dfbf8e57139e3e576eb980e303e776f751a1c6fb9f1172aa89bb322a25b16c86d83c1bf0466ef263cfbf58dca65cb294d9af2a17051951c7436fe625136df7a760edc106ca03262ce403a9863d01cc8ae8029d071d7104f6a7e8efb0efff400f802ac2cedd0558bf9d835ac5e077668b1b0db323416ceabb", 0xf2}, {&(0x7f0000002c00)="326dbebc67df801b70aaa523764b7b61f4de", 0x12}, {&(0x7f0000002c40)="7151a152627a70803c63923482fa0cbfd7ae027c01349ca7132648d091d0a844638edc259dcd90aa72393cbacba59b9bf89d95121dd880566450d46cc965ae11b08b6941b1a99bc2650e15cdeb9018790ab5e23875382ab64570c4d34b600aab24b561bbb33eb9d896e35c06ce0992a48d17b061ac745bf7e18f2aad9ac22865842f231897c5b2e707b3ccede152a0604c2c800d157c914a35", 0x99}, {&(0x7f0000002d00)="672dcf89b5e5e806694ee325e589343af7a63fe8c8b71dee4789af866e948986fdab9b23647c2552420646fee62863d8d2f4f60aa0816989a6aed76bcbaeda8f07136dc4805598c06597abbaf9779d2c4eeb9cb3907c3eb97b2ba699109280e3e01b0713c9d581bd36bf0a1756e24583d17123465138e0bd6c242dbd", 0x7c}, {&(0x7f0000002d80)="b846d2532752d5408cca62f71f6e74bcaa9816192b2e2f07399b1c5d9161b7775b924b9aa5fc9397f7fa83fcc6346d3455b263168dc9335928333aa55810990991d245e3e7b1a1fff526336e66525278c303659f33e38c0ff688df8428744c67c3749d40aad7ae129456a97cbb67a105e68f9e330d95a905e8e48399c2e968dc18ac9653e7a558b71a76954863f068a1ad3d615b5c5fc3b45322a46d38d724cd2249bf1117f75e92e4ce75e215499fac5543507d7ae3f3d339f1805db4b8660b66bf49ec48ac677d089a18586126fed9004074", 0xd3}], 0x9, &(0x7f0000002f40)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x68, 0x117, 0x2, 0x51, "534388007f7562ba9344d2cdf3ea08f6b89350d8c368018bdc4bc15cecee1b006982859efb0b48ef3ffd2e701bd4a5be79c2b787e2d45114a31e92222295a3c93a9d21ffa23538e15248a685d75b2973e9"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xffffc68b}, @assoc={0x18, 0x117, 0x4, 0x9}, @assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18, 0x117, 0x3, 0xfc6726cee5075115}, @iv={0x18, 0x117, 0x2, 0x4, "bb95b41d"}], 0x110, 0x40}, {0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000003080)="93acaa02c2bfb1adc319", 0xa}, {&(0x7f00000030c0)="b0063269103839486cc12f6dd600e10b3b0ece4b3eb0e399ffebb6917f45fed1ff36c8a8c50f5d9c87902d53a04b8ed3b53cec0e480c8012c17f6891dc7c041c332a9c2cdc639f2fa8c03e592a6cc3a4744d46176cb601aa060c6bffa368646884", 0x61}, {&(0x7f0000003140)}, {&(0x7f0000003180)="752c7493842b638ee5f67b412d10fd502be8a2af2d127de005ae8c4beac8e9482d7fa9dbce8153617e927db53fecfc27e427dd1e52075bd2", 0x38}, {&(0x7f00000031c0)}], 0x5, 0x0, 0x0, 0x885}], 0x5, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:11:53 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)=0x0) sched_setscheduler(r1, 0x0, &(0x7f0000000040)=0x6c81) 23:11:53 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) 23:11:53 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/142, 0x8e}], 0x1) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000080)) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x7380a5e9dc7ccb51, 0xfffffffffffffcc3) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/devP\xc0\xd6A\x829\xd9\x0f\xe9\x00', 0x894880, 0x0) connect$bt_rfcomm(r3, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x20, &(0x7f0000000180)=[@in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e24, @multicast1}]}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000002c0)={0x3ff, 0x100, 0x6, 0xc2, r4}, 0x10) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000000)) 23:11:53 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) 23:11:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x100, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000040)=0x2) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/142, 0x8e}], 0x1) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000080)) pwrite64(r1, &(0x7f0000000380)="c3ba1c85b0fb8cbb5abe5aeadf0bfb53b017105962f1b9cd16870a7ffe1e0e6e8cb57ed9a3da3dedbac2646f53a70acca61286e8a56d21a567e86b68768f046487c7b24025dccef686db9dd6bd028ea21c14c3b0294ee0b8876060037ab958ad3ef678b70f50f73632de68f0df0e1f52921e944fbd15f5dc7ff01a30b7a96969220c8fb67672301f228704d23823022b4699a2bf781cdbf21746b44c61a63a5eb9f17f531fd43c7d6e0a4b7e153be03f6cc6125af8c1eefb65c4aac5b4642a3cd778affaaccd47d68f6bec816d3f2040a1c8e7d60bbf7ad248c109fbb866514856daabb5e950", 0xe6, 0x5) syz_mount_image$f2fs(&(0x7f0000000240), &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x200000, 0x0) 23:11:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 23:11:53 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00') 23:11:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = dup2(r0, r0) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000100)={r5, 0x1f}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000180)={r6, 0x10, 0x10, 0xfffffffffffffffc, 0xffffffffffffffe0}, &(0x7f00000001c0)=0x18) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r11 = semget$private(0x0, 0x3, 0x440) semctl$IPC_INFO(r11, 0x0, 0x3, &(0x7f0000000480)=""/4096) 23:11:53 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) 23:11:53 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/exec\x00', 0x2, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/142, 0x8e}], 0x1) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000080)) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000000)=0x9, 0x4) 23:11:53 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) 23:11:53 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20048084, 0x0, 0x0) 23:11:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff, 0x0, 0x0, 0x0, 0x0, 0x39, 0x0, 0xeb3f, 0xfffffffffffffffe], 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x101000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r5, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$KVM_CHECK_EXTENSION_VM(r5, 0xae03, 0x5) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:11:53 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) 23:11:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff9, 0x41e5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 23:11:54 executing program 2: connect$llc(0xffffffffffffffff, &(0x7f00000001c0)={0x1a, 0x1, 0x2, 0x5, 0x2, 0x8}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x100000000000}, 0x0, 0x100000, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x247, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000012000000020000000000ac490bb000000e02000000020000006d1210000000000400000004000000080000000c0000001000000000000000000100010000000200000000", 0x69, 0x7}], 0x8bc09ea84b3e53a5, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/142, 0x8e}], 0x1) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000080)) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/142, 0x8e}], 0x1) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000080)) ioctl$TIOCNXCL(r0, 0x540d) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000100)={0x3, 0x1, 0x2}) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000240)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r3, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) getsockopt$TIPC_NODE_RECVQ_DEPTH(r3, 0x10f, 0x83, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 23:11:54 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_TIMERSLACK(0x1d, 0x5c9) 23:11:54 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) [ 394.587242] f2fs_msg: 68 callbacks suppressed [ 394.596091] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 394.644246] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock 23:11:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0xfffffffffffffff9, 0x50000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 394.689459] attempt to access beyond end of device [ 394.719117] loop0: rw=12288, want=8200, limit=20 23:11:54 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@request_death, @enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) 23:11:54 executing program 4: r0 = open(&(0x7f0000010280)='./file0\x00', 0x12601, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) fchmod(r1, 0x0) [ 394.743859] F2FS-fs (loop0): invalid crc value [ 394.749319] attempt to access beyond end of device [ 394.774528] loop0: rw=12288, want=12296, limit=20 [ 394.811191] F2FS-fs (loop0): invalid crc value 23:11:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_FPEMU(0xa, 0x2) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000040)) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 394.846409] F2FS-fs (loop0): Failed to get valid F2FS checkpoint 23:11:54 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) [ 394.887832] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 394.929810] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 394.954107] attempt to access beyond end of device [ 394.973873] loop0: rw=12288, want=8200, limit=20 23:11:54 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = syz_open_procfs(0x0, 0x0) sendfile(r2, r3, 0x0, 0xa808) read$FUSE(r3, &(0x7f0000000600), 0x1000) lseek(r1, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="01d10a4ae175ebab3c0991d329396866268b1847d9ec7a15c92149ef8e802eef8cb1d310a2b323312bcd9b08c07f125e6f02b99fe4a7fb8fad1d9256e06e2c5332a7a477df6e3640"], 0x48) fallocate(r1, 0x3, 0x0, 0x8020003) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000200)="e5", 0x1}], 0x1) lseek(r1, 0x0, 0x3) [ 395.003358] F2FS-fs (loop0): invalid crc value [ 395.023127] attempt to access beyond end of device [ 395.070229] loop0: rw=12288, want=12296, limit=20 [ 395.084465] binder: 15121:15125 ioctl c0306201 0 returned -14 [ 395.092451] F2FS-fs (loop0): invalid crc value 23:11:54 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="840000002c00010700"/20, @ANYRES32=r4, @ANYBLOB="0008008000000000030000000800010075333200580002001400050000000000000000000000000000000000400006003c0001000000000000001020898dde66057433b6ef3a41d22be225e0001b00000000000000000000000000000000000000000084e1a912c5998bcbf050000000000000000000000000000000798a3c067277da1a290b9613a33c575c36fad473382c8f5532ef3f0e1d2c450a7decbf3431a69f9b2ecb3291bed174245a962fe0484676958265e2988326a89db3139d91fe4aee6ae7e745abdfc21a9f61f2035979c1e3e9fea5b3958bc14fce6e66a36d1ab3194534ba4e973684b27793bff837d3"], 0x84}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=@newqdisc={0x250, 0x24, 0x9966e1666ff6153a, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xffe0, 0x4}, {0x0, 0xf}, {0x2, 0x4}}, [@TCA_RATE={0x8, 0x5, {0x0, 0x7f}}, @TCA_STAB={0x60, 0x8, [{{0x1c, 0x1, {0x70, 0x9, 0x7f, 0x1000, 0x3, 0xff, 0x3, 0x8}}, {0x14, 0x2, [0x61, 0x7, 0x8001, 0x100, 0x0, 0x9, 0x1, 0x6]}}, {{0x1c, 0x1, {0xfa, 0xff, 0x4, 0x0, 0x2, 0x2, 0x65bd, 0x5}}, {0x10, 0x2, [0x70, 0x3e1, 0x5, 0x8, 0x8]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xffffffff}, @TCA_STAB={0x128, 0x8, [{{0x1c, 0x1, {0x1, 0x1f, 0x5, 0x542, 0x0, 0x2, 0x6, 0x3}}, {0xc, 0x2, [0x3429, 0x5, 0x2]}}, {{0x1c, 0x1, {0x6, 0x8, 0x4, 0x0, 0x2, 0x3, 0x20000, 0x3}}, {0xc, 0x2, [0x7, 0x4, 0x74]}}, {{0x1c, 0x1, {0x2, 0x0, 0xc41c, 0xfffffffa, 0x0, 0x6, 0x8, 0x5}}, {0x10, 0x2, [0xff, 0x6, 0x7b, 0x8, 0x7]}}, {{0x1c, 0x1, {0x9, 0xb1, 0x401, 0x8, 0x2, 0xc2f, 0xba, 0x6}}, {0x10, 0x2, [0x9, 0x2, 0x0, 0xfff8, 0x1, 0x5]}}, {{0x1c, 0x1, {0x8d, 0xa3, 0x5, 0xffffffff, 0x5e4b751286802ee2, 0x8, 0x13cb, 0x5}}, {0x10, 0x2, [0x3, 0x4fc, 0xfff7, 0xc2, 0x1]}}, {{0x1c, 0x1, {0x8, 0x5, 0x1, 0x9, 0x0, 0x5, 0x1f, 0x3}}, {0xc, 0x2, [0x8eac, 0x8, 0x1]}}, {{0x1c, 0x1, {0x3f, 0x6, 0x8000, 0x1f, 0x2, 0x1, 0x7, 0x3}}, {0xc, 0x2, [0xe4, 0x52ad, 0x4]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_STAB={0x88, 0x8, [{{0x1c, 0x1, {0x1, 0x3, 0x101, 0x2, 0x2, 0x7, 0x10000, 0x4}}, {0xc, 0x2, [0x9fe, 0x101, 0x800, 0x4]}}, {{0x1c, 0x1, {0x40, 0x0, 0x1f, 0x81, 0x2, 0x3, 0x3e39, 0x9}}, {0x18, 0x2, [0x4, 0x401, 0x4, 0x8000, 0x0, 0x1, 0xee, 0x8001, 0x9]}}, {{0x1c, 0x1, {0x4, 0x9, 0x0, 0x200000, 0x1, 0x80, 0x8, 0x4}}, {0xc, 0x2, [0x1, 0xfff, 0x7, 0x9]}}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x10}, 0x10010) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x4, 0xfffff000, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_dccp_int(r0, 0x21, 0xa, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x7, 0x100) 23:11:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$amidi(&(0x7f00000016c0)='/dev/amidi#\x00', 0x5, 0x80000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000001700)={0x0, @in6={{0xa, 0x4e24, 0x4e3, @local, 0x401}}, 0xa0d, 0xb6d}, &(0x7f00000017c0)=0x90) getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000001800)=@assoc_value={r4, 0x8}, &(0x7f0000001840)=0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000100)=0x0) r7 = gettid() r8 = socket$inet_tcp(0x2, 0x1, 0x0) kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, 0xffffffffffffffff, &(0x7f0000000140)={r3, r8, 0x1}) r9 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 395.119865] F2FS-fs (loop0): Failed to get valid F2FS checkpoint 23:11:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) 23:11:54 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) [ 395.354776] binder: 15141:15143 ioctl c0306201 0 returned -14 23:11:54 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 23:11:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x42000) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000001c0)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x80000000, 0x7, 0x81, 0x1, 0x0, 0x3, 0x47, 0x9, 0x70, 0xff, 0x1, 0x6, 0x1}, {0x9, 0x4, 0x3f, 0x6, 0x8f, 0x24, 0x0, 0x8, 0x6, 0x0, 0x0, 0x81, 0x7}, {0x800, 0x3, 0x8, 0x5, 0x0, 0x4, 0xa, 0x40, 0x3, 0x7, 0xff, 0x9, 0x4}], 0x401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:11:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x6) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000040)={@rand_addr, 0x0}, &(0x7f0000000080)=0x14) setsockopt$inet6_mreq(r0, 0x29, 0x34, &(0x7f0000000140)={@mcast2, r2}, 0x14) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept4(r3, &(0x7f0000000180)=@in={0x2, 0x0, @local}, &(0x7f0000000280)=0x80, 0x1000) [ 395.481865] attempt to access beyond end of device [ 395.487246] loop0: rw=12288, want=8200, limit=20 23:11:55 executing program 4: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lsetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=@known='security.capability\x00', 0x0, 0x0, 0x0) [ 395.546644] attempt to access beyond end of device [ 395.571849] binder: 15155:15158 ioctl c0306201 0 returned -14 [ 395.571859] loop0: rw=12288, want=12296, limit=20 [ 395.586645] attempt to access beyond end of device [ 395.618597] loop0: rw=12288, want=8200, limit=20 23:11:55 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 395.671252] attempt to access beyond end of device [ 395.694480] loop0: rw=12288, want=12296, limit=20 23:11:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40400, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000200)='/dev/kvm\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000001480)=r5) ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000300)={0x3, @sliced={0x0, [0xf6cd, 0x3, 0x6, 0x9, 0xff, 0x7ff, 0x1ff, 0x9, 0x6, 0x2, 0x7, 0xf8b9, 0x0, 0x9, 0x3, 0x8, 0x8, 0x701e, 0x20, 0x3, 0x7bf6, 0x7, 0x0, 0x27d7, 0x1, 0x8, 0x1f, 0x1000, 0x800, 0x1, 0x4, 0x1c, 0x4f88, 0x26, 0x5, 0x240, 0x647, 0x101, 0x1b, 0x6, 0xb718, 0xffff, 0xf45d, 0x0, 0x6, 0x8, 0x6, 0x3f], 0x8}}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x10000, 0x0) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r7, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) setsockopt$IP_VS_SO_SET_DEL(r7, 0x0, 0x484, &(0x7f00000001c0)={0x6c, @broadcast, 0x4e20, 0x3, 'wlc\x00', 0x10, 0x1, 0x6}, 0x2c) perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x4}, 0x0, 0xfffffdffffffffff, r6, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_RELEASE(r6, 0x6431) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$USBDEVFS_BULK(r9, 0xc0185502, &(0x7f0000000100)={{0xc}, 0x3, 0x4, 0x1000, 0x7ffffffd, &(0x7f0000000480)="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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:11:55 executing program 4: munmap(&(0x7f000001c000/0x3000)=nil, 0x3000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read(r2, 0x0, 0x0) 23:11:55 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:11:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000380)={0x15, 0x110, 0xfa00, {r2, 0x2, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @remote}, @ib={0x1b, 0x1000, 0x5, {"388e7b409c696b4049f91be25d5e2bb0"}, 0x6, 0x2, 0x47}}}, 0x118) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 23:11:55 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:11:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x40000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r3, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000100)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:11:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x8, 0x0) semctl$GETZCNT(r0, 0x1, 0xf, &(0x7f0000000600)=""/4096) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000001500)=""/233) semtimedop(r0, &(0x7f0000000000)=[{0x2, 0x2, 0x800}, {0x1, 0x1000, 0x1000}, {0x1, 0x1}], 0x3, &(0x7f0000000040)) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 23:11:55 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x10, 0x0, &(0x7f00000000c0)=[@request_death], 0x0, 0x0, 0x0}) [ 396.264783] attempt to access beyond end of device [ 396.336355] loop0: rw=12288, want=8200, limit=20 23:11:55 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r2, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 396.360931] attempt to access beyond end of device 23:11:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$KDSETMODE(r0, 0x4b3a, 0x2) [ 396.395253] loop0: rw=12288, want=12296, limit=20 [ 396.443552] attempt to access beyond end of device [ 396.477790] loop0: rw=12288, want=8200, limit=20 23:11:56 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x10, 0x0, &(0x7f00000000c0)=[@request_death], 0x0, 0x0, 0x0}) [ 396.498912] attempt to access beyond end of device [ 396.511722] loop0: rw=12288, want=12296, limit=20 23:11:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:11:56 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000040)={0x2a, 0x29, 0x2, {0x3b5, [{{0x20, 0x4, 0x1}, 0xfc8a, 0x1, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x402, 0x0) write$binfmt_script(r1, &(0x7f0000000140)={'#! ', './file0', [{0x20, '/md5sum'}, {0x20, '/dev/autofs\x00'}], 0xa, "8b680517d76de446e3cd96580f7e7a2ee7cbcd6012f6953395d4938c5f73d3df6fbbf049109dd9ab0263689cb9dbf706c382e722b18bc0d882940e409bad176250145012cb0274b04b2cb9183670398c7d4a280578cef75dd26f2bc28a8a364959bcac2daa8c89c65fe4ba8419e0ec4a67b6238a230004228ebfadf26b5c27408b974ee709d7b9"}, 0xa7) [ 396.893793] attempt to access beyond end of device [ 396.932830] loop0: rw=12288, want=8200, limit=20 [ 396.949238] attempt to access beyond end of device [ 396.962239] loop0: rw=12288, want=12296, limit=20 23:11:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5001000024000705000001010000000000000000", @ANYRES32=r2, @ANYBLOB="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"], 0x150}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x4000000000002bc, 0x0) 23:11:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x400000, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) 23:11:56 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x10, 0x0, &(0x7f00000000c0)=[@request_death], 0x0, 0x0, 0x0}) 23:11:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0xa0001, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 396.989657] attempt to access beyond end of device [ 397.047868] loop0: rw=12288, want=8200, limit=20 [ 397.074782] attempt to access beyond end of device 23:11:56 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) [ 397.107536] loop0: rw=12288, want=12296, limit=20 23:11:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x247, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="230000005a00817491bc655067d7aee4050c00000f00020001000000ac", 0x1d}], 0x1}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x1800000000000060, 0xe80, 0x0, &(0x7f0000000100)="0000003f0000007e5bc5795ecaa29a16f291d36a48e93100ffff81", 0x0, 0x100, 0xf2ffffff}, 0x28) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) 23:11:56 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) [ 397.241870] attempt to access beyond end of device 23:11:56 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_timeval(r0, 0xffff, 0x1007, 0x0, &(0x7f0000000080)) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e00358) [ 397.278656] loop0: rw=12288, want=8200, limit=20 [ 397.307181] attempt to access beyond end of device 23:11:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d910f30f1bb429000f20c067500f22c067f3af", 0x36}], 0x1, 0x0, 0x0, 0x14) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 397.348341] loop0: rw=12288, want=12296, limit=20 [ 397.383799] attempt to access beyond end of device 23:11:56 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) [ 397.421637] loop0: rw=12288, want=8200, limit=20 [ 397.454113] attempt to access beyond end of device [ 397.479185] loop0: rw=12288, want=12296, limit=20 23:11:57 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) openat(r0, &(0x7f0000000000)='./file0\x00', 0x10000, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x800, 0x0) read$usbfs(r1, &(0x7f0000000680)=""/154, 0x100000111) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) symlinkat(&(0x7f0000000040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00') 23:11:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_aout(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="56f563761508000000000000cfa2c2"], 0x23c) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) 23:11:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x345affb1e1134c90, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000140)='system_u:object_r:shell_exec_t:s0\x00', 0x22) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000040)=0x5, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x19) ptrace$cont(0x18, r0, 0x0, 0x8) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) syz_mount_image$f2fs(&(0x7f0000000080)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r2, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x6b3574ed) 23:11:57 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x2, 0x0) write$rfkill(r0, &(0x7f0000000140)={0xfffffff7, 0x9, 0x2}, 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) accept4(r0, &(0x7f0000000180)=@nfc, &(0x7f0000000200)=0x80, 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 397.907077] attempt to access beyond end of device [ 397.933594] loop0: rw=12288, want=8200, limit=20 [ 397.960323] attempt to access beyond end of device 23:11:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x4) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000280)={0x0, {0x2, 0x4e23, @rand_addr=0x1}, {0x2, 0x4e20, @local}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10, 0x0, 0x0, 0x0, 0x7f, &(0x7f0000000180)='bridge_slave_0\x00', 0xffffffff, 0xfffffffffffffffa, 0xfffc}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) connect$bt_sco(r1, &(0x7f00000001c0)={0x1f, {0x4, 0x80, 0x7f, 0x1, 0x1, 0x8}}, 0x8) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) unlink(&(0x7f0000000040)='./file0\x00') connect$bt_rfcomm(r2, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000000)) [ 397.994339] loop0: rw=12288, want=12296, limit=20 [ 398.032216] attempt to access beyond end of device [ 398.053405] loop0: rw=12288, want=8200, limit=20 23:11:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10200, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r3 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x5, 0x8000) ioctl$SNDRV_TIMER_IOCTL_STATUS(r3, 0x80605414, &(0x7f0000000140)=""/198) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r6, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) getsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000300), 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 398.083088] attempt to access beyond end of device [ 398.113912] loop0: rw=12288, want=12296, limit=20 23:11:57 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x40000, 0x0) r1 = accept$netrom(r0, &(0x7f0000000140)={{0x3, @null}, [@null, @null, @null, @netrom, @default, @remote, @bcast]}, &(0x7f0000000080)=0x48) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000001380)={{0x2000, 0x10002, 0x0, 0x20, 0x0, 0x3f, 0x80, 0x2, 0xb9, 0x1f, 0x3}, {0xd000, 0x10000, 0x0, 0x9, 0xff, 0x7, 0x6, 0x0, 0x7f, 0x6, 0x3f, 0xaa}, {0xd000, 0x3000, 0x10, 0x7, 0x1f, 0x8, 0xff, 0x5, 0x1, 0x11, 0x3f}, {0x2000, 0x4, 0x0, 0x0, 0x67, 0x5, 0x6, 0x3, 0x80, 0xb5, 0x3, 0xe8}, {0x6000, 0x4, 0xf, 0x6, 0x0, 0x4, 0x1b, 0x0, 0x81, 0xf8, 0x7, 0x5}, {0x4000, 0x2, 0x4, 0x2, 0x48, 0x6, 0x20, 0x2, 0x3, 0x95, 0x7f, 0x1}, {0x10000, 0xd000, 0x10, 0x0, 0xfc, 0x8, 0x0, 0x1f, 0x4, 0x3, 0x7f, 0x2}, {0x4, 0x10d006, 0xb, 0x0, 0x7f, 0x81, 0x7, 0x7, 0x6, 0x3, 0x0, 0xfa}, {0x10000, 0x4}, {0x2, 0xf000}, 0x20010004, 0x0, 0x7800, 0x2000, 0x1, 0x1, 0x6000, [0xa10, 0x1f, 0x7fffffff, 0xfffffffffffffffd]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x7fffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$security_evm(r1, &(0x7f00000001c0)='security.evm\x00', &(0x7f0000000280)=@sha1={0x1, "e6f25892060cb16e9400333083479b716643bdd8"}, 0x15, 0x3) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) r2 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) mq_timedsend(0xffffffffffffffff, &(0x7f0000000380)="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", 0x1000, 0xffffffffffffffff, 0x0) [ 398.247205] attempt to access beyond end of device [ 398.256737] loop0: rw=12288, want=8200, limit=20 [ 398.291026] attempt to access beyond end of device 23:11:57 executing program 4: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xfebe) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000189063e0000000100c52cf7c25975e697b02f08006b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdb8, 0x80, 0x0, 0xfffffffffffffe57) [ 398.325067] loop0: rw=12288, want=12296, limit=20 23:11:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/mls\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x100000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) exit_group(0x3) [ 398.369078] attempt to access beyond end of device [ 398.429406] loop0: rw=12288, want=8200, limit=20 23:11:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x13a2f5a63d41ab45}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0x464dddfa30313b3d, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x30040000) [ 398.458305] attempt to access beyond end of device [ 398.510760] loop0: rw=12288, want=12296, limit=20 23:11:58 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendto$unix(r0, &(0x7f0000000380)="741670fab400d112460434a3ac687cf84533ad421ca137d93d7150d9a500cf4797bf81a1647d0d69594348b371a96aa48b8bcaed528c721af4cb844f4b593f5f6ffddbe4d68a024736d648a91064443f65a7b596095318292307c3804bdf913e64af3f0ae3c376f6e9233761bb6d5d2524ab9f44fa61af2495ce0bd8f6791193e04f6537bfc6a5fcef4fc966900d4810e190be7dd332a3659d741054276ddc95122a849f31f6f95fc1b38b9a98db77dd396d5dc7ce965bdb8534918ad7728e647930dd59c7647bc19af3ce28d958140d459719e4", 0xd4, 0x800, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 23:11:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x32}) 23:11:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFBRDADDR(r5, 0x891a, &(0x7f0000000100)={'veth1\x00', {0x2, 0x4e22, @multicast2}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:11:58 executing program 4: 23:11:58 executing program 2: r0 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x4e, &(0x7f0000a7dff8)=[{0x81, 0x0, 0x0, 0x6}]}, 0x10) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) accept$unix(r3, &(0x7f0000000180)=@abs, &(0x7f0000000080)=0x6e) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r4, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) accept4(r2, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000380)=0x80, 0x800) write(r5, &(0x7f00000003c0)="c1fe6649327c243cf0d4fda47b16c937022926667c3a769871d63165af4cb7fa28df1bf9e6b20a7ffdea19568e7c4c5bd5a23560b9a49b772310fbefbc467090", 0x40) write$P9_RWRITE(r4, &(0x7f0000000280)={0xb, 0x77, 0x1, 0x80}, 0xb) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x98) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x1b, 0x1400}], 0xa3ebc25f8bdbf323, 0x0) 23:11:58 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)='$\x00\x00', 0x3}], 0x1}, 0x0) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5acc1, 0x0) [ 399.032070] attempt to access beyond end of device [ 399.083410] loop0: rw=12288, want=8200, limit=20 23:11:58 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000400)=@buf={0xed, &(0x7f0000000480)="932ca9bc0d5cff939421ac412c3c6fc71871aaf1c7f8759ed5af218a25c29221926f0f417cb901fd3aaeec7b9f6f1b713d727c40be5466ed8299ba7bccf5d20b4b0a70b943337d2a83f1192a61bdcd2d2ca09b880d2a68edf165718c08fd61c16084dec330712445bb190fe7222910604641f541c1c367bd7ac5f04e3e134301a81e5457d014bc8a1c821dcacef8c4336c58faf1aa26194b5f074e069252f16a7da2daddaf3c76df0b96d68144bcc297845b3bf12df33fa871b7057d7b809f9c0b6831f219a30a3e457ffa66bea3722f12acce349b9b7faa7290750b808571f4bf1b50506b59f0f297bed4b96a"}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r4, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0xa6, 0xfffffffffffffffd, 0x56, 0xec, @buffer={0x0, 0x44, &(0x7f0000000100)=""/68}, &(0x7f0000000180)="0b3f2ce2685a64d15b975d338ef5fcdc2965b8338352aa402a1fbd935a56b72c6cb9e0a166904f3f0d8c2081fb2836d0e7529dcfae946de3df84e1b069bd5701bbaf932e05a27ab64ece87aef482e9b017d4ed0d7bf8", &(0x7f0000000300)=""/100, 0x10000, 0x10002, 0x1, &(0x7f0000000200)}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 399.113557] attempt to access beyond end of device [ 399.145812] loop0: rw=12288, want=12296, limit=20 23:11:58 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d20004000b404b48000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40000) socket$kcm(0x29, 0x2, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) close(0xffffffffffffffff) [ 399.208343] attempt to access beyond end of device [ 399.245687] loop0: rw=12288, want=8200, limit=20 23:11:58 executing program 2: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/142, 0x8e}], 0x1) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000180)=0x100000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd, 0x40000, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@nl, &(0x7f0000000080)=0x80, 0xe30b22f832f91c19) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000140)={0x2, 0x4e21, @loopback}, 0x10) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 399.276049] attempt to access beyond end of device [ 399.298537] loop0: rw=12288, want=12296, limit=20 23:11:58 executing program 4: perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x25208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8}, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000340)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f00000017c0)=""/165) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = dup2(0xffffffffffffffff, r2) r4 = accept4$inet(r3, &(0x7f0000000140)={0x2, 0x0, @initdev}, &(0x7f0000000180)=0x10, 0x80000) fstat(r4, &(0x7f0000000740)) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x400000000081, 0x10000000}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r6, &(0x7f0000005080)=[{{&(0x7f0000000440)=@ax25={{0x3, @netrom}, [@remote, @null, @bcast, @null, @remote, @remote, @rose]}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/233, 0xe9}, {&(0x7f00000000c0)=""/29, 0x1d}, {&(0x7f00000005c0)=""/144, 0x90}], 0x3}, 0x2509}, {{&(0x7f0000000680)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000bc0)=[{&(0x7f00000007c0)=""/162, 0xa2}, {&(0x7f0000000880)=""/221, 0xdd}, {&(0x7f0000000700)=""/15, 0xf}, {&(0x7f0000000980)=""/80, 0x50}, {&(0x7f0000000a00)=""/249, 0xf9}, {&(0x7f0000000b00)=""/152, 0x98}], 0x6, &(0x7f0000000c40)=""/179, 0xb3}}, {{&(0x7f0000000d00)=@generic, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000d80)=""/141, 0x8d}, {&(0x7f0000000e40)=""/138, 0x8a}, {&(0x7f0000000f00)=""/172, 0xac}], 0x3}, 0x1ff}, {{&(0x7f0000001000)=@nfc, 0x80, &(0x7f0000001240)=[{&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000001080)=""/45, 0x2d}, {&(0x7f00000010c0)=""/68, 0x44}, {&(0x7f0000001140)=""/213, 0xd5}], 0x4, &(0x7f0000001280)=""/243, 0xf3}, 0x3f}, {{&(0x7f0000001380)=@un=@abs, 0x80, &(0x7f0000001640)=[{&(0x7f0000001400)=""/22, 0x16}, {&(0x7f0000001440)=""/236, 0xec}, {&(0x7f0000001540)=""/133, 0x85}, {&(0x7f0000001600)=""/39, 0x27}, {&(0x7f0000002880)=""/4096, 0x1000}], 0x5, &(0x7f00000016c0)=""/135, 0x87}, 0x5}, {{&(0x7f0000003880)=@caif=@util, 0x80, &(0x7f0000001780)=[{&(0x7f0000003900)=""/235, 0xeb}], 0x1}}, {{&(0x7f0000003a00)=@alg, 0x80, &(0x7f0000003b40)=[{&(0x7f0000003a80)=""/162, 0xa2}], 0x1, &(0x7f0000003b80)=""/174, 0xae}, 0x31}, {{&(0x7f0000003c40)=@hci, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000003cc0)=""/4096, 0x1000}, {&(0x7f0000004cc0)=""/232, 0xe8}], 0x2}, 0x3}, {{&(0x7f0000004e00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000005040)=[{&(0x7f0000004e80)=""/12, 0xc}, {&(0x7f0000004ec0)=""/116, 0x74}, {&(0x7f0000004f40)=""/149, 0x95}, {&(0x7f0000005000)=""/56, 0x38}], 0x4}, 0x3e8000}], 0x9, 0x0, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) symlink(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00') fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r9, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x7c}, {0x6}]}) [ 399.430694] attempt to access beyond end of device 23:11:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/k\t\x00', 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) removexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='trusted.overlay.impure\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 399.473911] loop0: rw=12288, want=8200, limit=20 [ 399.516300] attempt to access beyond end of device [ 399.539875] loop0: rw=12288, want=12296, limit=20 [ 399.548724] devpts: called with bogus options [ 399.567262] attempt to access beyond end of device [ 399.585438] loop0: rw=12288, want=8200, limit=20 [ 399.608956] f2fs_msg: 77 callbacks suppressed [ 399.608969] F2FS-fs (loop0): invalid crc value [ 399.647864] attempt to access beyond end of device [ 399.709172] loop0: rw=12288, want=12296, limit=20 [ 399.745970] F2FS-fs (loop0): invalid crc value [ 399.768914] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 399.803283] audit: type=1326 audit(1574550719.313:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=15411 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45d47a code=0x0 23:11:59 executing program 1: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="eb3c906d6b66732e66617400020401ed02020270fff8", 0x16}], 0x8000, 0x0) 23:11:59 executing program 0: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x19) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='autogroup\x00') ioctl$VFIO_CHECK_EXTENSION(r1, 0x3b65, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 23:11:59 executing program 2: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x48000000, 0x1) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x7a, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={r5, 0x6, 0x7ff, 0x2}, &(0x7f00000001c0)=0x10) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r7, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$TIOCEXCL(r7, 0x540c) connect$bt_rfcomm(r6, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$TIOCGLCKTRMIOS(r6, 0x5456, &(0x7f0000000140)={0x7, 0x1ff, 0x6, 0x5, 0xc, 0x8, 0x7, 0x9, 0x10001, 0x10001, 0x7, 0x80000000}) ioctl$TIOCSRS485(r1, 0x542f, &(0x7f0000000040)={0x5, 0xc4, 0xfffffffb}) 23:11:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x2a939}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000080)) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x400000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_mr_cache\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x33d, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) write$cgroup_pid(r1, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000100)) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f00000000c0)) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0xa0000000) [ 400.352563] devpts: called with bogus options 23:11:59 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x1c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7, 0xfffffffffffffff7}, 0x6, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000)=0xfffff801, 0x4) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x5, 0x7, 0xfffffff7, 0x6, 0x1}) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 400.577295] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 400.606985] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock 23:12:00 executing program 4: [ 400.626365] attempt to access beyond end of device [ 400.643868] loop0: rw=12288, want=8200, limit=20 [ 400.653164] F2FS-fs (loop0): invalid crc value [ 400.684245] attempt to access beyond end of device [ 400.707745] loop0: rw=12288, want=12296, limit=20 23:12:00 executing program 4: [ 400.737577] F2FS-fs (loop0): invalid crc value [ 400.758499] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 400.787812] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) 23:12:00 executing program 4: [ 400.819157] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 400.851524] attempt to access beyond end of device [ 400.863941] loop0: rw=12288, want=8200, limit=20 [ 400.876179] attempt to access beyond end of device [ 400.893071] loop0: rw=12288, want=12296, limit=20 23:12:00 executing program 4: 23:12:00 executing program 4: 23:12:00 executing program 4: 23:12:00 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f00000104c0)='.\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000000)='.\x00', 0x0) 23:12:00 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="840000002c00010700"/20, @ANYRES32=r4, @ANYBLOB="0008008000000000030000000800010075333200580002001400050000000000000000000000000000000000400006003c0001000000000000001020898dde66057433b6ef3a41d22be225e0001b00000000000000000000000000000000000000000084e1a912c5998bcbf050000000000000000000000000000000798a3c067277da1a290b9613a33c575c36fad473382c8f5532ef3f0e1d2c450a7decbf3431a69f9b2ecb3291bed174245a962fe0484676958265e2988326a89db3139d91fe4aee6ae7e745abdfc21a9f61f2035979c1e3e9fea5b3958bc14fce6e66a36d1ab3194534ba4e973684b27793bff837d3"], 0x84}}, 0x0) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r4}, 0x10) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000440)=0x81, 0x2) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)='f2fs\x00', 0x5, 0x2) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x19) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f00000002c0)=0x9, 0x4) ptrace$cont(0x18, r5, 0x0, 0x0) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 23:12:00 executing program 4: 23:12:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000000)={0x6, 0x47}) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 401.635124] attempt to access beyond end of device [ 401.646539] loop0: rw=12288, want=8200, limit=20 [ 401.662198] attempt to access beyond end of device [ 401.673494] loop0: rw=12288, want=12296, limit=20 [ 401.693072] attempt to access beyond end of device [ 401.704453] loop0: rw=12288, want=8200, limit=20 [ 401.717696] attempt to access beyond end of device [ 401.729486] loop0: rw=12288, want=12296, limit=20 [ 401.814949] attempt to access beyond end of device [ 401.820306] loop0: rw=12288, want=8200, limit=20 [ 401.825205] attempt to access beyond end of device [ 401.860169] loop0: rw=12288, want=12296, limit=20 [ 401.865864] attempt to access beyond end of device [ 401.890255] loop0: rw=12288, want=8200, limit=20 [ 401.895360] attempt to access beyond end of device [ 401.910315] loop0: rw=12288, want=12296, limit=20 23:12:01 executing program 1: 23:12:01 executing program 4: 23:12:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x81, 0x0, [0x9, 0x8001, 0x5, 0x585]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x6, 0x8, 0x6, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r5, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) r6 = syz_open_dev$mouse(0x0, 0x80000001, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r6, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)={0x124, r7, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0x4, 0x3}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0x4, 0x2}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0x4, 0x1}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0x4, 0x2}}]}, 0x124}, 0x1, 0x0, 0x0, 0x20000010}, 0x1) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/policy\x00', 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2242080}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, r7, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8b, 0x2}}, {@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x89, r8}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:12:01 executing program 0: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000000)=0x2, 0x7, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x6, 0x4) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 23:12:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x4000, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'team_slave_0\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5c000000d2915eae7be812f6df70bd55c5f2cf0fab334e5ecb95168432d1f5cb7fe2c4e050014bcd65fef9e3b115fff0e2db8ea42ad3ef6874b5eb77a357a8cba4b43817a6ad", @ANYRES16=r4, @ANYBLOB="0100a203f59092dd47f6b522e000000000020000000100000008005e0101", @ANYRES32=r5, @ANYRES32, @ANYRES32=r3], 0x6}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r9, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="840000002c00010700"/20, @ANYRES32=r9, @ANYBLOB="0008008000000000030000000800010075333200580002001400050000000000000000000000000000000000400006003c0001000000000000001020898dde66057433b6ef3a41d22be225e0001b00000000000000000000000000000000000000000084e1a912c5998bcbf050000000000000000000000000000000798a3c067277da1a290b9613a33c575c36fad473382c8f5532ef3f0e1d2c450a7decbf3431a69f9b2ecb3291bed174245a962fe0484676958265e2988326a89db3139d91fe4aee6ae7e745abdfc21a9f61f2035979c1e3e9fea5b3958bc14fce6e66a36d1ab3194534ba4e973684b27793bff837d3"], 0x84}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000f80)={{{@in, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000001080)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000013c0)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000046c0)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f00000047c0)=0xe8) r13 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r13, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r13, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r13, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x2f2, &(0x7f0000003bc0)}}], 0x3a6, 0x0) getsockopt$inet_IP_XFRM_POLICY(r13, 0x0, 0x11, &(0x7f0000004800)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in6=@initdev}}, &(0x7f0000004900)=0xe8) r15 = socket$nl_route(0x10, 0x3, 0x0) r16 = socket$netlink(0x10, 0x3, 0x0) r17 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r17, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r16, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r18, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r18, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="840000002c00010700"/20, @ANYRES32=r18, @ANYBLOB="0008008000000000030000000800010075333200580002001400050000000000000000000000000000000000400006003c0001000000000000001020898dde66057433b6ef3a41d22be225e0001b00000000000000000000000000000000000000000084e1a912c5998bcbf050000000000000000000000000000000798a3c067277da1a290b9613a33c575c36fad473382c8f5532ef3f0e1d2c450a7decbf3431a69f9b2ecb3291bed174245a962fe0484676958265e2988326a89db3139d91fe4aee6ae7e745abdfc21a9f61f2035979c1e3e9fea5b3958bc14fce6e66a36d1ab3194534ba4e973684b27793bff837d3"], 0x84}}, 0x0) accept4(0xffffffffffffffff, &(0x7f0000004940)=@can={0x1d, 0x0}, &(0x7f00000049c0)=0x80, 0x40000) r20 = socket$nl_route(0x10, 0x3, 0x0) r21 = socket$netlink(0x10, 0x3, 0x0) r22 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r22, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r21, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r23, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r20, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r23, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="840000002c00010700"/20, @ANYRES32=r23, @ANYBLOB="0008008000000000030000000800010075333200580002001400050000000000000000000000000000000000400006003c0001000000000000001020898dde66057433b6ef3a41d22be225e0001b00000000000000000000000000000000000000000084e1a912c5998bcbf050000000000000000000000000000000798a3c067277da1a290b9613a33c575c36fad473382c8f5532ef3f0e1d2c450a7decbf3431a69f9b2ecb3291bed174245a962fe0484676958265e2988326a89db3139d91fe4aee6ae7e745abdfc21a9f61f2035979c1e3e9fea5b3958bc14fce6e66a36d1ab3194534ba4e973684b27793bff837d3"], 0x84}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000004a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000004a40)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004d80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000004d40)={&(0x7f0000004a80)={0x288, r4, 0x10, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r9}, {0xf0, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r10}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xf0}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r14}, {0x174, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x7d}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x74}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r19}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r23}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r24}}}]}}]}, 0x288}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000) r25 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r25, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$KDSIGACCEPT(r25, 0x4b4e, 0x2f) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x1}) 23:12:02 executing program 4: 23:12:02 executing program 1: [ 402.793457] attempt to access beyond end of device [ 402.833250] loop0: rw=12288, want=8200, limit=20 [ 402.847945] attempt to access beyond end of device [ 402.858488] loop0: rw=12288, want=12296, limit=20 [ 402.869189] attempt to access beyond end of device [ 402.875668] loop0: rw=12288, want=8200, limit=20 23:12:02 executing program 4: 23:12:02 executing program 1: 23:12:02 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xaf, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) gettid() perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x404240, 0x0) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000480)) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_RUN(r3, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) accept$unix(r7, &(0x7f0000000380), &(0x7f0000000200)=0x6e) syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x400, 0xc40) ioctl$KVM_RUN(r3, 0xae80, 0x0) mkdirat$cgroup(r6, &(0x7f0000000100)='syz0\x00', 0x1ff) [ 402.883712] attempt to access beyond end of device [ 402.922047] loop0: rw=12288, want=12296, limit=20 23:12:02 executing program 4: 23:12:02 executing program 1: 23:12:02 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x8840, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)={0x8, 0xc, 0x4, 0x200000, {0x0, 0x7530}, {0x4212c53550c4d6bd, 0x1, 0xf0, 0x7, 0xcb, 0x7, "6dc8fba0"}, 0x8, 0x3, @planes=&(0x7f0000000040)={0x9, 0xfffffffc, @mem_offset=0xfd4, 0x8000}, 0x4}) syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x87, 0x3, &(0x7f0000000500)=[{&(0x7f0000000280)="4bfd4c8176a4027db9d5f389cdb4adefb26146d1432fc0b515d80fde3a78e7cd3a75014ae22d51cb0c3e79fd78910e6717760d8c3b803e3b4b45e21dd094fcaa7cd5e581b9265ef5368c2e6fe4e30985e2603647921ed1fe5efb6e495c3681c759e724ac688fdaf134b1ec76bdb30dc2ac73", 0x72, 0x3}, {&(0x7f0000000380)="d690baa9eaf31bae147b5f3dc9631b6d4bab0acfe0126bd74829b21da6fdbe428eba15c8d6e60f5961b32c2387999a8850fd10ff146f203b6cd60107013df6a50b5d4dbcdbae8038d7a6ffaba28b626cbb8e08a105ca49df4aa5b2d4f2e2c869dc5254b8c356fffdb7dbb46f488da63f5ce2ffe051524bb85a36348874b6126302a752c74cfadd91384b716e5c0d23063a92d9d775209c518b4b1f1e755a1deb1264dc1dcabd6ea0e4a00fca3939f14b246d7531ba44d5f0fadfb62e0b220052579d191e8b1c2c56b8d66db036f14a", 0xcf, 0x6}, {&(0x7f0000000480)="0d3c84d5d7011a9d3839fba9c33df212b96b5e986d1d6523b19a7b06ccf4d06718deec0efb99ffe47d146042d506cb4f15daffd667290087415e8dd8c0d704a61974a5908db472e84ec6faa08d264564e73a2366b4dc500d5f7c6a152ed6720d2f9ab9c81070c02ed45018800d9c415965130816fc", 0x75, 0x1ff}], 0x1a100, &(0x7f0000000300)={[{@gqnoenforce='gqnoenforce'}, {@swidth={'swidth', 0x3d, 0x5b}}], [{@seclabel='seclabel'}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 23:12:02 executing program 4: 23:12:02 executing program 1: [ 403.422724] attempt to access beyond end of device 23:12:02 executing program 1: [ 403.453222] loop0: rw=12288, want=8200, limit=20 23:12:03 executing program 4: [ 403.491284] attempt to access beyond end of device [ 403.535541] loop0: rw=12288, want=12296, limit=20 [ 403.573778] attempt to access beyond end of device [ 403.609792] loop0: rw=12288, want=8200, limit=20 [ 403.646504] attempt to access beyond end of device 23:12:03 executing program 4: 23:12:03 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000380)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e22, 0x1, @local}, @in6={0xa, 0x4e23, 0x469, @mcast2, 0x7f}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e23, 0x7, @remote, 0x2}], 0x74) sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) r5 = syz_open_dev$radio(&(0x7f0000001500)='/dev/radio#\x00', 0x3, 0x2) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000001540)="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") r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x200, 0x0) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x7a, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000400)={r10, 0x200}, &(0x7f0000000440)=0x8) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f00000002c0)=0xc, 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000480)={r11, 0x1000, "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"}, &(0x7f00000014c0)=0x1008) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x7a, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000140)={r4, 0x8455}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000001640), &(0x7f0000000340)='./file0\x00', 0x3f, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x8, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)=0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x8000}) quotactl(0x0, &(0x7f0000000000)='./file0\x00', r12, &(0x7f0000000080)="818e0465adcbd685b0d96a9fddd13dbd5ce16be0f439cc1693481db3c8918a3b") [ 403.679924] loop0: rw=12288, want=12296, limit=20 23:12:03 executing program 1: 23:12:03 executing program 4: [ 403.870885] attempt to access beyond end of device [ 403.909606] loop0: rw=12288, want=8200, limit=20 23:12:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getresuid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@multicast1, @in6=@rand_addr="036f4e5262b466707adea16718da0430", 0x4e22, 0x7, 0x4e22, 0x200, 0xa, 0x190, 0x20, 0x8, 0x0, r5}, {0xe4cd, 0x1998, 0x6, 0xffff, 0x6748, 0x8, 0x100000001, 0xffffffff}, {0x3, 0x7, 0xffffffffffffffc1, 0x6}, 0x42, 0x6e6bb1, 0x6, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x1c}, 0x4d3, 0x2b}, 0xa, @in=@broadcast, 0x3502, 0x1, 0x2, 0x0, 0x0, 0x0, 0x7}}, 0x53) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:12:03 executing program 1: [ 403.938572] attempt to access beyond end of device [ 403.958414] loop0: rw=12288, want=12296, limit=20 [ 404.001538] attempt to access beyond end of device [ 404.020544] loop0: rw=12288, want=8200, limit=20 23:12:03 executing program 4: [ 404.049158] attempt to access beyond end of device [ 404.098412] loop0: rw=12288, want=12296, limit=20 23:12:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 23:12:03 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80900, 0x0) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) write$P9_RAUTH(r0, &(0x7f0000000000)={0x14, 0x67, 0x9, {0x34, 0x3, 0x7}}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0xfffffffffffffead, 0x1400}], 0x0, 0x0) 23:12:03 executing program 1: 23:12:03 executing program 4: 23:12:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x3, 0x0, 0x9, 0x2000, 0x20000000ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000], 0x1f004, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:12:03 executing program 1: [ 404.398628] attempt to access beyond end of device [ 404.434024] loop0: rw=12288, want=8200, limit=20 23:12:04 executing program 4: [ 404.460662] attempt to access beyond end of device 23:12:04 executing program 1: [ 404.493858] loop0: rw=12288, want=12296, limit=20 [ 404.523811] attempt to access beyond end of device [ 404.553210] loop0: rw=12288, want=8200, limit=20 [ 404.593277] attempt to access beyond end of device 23:12:04 executing program 4: 23:12:04 executing program 1: [ 404.631657] loop0: rw=12288, want=12296, limit=20 [ 404.682376] f2fs_msg: 61 callbacks suppressed [ 404.682392] F2FS-fs (loop0): invalid crc value 23:12:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0xda00) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.controllers\x00', 0x0, 0x0) ioctl$KDADDIO(r6, 0x4b34, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r9, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)={0x228, r10, 0x971155c64be4a529, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xa4, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7d58}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'vcan0\x00'}}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0xe0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20002}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2e6d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x31b9b1ab}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffc1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 404.757718] F2FS-fs (loop0): Failed to get valid F2FS checkpoint 23:12:04 executing program 1: 23:12:04 executing program 4: 23:12:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x8000, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) 23:12:04 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000000)=""/5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x6) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="7271f78c7a8dafa11cc272b7edf41db55b659f696f81558be9a7067b741191c41cb22312ad3861797dcb65fb2d0db3517df7dae933741239ecf9a9995566bd9f3e4a053b07eeeba21b5f060e5126b5fcc4c4a72cdd732609ae3b1d7ff304f071ca659ce9c963eecc9960a6a0bc333747f17c300fd357a573dfe5a8915670dadc14f9a177ca41b849dd48ec00"/150, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x7a, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={r5, 0x401, 0x2, 0x81, 0x3, 0xff72}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000280)={r6, @in6={{0xa, 0x4e20, 0x1b924000, @mcast1, 0x475}}, 0x4, 0x0, 0x0, 0x5, 0x2}, &(0x7f0000000180)=0x98) 23:12:04 executing program 1: 23:12:04 executing program 4: [ 405.135211] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) 23:12:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x2, 0x40000) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000200)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x8000, 0x0, 0x3, 0x1, 0x0, 0x2000, 0x20000000ff, 0x0, 0x9], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, 0x0) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = dup3(r4, r5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x7a, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000300)={r7, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1d}}}}, 0x84) ioctl$DRM_IOCTL_AUTH_MAGIC(0xffffffffffffffff, 0x40046411, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 405.203230] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock 23:12:04 executing program 4: 23:12:04 executing program 1: 23:12:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001700)='/dev/vcs\x00', 0x0, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000001740)={0xfffffffc, {{0xa, 0x4e23, 0x1, @rand_addr="7925b1ae1d509718157b29786cd37958", 0x100}}}, 0x88) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000000)='nfs4\x00', &(0x7f0000000040)='./file0\x00', 0x800, 0x9, &(0x7f00000015c0)=[{&(0x7f0000000080)="18b9a7", 0x3, 0x9}, {&(0x7f0000000140)="2fe2e696552102305471e75ef64e0e455507e9d645a75deccdf6e8bf0a66356feb3a577196c70c960d2fd6b5094214b8fa738fea31d4015ba80aa4d77c88194fb7f92997b3f6f84a6a8d852d0e1a1a07bbf43aa0b74ad6a54a90db2635e69700da44c8387b649f450c14fd77555fc6886d2a3c872345ed762650d688d452aa01fac1cbdc6ed06566bdf8467ebcaf3dc88c697cd6bca8bca438c7287053fa4f823dc6b6a41b64dde76f8ca13886f61cb0394af7", 0xb3, 0x9}, {&(0x7f0000000380)="37683de23646b7f752865111b73bdbf42a114b849f2bba0e41c750817f737ba5213791cd19053e5fe195c7b65b3111993c904663d3e32161e3d338ce1a1f395b0dc9a2dd2664a125b37c14d7effe593ef218e08000a2a4f9ea08838d5bbcbb854f258dc4276b840a4167ffa194772b2a4b59a299ce757e9366a5abab2526dd2efb4c59a4073fdc9bd3e25229816b7958b2748fcd2b5b5b5c6bff543aaf5fb7f67a29c37b073b2912f77ebd1927cb31046ac88b2a0f4061456ae7b82ec50bb95f14aa6697dc521d6d82048dde", 0xcc, 0x1000}, {&(0x7f0000000480)="d59c653cd0e9a349b123ee89a15a0087a0d81818a425024fdf4a4f04fa18094bfbf2ee012dd42d7c9fedef16b88f188aae5bbb047d1c12fb36a2012cd14e46adffc547127066bc65b5025f5fac77170c4a15734cf47dc5f7ac03b342eda5fe5e418db42266d24dc475776eeef0afb03e188a5fdd1b44863deb96775d1797ae1926ec950874c1ca5b1c3db688651462eec51b64bc2f1b75d382236db1ff2f888012c2b964aac615dba9db24eb4637dc65969740d964857b2b03d0bc7f64d1fec5b3912178c4e66ae3298a6e47284f78805b3e42f3c120566a03d09f557078d2c15d4212e83c251a05f5c219c3742ec099fb7ab8b600afc4c5d23a8f151eec7b4fd6c6ad57b3d88e39c11e8ea01cb09d8d9ccfc6fdf0c6e2edb43ea91b98bc7507429513b8cfeffca89970257639e1af09253fbb277d91747289b3ea676b1755a0f8d8974228c30989218778890123f947a7c190238041cb2223ad49dd1b5bb4df98b3924a089c396a30742c2495e8f4809b0843593dcaaf35330219a774e7cb607762812741d731e492b8cee09bf9cdf4d01d3e1b59867905361168c7d4e9b38ea8d35d2c0db19be84e2844a542cd488dbf71a44f2b612146ec4317b532aa0abf87f87b131132a09b655fde852141f76267d8449d8c9cd6693d687d8627a84f1a2554294a764e7b13268820c4e3359f3d4567847ae8deba91311f0d72660efd36188fe05e61abd5eaa20035dc6fc2f4ba2c71998fa9dc5afab31ad1032feadcf9e9f93bc6512a7541a5aab9d3de13c4b030558d9175e916c7d99ddaed0264f1ef6b6ba9a3dfac577f2be8c895ce03f4a8bd655a9bd006db1d74ea27a00c3e08cee40dfd600d248a7d461237eb381be355b8b1cb366f0bec19b48078273c9f33f0738a0a712d6a474e222318d2378c7279bb3366ff4354d3678794e59f2ee1a7cdba1830af8216eb2e089670143eebf6fda31c2051aad3a848ec026b324a402b8a1b73930a21782697be5b310864e2e8234ae6d59658986f8c32dcbcf51dd05b1e4efce1b95f57f7f3a6f3f0e29a8a9715368a115866ec21fe36943a1ff36bb6b100ffcc2e41fdb9646d560a54aa437393cd596845e4ddd7d9bb5f8099ad6d88a74b4dea5e7614c084852161f952a76b37372becfce7a79579114400294bb1d421f3433ec9b790ee0b89f2604f1cc3feed692421aa53a37129b9bbfee7824952ca6e6abc0d745f409c3c038b4450aacca49eab0aed27ef123fbcef2dcfa7ae2326eacb699a266bb38589daf7b208eca859302eb18703a1ddd0020d8b83e98c2d6a5152768fc24dddf4eeff1de6c327294e8e4a3bb0f04d390fdb52748c6ff3cb8fb0356628eee43dd9bd1826011a3fc1c7925eccd1d5d1ad5999d703a6f02f436085cc0e166e897d024500bd57efebc52c3b8d183b3fd85d2e040ebbc5cb4e1840e993b71f0902d470277b397cec3cf87523a44ef7906244a6a7840b3dfeb503fb8b496c7a7784783c389ae5a2dba5cfef7f90eb77fb4c7dfeec02a889a2a2c2908c6076624a63bbbb023209e35eeaee1a8978be26a87122202b9765c75d19f9167d4a828256288e142aee986da976047e3c08fa65eacf59f3b70d06ba2f2ca3b69dd9715b189d30b7e975c20ce36c5f547b775cdf833d338d2363c8f916fadb14c4dad191345a2108b9cba25987dd35eacfacee47959d6a52df169f2a25cbf60e5c8bab48d57bcb8021133dada8534883407c6cd534dbfdf159353f63a04e3034519cd0fa3c1c20d07db2a93a3362a9fe94eccb516a41f104972aa0eb3997b87f446b3c9a512b0665c57522f9b1c24bbb5c09e561f2b24bc17292ad84bc18c614e9b7af6f70b6f90201d98c6f1fe7d84de161dfc513e711aa19f58f027337c41dec614a4acef23f23f1dde443133ab8f91b9eb8dc4e6c61f1503c51fd4e149cee1955a6ff2361d58f7636eb100ad1adc76fe58f67602d014a73ab8845da311d50cc2666707aab53de15180758629a64dae18ad55803ad1642fce99e0ebdb78d5298b941136f7249bc8084b2e5bc14e74538e6842435a583dac4b7b225a3d9a8a3558cb962a6d53aa6556b5bf0d4f26f94b96679d337e7ba876f4fe2e55bcb79334eaa179341e76087cc50e8484f49a861620324d39c19ed22de083593c760cdfb510b7b8d9f4836e004b411631363e647ca7f1c2ce88b3ae2b73a0192ed7c51fcf1c232d4452f8c08d99994c8c47ddf5972b68884401e1093da057f7d9f63475d19ef774e4f90ea56abd64d7fee3863ffab059c89232b214432aca2b0912b7aa18dd2bdc2de23dd896d89b83e3a478ac093684c376267087d138173e9c50dcc3910dc6007ecd86a3ae4594d64ebaa219de0b79d62bdf7a93fe1bda1aafb252bf03a58ed20bbbf69187406cdfdf9acd217cb56dfe98592937453e64b10ffb52b6490ba69db4dc3b9adc95c255c9ba858e4ac50f2a43100c8f1b45b258b1c77a80d6e2ac29170689ea4fc325bc551ba20f5abab8a9ad0747583ea944afe432b5d6d3b3495582dbd22a7ee8162bd71fc4b9da73f52102b0a9b16f7a3df362e0a7142d375c8f1a7b40b5cf5f5e7a9e636ff92795e9866af4321e53e19fc3417f4b131f642b1c5a160ee8d45843fb2df4861dc4ae441e28f419581814bc28616a7b8a76be7a0eeb52a91e7b955a65372dde7d7aa7334af752ae44f1b1a0d7556005b737743d7bcee5c6a0956a0f193d09d5aae9af0a273eefd83842f745cc19bafc80efe2a026c54fd1b9b1dc500b5e4b31e478ef3343c8c1db0b954c6031c11959bec6c7256034b5b2109aa3ef655e1ac7d9b4a1f21c9094f0d2d5852a2ff8eb8f8250b12c06c4f85dfdd0abbb4882680528a974383c53f87aa9a8e9b40197ddf0db8afedbefa0d1931f5079d7906132a719553c058cafdb098e65fa1a606961a9fa12961a2f8e666b0f0815394b4289e9f2ba84c49ffd9613b7babd8db4375606a4e3d90f2da4e10caed3626614c7dbf5514351a164dde8e83cd967b180613ad43b3e7c572e12bc621993692aed6e9fcee822788138979f00c4921bbe794d0c3dad99add477adf0132bee8b0e3d2f2355ace2a00c717daffef450fd61d90f618fb749e123ef103d9542e5b7cf34afafeaf73139ab4269876414d47bf7592e15f54ac1a4bb6135f6aa61e430d043d639c552f54b9a9b86b53d9348b1e28bc63ade68d78ab270ea27389f286a6b68eaaaf55d8dda9747e63f8c4c09bac66b0ad52718ce284633e85a9a01fa15b9839c650f6d80f8fd7448ca08e84db53ae79bc3f8f0150bc9ba68eb75e614384fd41aeefff4bf11c05d3f8ae57654ca7deb12cd0ac0d556addb968770638ae079e2cfe955516f9c72bc24fc394b5828025a478db2c9148ca73430b0036714ef8388a025e4aebf33ad69debc6dc183d16c9dde15b3ec1f8ef7abb3d854c023e0965cdcad05653383343f7bd00e770d7e5e4fbc6a4665011dbc56978c98c35c94e89fdd958f54559e0f5cd32985ad6791d030af1b2a61b5ab3886950295dfba2ee13e770c837ff1f4efb2b3d44b9c23951825a3ebf10cd722b769814d55d2fd57cb1f959bd5c817d1a1e150b25f8b966e268523d72be5403e016c97b7f93e2859c614a63cc99ff8016c0f05b3662f5e5a477aacf613c634a669223a0adaa39c3d2a98f2539dada217286a4f69ce4b7b3e6848cfaa6150a5eb2885558d78c6221012f05317e5a4451d9301d41121294d3ee211c0c0c4e0403b8c138dc80b89c53fc8738cfe9708051a19471f4a3e79513f5fecfa4a200744c9533bc039cb75d6bd1caf17c8086e70d41ee531d7800f8db1a4cda2d351e93e42a0d920888ee1d97393262ba1cb89b6a2729a3f7fb9722b0e2559caa1d0cdd0bcbc120945432906828f4ed07e034cda36e3c025a5d737eb78a83e3ab4aa2d1dc67c8db2d7003a2721c237590998e3acd3a435197041a6c06f30da8125432fa94bb0c22ee605353365a2c6250ede5d1eeb706ae40bdccdba1fb2e42aab879b34b362a205b0254a602eae2db462590901df41efd7779e23557ec8e0c3d0cc75285488028187f8e6b5e6a742e3c507ff2b4d330ec4e1d98270e87b1dd57a30b3dc9b517b5c6e132b3ef6b28e76c03e55d93dbfc4ed96b0494ef017543785febc03dec48222852052b1a1137acbfa3eef19052682c6b5b0103044a82f7c2288edc52ebfb56cb23b0afff7a464b70834b175a0fed5c559c3d719ebcdeaa3de7ad0166de6b35a42e6de61be96c58fbf408ff17e168ace7706c6fa63205d54846a12cbd1e2a7a87a660b2881c584db3029eda04205e86db14e1db885718ea19f6e9a01593a3bc1b2439e4bb8ff0e701079a8bdb89893ebb4936cd7139651e14f7084085772156d89db96fcab5e29e0be1b898024762686515c48df88544219b56f303bc938d33d3d5a9b8b109e5e7ca998d446da35e8c4d1039f54dc6bcb2a1faa482d3ca9dac6be2ff1dc370d115aaf0a28b538aa673eb29d618586616f848a96630c326ff9cfc83a4c86698919b7c52390d32c3913ebf0d0ab8119e9d3153d4ae4da318a7c104f7bd2205344fb4761d6ce0b582093c69ddb7839e20965358be884fcf1c48c9dd0e38916d25f5ad94ae68ffa3fa4f5fd88cc381db19b911fbfb6955944a9e6c499eced84171238156cf2daf6dac7247f2889e3bccd5f68682d295820412b2660eca327814bab9d207d29254c83f379bb8b246eac6102b9b040de5a5579caa1d93edd99ef665266cfe48c5acafc2797bb44b1c70f94d998ee9adb295ffcb228fd869b737aa1bfad4bb2a90c13dffe52438ed41afabbfb1f83cfc94210079c64deca1636f4f7a280ca087cb933ad978de6a37bda118f2b27cce23a4edc27eab017640cfd9023b425c1ed9398424e2247615deb8fbb4f4a4cea744a5bf55b3eba9be4d78682286cdd982d2c76221d405f6de9c1fcca9b711a657825a3595cd38cf1e9c91a7efc60703563d1c1c2acb6b2134e1a32792e3686d0d7f6ea5eceb1d77b2deb7de9213c678b4eaedf9a7fd7609c74aa2d223c368e6aae5ab7f9a68023d6ba3379eb513206709cee9f091f16f08034c3bd035f264f7bab5d4f8323374dcc9259862d4336827900c0cfc87c049918e005d80d0fb3b6fb29f7582cbd93c012214fda48c519b4d908787b7b55e51fea4b944408ec20614cba4caa654e1bb004872d2fc3e9ca6b200d7886fab8ab88196226fd5a8b4983c04a9c7510a5c30517c23a68856fb91bd5d87bba73424e610163acdc75e465dddb311ddf517b116f74bbf966a049adc6e6835881263b43f39b9f742c52ede396fd326549a2cbf8170d8deb9e23c7bccbc97fa0eaec03b4124f8f5b4ea0e05bf50acbd6de0422a6867a5d9aa09c0237ee5c0478ca1687d29dc85bc96c97c2f45194d623790114fbe7a01856ca7067378df0417c56102a3a56c1b2327d5bf4c667825911db80dd9bb4c173bdda9f52aa0f8a523b477f381934d688da7747b8d446422f962a047262c922f5cd99ef1f47d923ee04ee22e3d212e8ac14fc97983d71e1f260a8bc968c560c8d63259fb48950de65df992e68c7d73b38f5c980d6a37aac0e57cdf0c55a74b6e70c1653bcf209785c955761384d7e49c9894a0d6ef8a7a6b101cbb7257b4be7ace7177e3591b180844d21bf5fdd64ee58d6e4229b692196bfc57898b29012bda1d66913f56ebd9f69eba8f74a59deba8967fd2d5eff79bdf3ce8d02c6b3db764c8ceb6255062de2ae64192c267a07e455ed45efe65f226296506e2", 0x1000}, {&(0x7f0000000280)="b9504a08c7eb15c5596517459d162051165e181acf615e4d5a2f3b73c309acca169cc750", 0x24, 0x3f}, {0xfffffffffffffffd, 0x0, 0x1}, {&(0x7f00000002c0)="98ad7814c8a06211f9452b206b39884205f94e0ff2099dbe30f3ddd12efc625adb2877ea60e94b317a8cd2c15f05dc9aebe1ec08169b7d3870c8ac04a6674c603f50c2ba562cc65a6846994cf131cc7692c7b7cce2049f56e7364bcbf091", 0x5e, 0xff}, {&(0x7f0000001480)="4f86faf89a3d21f1713d1b02f2c7d119c3555878bf0e003ae96de6bdd2ea27fcb1fd1fc0b78aadded06992f0f36c021344aa974d4af20f46d893ef82beefc5eba5f6190f4f1ed6ce66ad55229be31df5", 0x50, 0x1ff}, {&(0x7f0000001500)="2e15ef08db5944d95fec3ddcc8d9f9dbd35a5bb2786a96948de0de6cc3539789badcee40aff118e7871d7bd0038e922bd4b1ca6f0d0d96705f6bb9bd96d81c5c17fd7a2322f172eddfa0c9d8c424940b4458f405b6311e8bee7e02c2eae869cd5b535c85a004585c3931794979356fda39df3f3c4b628df09e95b0f9971f52431310", 0x82, 0xff}], 0x1000, &(0x7f00000016c0)='f2fs\x00') syz_mount_image$reiserfs(&(0x7f0000001800)='reiserfs\x00', &(0x7f0000001840)='./file0\x00', 0x7, 0x9, &(0x7f0000001d80)=[{&(0x7f0000001880)="3e575674a9d1f62163a97386189b3659c223d1561a274479ac1ef2908bf43f57b23b049397c068fd45fe03aa8363b17ba8cf2496b5d22fb3fba3d97d89c6b4eeb23f3a78d328c4348774bc297e3a42e3bcb5e558136b25fe9d37c38987326dbefbe70c8544", 0x65, 0x6}, {&(0x7f0000001900)="7295476821df061b9ef95052cb60d74d89aa9a3e8d977a9d00b4a7427a0f34e6a300c8532152469c7128b34267fb3afa2a9ad1", 0x33, 0x9}, {&(0x7f0000001940)="d4f13f7a48afc40a28c4b3230be85abfc6e9c121cb3c61078066146f28aad9fe50d21b4e405190aa7c6558a8fbcaaba7d022d512646a881fb90e9be22b2c1bc0befda04e1d0eaadc32f65a7172cf40f1dbe4f7a011a41c3ba71204f98652d0bd822cf0c5e1660374e40a2c107019c9024ab53063e45df4ff580944e920825439e7fc035afcc2f91ee432c3b54f483e2f0db3f05545dc3d73e66f6b6dbbc9", 0x9e, 0x8}, {&(0x7f0000001a00)="402adfe94fd2cf354df4271af6c4b5713e57932a4abf15f9beb7ffa901c777309e5ce18e2036657da0132451853f7a13c4ed4e83881712f7eda2bb74215559f202223b74094b9a2eebfd6c6d64d8532c91fea07bec7512c4337b11f18b078b90463e838fd6b16d36204926a196db27e316", 0x71, 0x7}, {&(0x7f0000001a80)="67218c391062f790a6764147bdb276fd19486eae4a6a3aa18365a01e86277c1e344f33ab5ad071a451c36d923140e59084d4ec94ffbd0e0c2ee85f9d4c63849b3eb85784004ed927f0ad99ef2def7e58f7d1e179cb90a76aaaf65fb6f189be4a503de730f5cd3bacb35447440f6e159d9aa705e8044d9b72123d2396", 0x7c, 0x1}, {&(0x7f0000001b00)="361c621e34ac4c552cbea56eb77e531f81856ec797ca21434428a62843de1feb497ea0383c8ada8eedec6e906c14e6fb795620b907bb929c38415c3bf915617c229784422497289ec92c583ca9adc0d26f70c42fd77cc9", 0x57, 0x12}, {&(0x7f0000001b80)="a0f5d9947caacb408337a25b6ad89fa1108fc3ca141779ac428abebdf37b9362a2c812165a56ab537f878d6cd31a6172de04703a441a50107fd4552c14fecdf0b029599f2044842df43fd86d198f5c027612560a6ccfeb9468ce49d4413823a8ded37a06bed0381024506f6f6cf6fe7e414521191689f82eff039d172931f622b3941ad1f9fa5573c50f998488f5f70d09060732a534d20e56dff29a41b95b660289526aa91cef7019f0c1780c4efcb33c2ebd74c251e7f36731b82bc1883cd64c", 0xc1, 0xfffffffffffffff9}, {&(0x7f0000001c80)="713817420ce069a07ae28496308a329731d68f12c04ecdf87cb01d7c01d976cefcf7ab8337456f2f12edc91e610a0e0e349a1306367da2524241356f015bb226fcf57ed307282eb765ab4ad3d4", 0x4d, 0xfffffffffffffeff}, {&(0x7f0000001d00)="a2d706f36871f807cc79f03c5e06a0e5e7e14225db48a42edb979a855a76d6d693345e633d6756c41acb6f8318116a3b54897c86301ee4ff1a6a529da195a14d8e7d9ee651ab537a6b", 0x49, 0x3}], 0x214040, &(0x7f0000001e80)={[{@notail='notail'}, {@noacl='noacl'}, {@resize={'resize', 0x3d, 0x2}}, {@notail='notail'}, {@balloc_hashed_reloc='block-allocator=hashed_relocation'}, {@noattrs='noattrs'}, {@errors_continue='errors=continue'}, {@tails_small='tails=small'}, {@noquota='noquota'}], [{@appraise='appraise'}, {@smackfsroot={'smackfsroot'}}, {@fsmagic={'fsmagic', 0x3d, 0x7fffffff}}, {@audit='audit'}, {@obj_role={'obj_role', 0x3d, 'nfs4\x00'}}]}) r1 = fcntl$getown(0xffffffffffffffff, 0x9) ioprio_set$pid(0x2, r1, 0x7) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r2, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$TCSETS(r2, 0x5402, &(0x7f0000001f80)={0x4, 0x1a, 0x3, 0xf96, 0x1a, 0x5e, 0x7, 0x0, 0x80, 0x9, 0xe3c9, 0x14000000}) [ 405.274504] attempt to access beyond end of device [ 405.288266] loop0: rw=12288, want=8200, limit=20 [ 405.297947] F2FS-fs (loop0): invalid crc value [ 405.310537] attempt to access beyond end of device [ 405.346206] loop0: rw=12288, want=12296, limit=20 [ 405.368188] F2FS-fs (loop0): invalid crc value 23:12:04 executing program 1: [ 405.391895] F2FS-fs (loop0): Failed to get valid F2FS checkpoint 23:12:04 executing program 4: 23:12:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x40) [ 405.440091] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 405.479884] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 405.536394] attempt to access beyond end of device 23:12:05 executing program 1: [ 405.563836] loop0: rw=12288, want=8200, limit=20 [ 405.596470] F2FS-fs (loop0): invalid crc value 23:12:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0xfffffffffeffffff, 0x0, 0x0, 0x2000, 0x20000000ff, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8], 0x4, 0x8}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 405.631716] attempt to access beyond end of device [ 405.674354] loop0: rw=12288, want=12296, limit=20 [ 405.801255] attempt to access beyond end of device [ 405.838128] *** Guest State *** [ 405.843012] loop0: rw=12288, want=8200, limit=20 [ 405.855522] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 405.858351] attempt to access beyond end of device [ 405.877566] loop0: rw=12288, want=12296, limit=20 [ 405.883954] attempt to access beyond end of device [ 405.892888] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 405.901527] loop0: rw=12288, want=8200, limit=20 [ 405.908535] attempt to access beyond end of device [ 405.914627] loop0: rw=12288, want=12296, limit=20 [ 405.923782] CR3 = 0x00000000fffbc000 [ 405.929134] RSP = 0x00000020000000ff RIP = 0x0000000000000004 [ 405.935626] RFLAGS=0x0000000a DR7 = 0x0000000000000400 [ 405.941986] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 405.948956] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 405.957472] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 405.965986] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 405.976183] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 23:12:05 executing program 0: openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x800, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 23:12:05 executing program 4: 23:12:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x10400, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0xfc, r1, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x24, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x54, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x23}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_MON={0x54, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7578}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x22}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x82da}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ab}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x44006010}, 0x20000000) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x40, 0xef2a41) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e23, 0x1000, @empty, 0x200}, 0x1c) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000040)) 23:12:05 executing program 1: [ 405.984691] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 405.993058] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 406.001390] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 406.009724] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 406.043033] IDTR: limit=0x0000ffff, base=0x0000000000000000 23:12:05 executing program 4: 23:12:05 executing program 1: [ 406.085600] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 406.123866] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 406.139743] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 406.172658] attempt to access beyond end of device 23:12:05 executing program 4: [ 406.193920] loop0: rw=12288, want=8200, limit=20 [ 406.203702] Interruptibility = 00000000 ActivityState = 00000000 23:12:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200), 0x2100040, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f0000000e00)={0x0, 0x0}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r3, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) unlinkat(r3, &(0x7f0000000e80)='./file0\x00', 0x0) recvmmsg(r0, &(0x7f0000000d00)=[{{&(0x7f0000000000)=@generic, 0x80, &(0x7f0000000280)=[{&(0x7f0000000380)=""/208, 0xd0}, {&(0x7f0000000140)=""/148, 0x94}, {&(0x7f0000000080)=""/2, 0x2}], 0x3, &(0x7f0000000480)=""/190, 0xbe}, 0x81}, {{&(0x7f00000002c0)=@vsock, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/182, 0xb6}, {&(0x7f0000000600)=""/142, 0x8e}], 0x2, &(0x7f0000000700)=""/212, 0xd4}, 0x8}, {{&(0x7f0000000800)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000880)=""/194, 0xc2}, {&(0x7f0000000980)=""/72, 0x48}], 0x2, &(0x7f0000000a40)=""/119, 0x77}, 0x4}, {{&(0x7f0000000ac0)=@l2, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000b40)=""/26, 0x1a}, {&(0x7f0000000b80)=""/6, 0x6}, {&(0x7f0000000bc0)=""/129, 0x81}, {&(0x7f0000000c80)=""/24, 0x18}], 0x4}, 0x7ff}], 0x4, 0x10000, &(0x7f0000000e40)={r1, r2+10000000}) [ 406.240579] attempt to access beyond end of device [ 406.245658] loop0: rw=12288, want=12296, limit=20 [ 406.260424] *** Host State *** [ 406.263946] RIP = 0xffffffff81179e70 RSP = 0xffff88804cbcf998 23:12:05 executing program 1: [ 406.287543] attempt to access beyond end of device [ 406.294033] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 406.309897] loop0: rw=12288, want=8200, limit=20 [ 406.318052] FSBase=00007f131c78b700 GSBase=ffff8880aee00000 TRBase=fffffe0000003000 [ 406.337835] attempt to access beyond end of device [ 406.355650] loop0: rw=12288, want=12296, limit=20 [ 406.363487] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 23:12:05 executing program 4: [ 406.384827] CR0=0000000080050033 CR3=00000000819bd000 CR4=00000000001426f0 23:12:05 executing program 1: [ 406.463111] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff862018e0 [ 406.469923] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 406.479602] attempt to access beyond end of device [ 406.494243] loop0: rw=12288, want=8200, limit=20 [ 406.509117] *** Control State *** [ 406.528900] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 406.536790] attempt to access beyond end of device [ 406.572311] EntryControls=0000d1ff ExitControls=002fefff [ 406.577625] loop0: rw=12288, want=12296, limit=20 [ 406.605938] attempt to access beyond end of device [ 406.623232] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 406.627104] loop0: rw=12288, want=8200, limit=20 [ 406.637634] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 406.649815] attempt to access beyond end of device [ 406.655177] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 406.662479] loop0: rw=12288, want=12296, limit=20 [ 406.668057] reason=80000021 qualification=0000000000000000 [ 406.679204] IDTVectoring: info=00000000 errcode=00000000 [ 406.685770] TSC Offset = 0xffffff23b6abe680 [ 406.694383] EPT pointer = 0x000000009364701e [ 406.699016] Virtual processor ID = 0x0001 23:12:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326735001000eebad104ecc80080d267d9f8f30f1bb429000f20c0f605500f22c067f3af", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:12:06 executing program 1: 23:12:06 executing program 4: 23:12:06 executing program 0: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x42c9003f1e2fb46e, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 23:12:06 executing program 4: 23:12:06 executing program 1: 23:12:06 executing program 4: [ 407.009301] attempt to access beyond end of device 23:12:06 executing program 1: [ 407.032729] loop0: rw=12288, want=8200, limit=20 [ 407.071815] attempt to access beyond end of device [ 407.098309] loop0: rw=12288, want=12296, limit=20 [ 407.155731] attempt to access beyond end of device [ 407.174367] loop0: rw=12288, want=8200, limit=20 [ 407.197676] attempt to access beyond end of device [ 407.235125] loop0: rw=12288, want=12296, limit=20 23:12:06 executing program 4: 23:12:06 executing program 3: 23:12:06 executing program 1: 23:12:06 executing program 3: [ 407.331045] attempt to access beyond end of device 23:12:06 executing program 1: 23:12:06 executing program 4: [ 407.380601] loop0: rw=12288, want=8200, limit=20 [ 407.431578] attempt to access beyond end of device [ 407.436936] loop0: rw=12288, want=12296, limit=20 23:12:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000140), 0x4) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x100000, 0x0) r3 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x525410}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="a71c9a5a", @ANYRES16=r3, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x48004000}, 0x8081) getpgrp(r1) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x23c, r3, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x48, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_BEARER={0x70, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1000}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'bond_slave_0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2a}]}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20000}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}]}, @TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}]}, @TIPC_NLA_MEDIA={0xec, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x71}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x33fa}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb5a7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xae}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc0) syz_open_procfs(r1, &(0x7f0000000040)='net/stat\x00') syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 407.486707] attempt to access beyond end of device [ 407.520275] loop0: rw=12288, want=8200, limit=20 [ 407.569641] attempt to access beyond end of device [ 407.586299] loop0: rw=12288, want=12296, limit=20 23:12:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0xfc, 0x3, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x3, 0x5}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 23:12:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000100), 0xe7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet6(r0, &(0x7f00000005c0), 0x100e3, 0x0, 0x0, 0xfffffffffffffd94) 23:12:07 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040)) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x0) lseek(r1, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="01d10a4ae175ebab3c0991d329396866268b1847d9ec7a15c92149ef8e802eef8cb1d310a2b323312bcd9b08c07f125e6f02b99fe4a7fb8fad1d9256e06e"], 0x3e) fallocate(r1, 0x3, 0x0, 0x8020003) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000200)="e5", 0x1}], 0x1) lseek(r1, 0x0, 0x3) 23:12:07 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x0, 0x0}, 0x10) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x1f}], 0x1, 0x0) 23:12:07 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x9, 0xa0a80) sendto$isdn(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="1c00000001800000046e4e3ca5e42d2bbcb2d1818f51489d9acc68d2558d80ad41659b5c7ec74a9684fb37ed9797d6590d856b28d326420a6293a3c868a6e8acd693f6cc8b8e8085e89f70ac2f4d81f9b3e014f9678ba6ba3318e27c1db80b1b1a53118529fef58e71a81a099f3f025e5ebbf41c71fd9b1c70c0b59d"], 0x7c, 0x10, &(0x7f0000000280)={0x22, 0x6, 0xcf, 0x2, 0x7}, 0x1ef) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000000)) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 407.724918] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 407.760190] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 23:12:07 executing program 1: r0 = socket$inet(0x2, 0x3, 0x80) r1 = socket(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0515b5055e0bcfe87b3071") recvfrom$inet(r0, &(0x7f0000000240)=""/118, 0x76, 0x1a0, &(0x7f00000002c0)={0x2, 0x0, @dev}, 0x712000) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) 23:12:07 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x0, 0x0}, 0x10) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x1f}], 0x1, 0x0) [ 407.883961] attempt to access beyond end of device 23:12:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x24, r1, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x33f9a31f}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0xa0a00, 0x0) [ 407.919977] loop0: rw=12288, want=8200, limit=20 [ 407.963125] attempt to access beyond end of device [ 407.972672] loop0: rw=12288, want=12296, limit=20 [ 407.986590] attempt to access beyond end of device 23:12:07 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x42c9003f1e2fb46e, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 408.013902] loop0: rw=12288, want=8200, limit=20 [ 408.026458] attempt to access beyond end of device [ 408.031808] loop0: rw=12288, want=12296, limit=20 23:12:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x700) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=@v1={0x2, "3653f522a34e68"}, 0x8, 0x4) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 23:12:07 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x0, 0x0}, 0x10) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x1f}], 0x1, 0x0) 23:12:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000280)=0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r3) sendmsg$nl_generic(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x25c4, 0x14, 0x800, 0x70bd2a, 0x25dfdbfb, {0xc}, [@typed={0x8, 0x4c, @uid=0xee00}, @nested={0xbc, 0x48, [@generic="5e44deb064e6702b0c497d0fa655a5a26f72ed39576ccbf44dbc88088018d0757cf962f0b763206e07e3290fd731dd76cd601e22947d6993b6beaafeb3b94d66c4f86d2ee2e5c802ed70913d446710d97c92ab94f670f1a290f534a37dc5e9050cdf4123e1efe2a82cc4d884479646832f0297341e0a1bd73be26db66241b1848ba37a9ee6fdc90e88c334154db9d7afe9b71d1c3edbfa5e0313eb8f9aa4a5484718aa5dd66e4cb9fc76b603eb0451379890cc8cd9f5f7"]}, @generic="41611c12cb5a1d20f243ba18cd4de96f919dbd336f483453fb6af276c426a2e3995ff841c13c360620cf823ceca7d7a6efad7b840d804bde4f4f3e840b63e5c6b32298f097939e17645002ec0fe68c9310976d0f9d323408081296edb8", @nested={0x234, 0xf, [@typed={0xdc, 0x6, @binary="44c27f4d755a8796215aed7b317bbb24acc53e103b94bd6c1bc8c51cfbc421f552f63a917953ffb0cd41d7f74303795b40f45b852730e0f17f1e9086550b2951820218c5ffd1de448d1ad528188c3fab7570e0ae12367195030f8c54815cb4a9a15dbc43521fab65cd413215051b6e209123d57def3b3d2869788f5ab7866cb9d3c0567460d71eb9df3a96186f255aab3964ba912b6082ac2b7216cb3b066015a8364db85bcba990f42b9f9af653b5ce35caba6b12c7c00a07bae5d340c90408a1bb02d9f07297715e3b19214e79782e2de7e99cf4c0213c"}, @generic="2a00e855ff2e606e422834e85eb644cdd64d22a5e0808ee128af016ddb95d391e697b97ace5afcef6a6279ae6b69ccc507cc2806ada39a218f6f611d8a7b7dab0548bd549bbc91fedb3ac696b8fc3e70af3ddaf2d8c76be6f2f0be31b015b4b103038c818901969afef59a1e1949ebea84d4129432d29ad38e41f834cefbf03b4430fcb54e83a64e577b7354942a81791f0a4006b35c5baa23084a8cd947b309350376adab64f934aef981e6d21fd96931ebacbb103799a95b804019419bcf1d3f4533fddff3d0ab3dc02df7b6ca358eee071d", @generic="eae7d243ff454776f2f5ae23ba87cb1cefa16a54cae5dc49e2b544d653b593a346604b21081df448cc87d21ec42f7b1932392035848dad15a2c6e67f5d29b61b402cc86048272c19cf121bc0bcb4429db3fd2a5d03fcd7cd0c97b8887b52d9c79cbe2ca069997deea6b86cde7318b42928a7a1db4db06c", @typed={0x8, 0x70, @pid}]}, @nested={0x4c, 0x51, [@generic="d6081826f8c64447036c13655d0f9d808de8e57eb50924f5fc7c740055ebd8f452e848e8c98f5529e86c6dbfeb216214c1b689eb39df6f5def9e74e32c3659aa96ec247608"]}, @nested={0x1ec, 0x38, [@generic="5bdeda7366f0b060bf3d15fe3d13505ea92d5e84a65b70f735cb85df724fd37ebe7332c3fbc657890f4abbc71574342e3af2ee641389a907fac991da19eef16c90a592f24e54d93d6ccb420d8953f9bac02240c2fc2fdee5f6f8786f69e0d3c36480b730b8202b6d02ede072d2ed69f987930ad91b58b96a096e768bea0c58", @generic="1d0e0492b3dfd8818c84f495ca76af9f37daf7b907c806e657a1469b12c49b62fc8a5d3b9d2a88f7400e9fd7a2f052c763b0e22b88c09b79e0b16a1727ffb81a94d45c17d9e903cce02b6a9a70f84a5f2c2173f1ba03489d07038e7215e157a906530ad2d4eeb42a1387ddf4139df14f81f1dcaecd9edb4ed504fdc49188dde2a7b8110ecc22aed9ba05d2843abf74f5fcf3bc52db3534d1d147d1d8e6dea0a1612d809797b4273281d463199e2afa31c7c7ed7c3f76944f516f23701e5736847ec8acc693df0a71773d3f1322a066128c641228bd0b281986534522fd553b003c815dcb4c1d2a2af65863398c108492786d", @typed={0x8, 0x3e, @ipv4=@multicast2}, @generic="3c86d9524f0d4e678dc3f541a7d9aec273dad7f958e647f7b52b3720283bf61598b8bc2c22c440dae6ca15d3ba78d532fa20efaa9fff0283aae521f6", @typed={0x8, 0x1a, @ipv4=@local}, @typed={0x4, 0x43}, @typed={0x8, 0x8f, @ipv4=@local}, @typed={0x14, 0x72, @binary="1aa927e2bbb6bb2cb71ab7bda559721c"}, @typed={0x8, 0x57, @uid=r1}]}, @nested={0x2020, 0x6c, [@generic="7adf880be95786606c203d2aff21e9b8ce50358a", @generic="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", @generic="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", @typed={0x8, 0x27, @uid=r3}]}, @generic]}, 0x25c4}, 0x1, 0x0, 0x0, 0x4002080}, 0x4) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r4, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r4, 0xc0605345, &(0x7f0000000000)={0x3, 0x3a53310b26759341, {0x1, 0x0, 0x5, 0x3, 0x7}}) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 408.328776] attempt to access beyond end of device [ 408.350999] loop1: rw=12288, want=8200, limit=20 [ 408.368646] attempt to access beyond end of device [ 408.380887] loop1: rw=12288, want=12296, limit=20 [ 408.416404] attempt to access beyond end of device [ 408.425645] loop1: rw=12288, want=8200, limit=20 [ 408.442826] attempt to access beyond end of device 23:12:07 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x0, 0x0}, 0x10) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x1f}], 0x1, 0x0) [ 408.462299] loop1: rw=12288, want=12296, limit=20 [ 408.466966] attempt to access beyond end of device [ 408.481303] loop0: rw=12288, want=8200, limit=20 [ 408.496318] attempt to access beyond end of device 23:12:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x504040, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 408.519890] loop0: rw=12288, want=12296, limit=20 [ 408.559257] attempt to access beyond end of device [ 408.577556] loop0: rw=12288, want=8200, limit=20 [ 408.599418] attempt to access beyond end of device [ 408.618274] loop0: rw=12288, want=12296, limit=20 [ 408.779013] attempt to access beyond end of device [ 408.787874] loop0: rw=12288, want=8200, limit=20 [ 408.813603] attempt to access beyond end of device [ 408.838298] loop0: rw=12288, want=12296, limit=20 [ 408.856452] attempt to access beyond end of device [ 408.862171] loop0: rw=12288, want=8200, limit=20 [ 408.867296] attempt to access beyond end of device [ 408.872945] loop0: rw=12288, want=12296, limit=20 23:12:08 executing program 3: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000000)=0x2, 0x7, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x6, 0x4) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 23:12:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x101000, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000140)=""/189) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 23:12:08 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x42c9003f1e2fb46e, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 23:12:08 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x0, 0x0}, 0x10) preadv(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x1f}], 0x1, 0x0) 23:12:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x9, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0xa00088, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x10001) 23:12:09 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x0, 0x0}, 0x10) preadv(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x1f}], 0x1, 0x0) [ 409.533906] attempt to access beyond end of device 23:12:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x101000, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000140)=""/189) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 409.581040] attempt to access beyond end of device [ 409.589928] loop1: rw=12288, want=8200, limit=20 [ 409.605541] loop0: rw=12288, want=8200, limit=20 [ 409.623417] attempt to access beyond end of device [ 409.650914] loop1: rw=12288, want=12296, limit=20 [ 409.662294] attempt to access beyond end of device [ 409.684276] loop0: rw=12288, want=12296, limit=20 [ 409.693528] f2fs_msg: 100 callbacks suppressed 23:12:09 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x0, 0x0}, 0x10) preadv(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x1f}], 0x1, 0x0) [ 409.693562] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 409.738799] F2FS-fs (loop0): invalid crc value [ 409.751498] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 409.762026] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 23:12:09 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) chroot(&(0x7f0000000040)='./file0\x00') r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$rose(r3, 0x104, 0x1, 0x0, &(0x7f0000000040)=0x7a5) r6 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="263401e2f1fb357e00892f97939bbef0bdecf1650b85f7c40f71cf9526bd3f71440fc019b0e2ab0a9d5aa5e0e15ca5af0ef0be659e9c5818d439e5201ff82a2b46b6dd85a6a4e6c58a934af88055a1a31dd2e06111320dcf1b455867d017038a5efc4f270fe3cf003152ae40d2e818ef7c88e956f1ef2b3d8d46a2ef0743b7747a983726b743dc0d3f2efe2c52c7144289463bf43063e76d7d2ba24f54d54837edaead091b0a32c542b9d8bf9f6ab80b98903a79fa5f6972c1fd6f98a39044", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x7a, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={r7, 0x3}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 23:12:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x101000, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000140)=""/189) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 409.791127] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 409.813488] attempt to access beyond end of device [ 409.833407] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 409.843368] loop1: rw=12288, want=8200, limit=20 [ 409.867920] F2FS-fs (loop1): invalid crc value [ 409.891217] attempt to access beyond end of device [ 409.904122] attempt to access beyond end of device 23:12:09 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x1f}], 0x1, 0x0) [ 409.936698] loop0: rw=12288, want=8200, limit=20 [ 409.948286] loop1: rw=12288, want=12296, limit=20 [ 409.968013] F2FS-fs (loop0): invalid crc value 23:12:09 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x1c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7, 0xfffffffffffffff7}, 0x6, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000)=0xfffff801, 0x4) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x5, 0x7, 0xfffffff7, 0x6, 0x1}) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 409.981453] F2FS-fs (loop1): invalid crc value [ 410.005820] attempt to access beyond end of device [ 410.021115] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 410.048676] loop0: rw=12288, want=12296, limit=20 23:12:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000040)={0x10004, 0x0, &(0x7f0000ffa000/0x4000)=nil}) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$CAPI_GET_PROFILE(r1, 0xc0404309, &(0x7f0000000080)=0xf4) 23:12:09 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) openat(r0, &(0x7f0000000000)='./file0\x00', 0x10000, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x800, 0x0) read$usbfs(r1, &(0x7f0000000680)=""/154, 0x100000111) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) symlinkat(&(0x7f0000000040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00') 23:12:09 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x42c9003f1e2fb46e, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 23:12:09 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x1f}], 0x1, 0x0) 23:12:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 410.505244] attempt to access beyond end of device 23:12:10 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x1f}], 0x1, 0x0) 23:12:10 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/142, 0x8e}], 0x1) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)) r1 = dup2(0xffffffffffffffff, r0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r2, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r6) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="99b500", @ANYRES16=r7, @ANYBLOB="0fe400000000000000000100000000000000014100000003001700000000000000006574683a726f736530000000"], 0x3}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r5, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000810}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000326bda500fbdb010000000000000007410000001000187fffffff6574683a6e72300065809ca979b97c6f80af5dc212c03effd82265f635068f98db5d426e24fff16cef23c197b27181e0ba91740a8cf2852f33f238243b5e4f217e996810a8e72a66b48472bcba5480b0f8632c680300000000000000e404fb5331cf89a13a7e3ac3f660d79d206823b2b94c2f5751b0e9d8258ff1d1be0378f53c6c14a3ace7449f503ff8f62f6364e6bd475026e3"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8420200}, 0xde728b2e21ec38b1, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r7, 0x200, 0x70bd26, 0x25dfdbfd, {{}, 0x0, 0x4, 0x0, {0xfffffffffffffd64, 0x11, 0x2}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40801}, 0x8000010) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r8, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) socket$inet(0x2, 0x4000000805, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) r10 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x305080) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x7) sendto$inet(0xffffffffffffffff, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r9, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000580)=ANY=[@ANYBLOB="f1893b22a5aa51154490dc869017f0920294598e9eabbc2d9d2939274be0c069e1dbc796211149059930dc88e2b40986716e2dbc21da85a17dea2ae7dc4b6ec9a4d0ca6dc1e188be025211211f015c35a5a52cdd8ced8a52447a130d74be5531ccce290feaeb4fff203a1141bd37c12a8b4d9a4137a5c04e280b404fb6ed732e4fddd48c7ec55820681a41225d0c6cbd4e887132669205850e962f05139a8164b86c1c50dbbffa4eb225081573a4923704f4002b4c025c9395a62c6c51e853da303f536c8115601111951dbcabfd6e4ff9df47df1d33c3606b98e98c946359f841308913646536606d921aafbeff018291e1cf7d27773acc8038a83dc2771bebac73961183d52a0cb3cc9030afb63ed720782ad10cbc4bc263b0751a5df5c68bd9f9ddde9dec467b0f4532e725a5fb3fc0b107aa360e0aadb51a", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x7a, &(0x7f000059aff8)={r11}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000000)={r11, @in6={{0xa, 0x4e23, 0x8, @rand_addr="0e2e02a8dab5e3b5097c1f974ed0f23a", 0x81}}, 0x5, 0xb74b, 0x6, 0x5, 0x4}, &(0x7f0000000140)=0x98) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000180)=r12, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 410.550979] loop1: rw=12288, want=8200, limit=20 [ 410.604496] attempt to access beyond end of device 23:12:10 executing program 2: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 23:12:10 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x1f}], 0x1, 0x0) [ 410.632903] loop1: rw=12288, want=12296, limit=20 [ 410.666006] attempt to access beyond end of device [ 410.690975] loop1: rw=12288, want=8200, limit=20 [ 410.713566] attempt to access beyond end of device [ 410.746419] loop1: rw=12288, want=12296, limit=20 23:12:10 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x0, 0x0}, 0x10) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x1f}], 0x1, 0x0) 23:12:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x100, 0x2}) 23:12:10 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x1f}], 0x1, 0x0) 23:12:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x9, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0xa00088, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x10001) 23:12:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r4, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000300)) connect$bt_rfcomm(r3, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r5, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/enforce\x00', 0x20000, 0x0) ioctl$NS_GET_USERNS(r6, 0xb701, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0206434, &(0x7f0000000040)={0x17f9e4d6, 0x0, 0x10000, 0x71}) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f0000000180)={0x934, r7, 0x10005, 0x6}) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x7) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004, 0x485}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:12:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@nl, &(0x7f0000000080)=0x80) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="02008600", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x7a, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000140)={r4, 0x5, 0x7fff, 0x6f48210c, 0x1, 0x8}, &(0x7f0000000180)=0x14) 23:12:10 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x1f}], 0x1, 0x0) 23:12:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000f6ff0f00010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014000300626f6e643000000000000000000000001c0012000c000100626f6e64000000000c0002000800030000000000"], 0x50}}, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) accept4$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r3, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'ip6_vti0\x00', r2}) [ 411.209455] attempt to access beyond end of device 23:12:10 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x0, 0x0}, 0x10) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x1f}], 0x1, 0x0) [ 411.277145] loop1: rw=12288, want=8200, limit=20 [ 411.324509] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pig=15942 comm=syz-executor.2 [ 411.328319] attempt to access beyond end of device [ 411.408227] attempt to access beyond end of device [ 411.454243] loop1: rw=12288, want=12296, limit=20 [ 411.459801] loop0: rw=12288, want=8200, limit=20 [ 411.505639] attempt to access beyond end of device 23:12:11 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000040)={0x2a, 0x29, 0x2, {0x3b5, [{{0x20, 0x4, 0x1}, 0xfc8a, 0x1, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x402, 0x0) write$binfmt_script(r1, &(0x7f0000000140)={'#! ', './file0', [{0x20, '/md5sum'}, {0x20, '/dev/autofs\x00'}], 0xa, "8b680517d76de446e3cd96580f7e7a2ee7cbcd6012f6953395d4938c5f73d3df6fbbf049109dd9ab0263689cb9dbf706c382e722b18bc0d882940e409bad176250145012cb0274b04b2cb9183670398c7d4a280578cef75dd26f2bc28a8a364959bcac2daa8c89c65fe4ba8419e0ec4a67b6238a230004228ebfadf26b5c27408b974ee709d7b9"}, 0xa7) 23:12:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0xfffffffffffffff8, 0x80000) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000180)=0x5, 0x2) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004, 0x485}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r4, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) wait4(0xffffffffffffffff, &(0x7f00000001c0), 0x1000000, &(0x7f0000000300)) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r4, 0xc0305302, &(0x7f0000000100)={0x5, 0x7, 0x9, 0x9, 0x4, 0x8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 411.535655] attempt to access beyond end of device [ 411.535997] loop0: rw=12288, want=12296, limit=20 [ 411.565071] loop1: rw=12288, want=8200, limit=20 23:12:11 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x0, 0x0}, 0x10) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x1f}], 0x1, 0x0) [ 411.593402] attempt to access beyond end of device [ 411.621018] loop1: rw=12288, want=12296, limit=20 23:12:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x40000, 0x0) read$rfkill(r0, &(0x7f00000000c0), 0x8) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x1, 0xaaaaaaaaaaaacef, &(0x7f0000000200)=[{&(0x7f0000000000)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x13ff}], 0x310002, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x19) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x4, 0x0, 0xba, 0x40, 0x0, 0x2302, 0x40, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x19, 0x2, @perf_bp={&(0x7f00000001c0)}, 0x1000, 0x5, 0xe7, 0x9, 0x7, 0x100, 0x6}, r1, 0x7, 0xffffffffffffffff, 0x2) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000000100)={0x2, 0xfff8, 0x8, 0x2, 0x5, 0x101}) [ 411.647770] attempt to access beyond end of device [ 411.684649] loop0: rw=12288, want=8200, limit=20 [ 411.716681] attempt to access beyond end of device [ 411.772088] loop0: rw=12288, want=12296, limit=20 23:12:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000000000003f000000030000000000000000c0340b4022e95b3f2fd26711fd8b2e000000ff03000000000000010000000000000001000080000000000000000007000000f20400000200000000000000000000000200000000000000010000000100000001000000000000000100000007000000"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004, 0x485}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r3, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) write$selinux_user(r3, &(0x7f0000000100)={'system_u:object_r:ssh_exec_t:s0', 0x20, 'unconfined_u\x00'}, 0x2d) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:12:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000380)={0x15, 0x110, 0xfa00, {r2, 0x2, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @remote}, @ib={0x1b, 0x1000, 0x5, {"388e7b409c696b4049f91be25d5e2bb0"}, 0x6, 0x2, 0x47}}}, 0x118) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 23:12:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x9, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0xa00088, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x10001) 23:12:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x1ff, &(0x7f0000ffc000/0x4000)=nil, 0xe22445765814640a) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 23:12:11 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x0, 0x0}, 0x10) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x1f}], 0x1, 0x0) 23:12:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000040)=""/53, &(0x7f0000000080)=0x35) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000618e985199cec8e74d5c6faab8ecdf4d3043c8963c6f3730e088e32e4159a83affc15ea50e067a11d0542cab5fd83f92d1846be7420b4f5a43973e25fac8793621852b07568d27986ded8dd6f2c456baf39dbbe1f1eb8418d422d50022d91c61467b1263ff8411e3377f453cf1c1633a010e53ea5f82ba9518d2dd7eb62f4dd76714a66ad01277bd25aa5d5b93d25019af62972e931c228acfeff51b36e5c5eeebc8e565b3", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000180)=0xc) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000001c0)={r2, 0x94}, &(0x7f0000000280)=0x8) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 412.181312] attempt to access beyond end of device 23:12:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000040)) prctl$PR_SET_UNALIGN(0x6, 0x2) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000080)='./file0/file0\x00', 0xe2, 0x0, &(0x7f0000000200), 0x0, 0x0) [ 412.228259] loop1: rw=12288, want=8200, limit=20 23:12:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 412.269749] attempt to access beyond end of device [ 412.329715] loop1: rw=12288, want=12296, limit=20 23:12:11 executing program 5: ioctl$USBDEVFS_DISCARDURB(0xffffffffffffffff, 0x550b, &(0x7f0000000180)=0xb1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f0000000140)=""/36) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x3, 0x8000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004, 0x485}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x121600, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) 23:12:11 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x0, 0x0}, 0x10) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x1f}], 0x1, 0x0) [ 412.403920] attempt to access beyond end of device [ 412.452947] attempt to access beyond end of device 23:12:12 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x0, 0x0}, 0x10) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x1f}], 0x1, 0x0) [ 412.506044] loop1: rw=12288, want=8200, limit=20 [ 412.518915] loop0: rw=12288, want=8200, limit=20 [ 412.528239] attempt to access beyond end of device [ 412.547600] attempt to access beyond end of device [ 412.558338] loop1: rw=12288, want=12296, limit=20 23:12:12 executing program 2: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x19) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1691, 0x3}}, r0, 0xc, 0xffffffffffffffff, 0x0) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000040)=0x31) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='\x00\x00\x00\x00\x00'}, 0x30) ptrace$getenv(0x4201, r1, 0x2, &(0x7f0000000080)) [ 412.579694] loop0: rw=12288, want=12296, limit=20 [ 412.648775] attempt to access beyond end of device 23:12:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x8568f25ef9e5a566, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004, 0x485}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:12:12 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x0, 0x0}, 0x10) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x1f}], 0x1, 0x0) [ 412.699900] loop0: rw=12288, want=8200, limit=20 [ 412.771074] attempt to access beyond end of device [ 412.776388] loop0: rw=12288, want=12296, limit=20 23:12:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x9, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0xa00088, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x10001) 23:12:12 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0xa, &(0x7f0000002680)=[{&(0x7f0000000140)="ce2d69f8753d097b26a9c70a4b109af3cbfa17bf666499be64622fcc69894e5cf9b6739134f2fc05611d899a7ab874349b88a3241d0541cf13493f56574d2140efa97fc94b69d83ce1f7300916d2aa62fcfe3a89a8ef716dc73f4446e5a2e7a20d2a634a44835f79f29d16749fcfe7bb29779865166e870aaf6b8e91647940920e7760832485fb94ba7816d22223523ecda864f2458d784db6b87dc253ebf036e1c000f86a7da8cfa2d638189512912b6a40", 0xb2, 0x9}, {&(0x7f0000000080)="aa43a7d7d75b877b0bca1696d98f89ed273b8bd6c7171a0fcf0cdc06e64eac364df953c9b22ebcfd29135dc90a4059c4ffa1ae9abf3f26bbfb9ca460e016a07b", 0x40, 0x45}, {&(0x7f0000000380)="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", 0x1000, 0x80000000}, {&(0x7f0000000280)="3bbc6db3ad1cfe2d826ee1d097af08", 0xf, 0x1000}, {&(0x7f00000002c0)="421b0072a73bac43a365021a3417af3c8a4ca9201dd1e2b473b9d2dd2a6c5872d1fde08b3dfa793c6f1d9a29615c50b7d8e59932e92b0f28360f116f2afea6a260ef9ff9d326fec8ffb0a2452274c856e3c1ac9011b5a577287f9d5c35dd57bee6a3c0", 0x63, 0x81}, {&(0x7f0000001380)="6c1ac88326281005c1b488113c7747113ae314161be3272d49bddcea09c4f0ff415a570819b41fd49317bdaa7ffc7b7b01438ddb7fb2b13677a9b34ad70339f81627369f397407e0f5a665665ecabfb984808cbe44db4503d479b0121a036ff613b8cfeb36cbbe5d8b7fc40d6582be72da85c7a231d148a02fc1cfc1cdcdb34505f3bca5f93b53cc64b630e503811220323d", 0x92, 0x1b77a4a8}, {&(0x7f0000001440)="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", 0x1000, 0x5}, {&(0x7f0000002440)="415aec6c7550bbadf56ac76f838051e605450304e95c5e74d195da24aa94c7410082452a437c0e11d6e003a18b36a6c553bf152250848f2c87d99d0c51a939bd2c05fbd4c43417d04f28291c4d2820df141da32f275f5f85a4f1ac5dd935d13f7e3e0aed721fc31a367eb22a62fa6e3897c09d10320f228b8e8f9970ce3892acc470bd9e21a8da3bd02a4c76481e847007a66dcb10f3b1d70ea459774a6dde27ce3d61d304a216b22fd107af9d5d54568d83d9d2511949c366cba13d4f38bffbb39470f74cddbe453c208b5c92659b7a07a8e75b82e5be906b4163735a0e9ffa38f9d8c7309664dd466c14303e", 0xed, 0x3}, {&(0x7f0000002540)="13790dc6c196f554859dde8f13c97865bff0ee7b922120e3ff56f33a65f740f8e519f0a496f1619648b05ec31cb358ba0a2352d89c3d744001382faf6ba8251372e2a9d35ed18b006e1f9f3370159fccd4f7af4cdf87d4e750f2813ddd7f022cd476404074c7b5f288a5d142aab67783813f1f62e65feb9e7b5d4c87b630d97404841bf628f791991783a4fc15d6f0c3896fb72c894eba8f95f1079b712cd608bacc3991203dc924d5f1a358fea0a3ec1d36e84857815c642d9fee727ba419f15cd5c1a6c13cac405398d8d741a5086473f93f4f2e032268e92bc8481a343f1defd43b0c33ba730d60906bdbe18decfffa5b17c47d", 0xf5, 0xfff}, {&(0x7f0000002640)="fd13734c08e3fc1f9f8cbdf998f144e907588677c7fe9fe20b44b444", 0x1c, 0x800}], 0x200040, &(0x7f0000002780)={[{@codepage={'codepage', 0x3d, 'macceltic'}}, {@session={'session', 0x3d, 0x8}}, {@file_umask={'file_umask', 0x3d, 0x4}}], [{@dont_appraise='dont_appraise'}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@pcr={'pcr', 0x3d, 0x2}}, {@dont_hash='dont_hash'}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fsname={'fsname', 0x3d, 'f2fs\x00'}}, {@obj_type={'obj_type', 0x3d, 'f2fs\x00'}}]}) 23:12:12 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x0, 0x0}, 0x10) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x1f}], 0x1, 0x0) 23:12:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x149a2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x6) 23:12:12 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x0, 0x0}, 0x10) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x1f}], 0x1, 0x0) 23:12:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0xfffffffffffffdc6, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004, 0x485}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x202000, 0x0) ioctl$KVM_SET_DEBUGREGS(r3, 0x4080aea2, &(0x7f0000000140)={[0xd000, 0x1d001, 0x0, 0x66769af2771678], 0x7, 0x8, 0x3}) [ 413.147493] attempt to access beyond end of device 23:12:12 executing program 2: syz_open_dev$usbfs(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x5e379a58bbf8122a, 0x2}], 0x0, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000080000000000a004e210000000000000000000000000000ffffe0000001050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000100000000000000000000000000000000001000000030000000a004e2000000006000000000000000000000000000000010500000000000000000000000000000000000000000000000000000000000000000000000000000000cddfc873f1a17c007900000000000000000000000000000000000000000000000000000000d34533770000000000000000000000000000000000000000000000000000000000000000000a0004a80000bd52ff010000000000000000000000000001030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a3f4e2200000000000000000000000000000000000000010800000000000000000000000000000000000000000000000000000400"/520], 0x210) [ 413.202274] loop1: rw=12288, want=8200, limit=20 [ 413.239315] attempt to access beyond end of device [ 413.271046] loop1: rw=12288, want=12296, limit=20 [ 413.324674] attempt to access beyond end of device [ 413.324912] attempt to access beyond end of device 23:12:12 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x0, 0x0}, 0x10) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x1f}], 0x1, 0x0) [ 413.371068] loop0: rw=12288, want=8200, limit=20 [ 413.411919] loop1: rw=12288, want=8200, limit=20 [ 413.417739] attempt to access beyond end of device [ 413.444174] attempt to access beyond end of device [ 413.452903] loop0: rw=12288, want=12296, limit=20 [ 413.467504] attempt to access beyond end of device [ 413.505514] loop0: rw=12288, want=8200, limit=20 23:12:13 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x0, 0x0}, 0x10) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x1f}], 0x1, 0x0) [ 413.527898] loop1: rw=12288, want=12296, limit=20 [ 413.542046] attempt to access beyond end of device [ 413.566261] loop0: rw=12288, want=12296, limit=20 23:12:13 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) prctl$PR_SET_FP_MODE(0x2d, 0x2) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2c0040, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000040)) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = msgget(0x2, 0x40) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000280)=""/143) readv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/142, 0x8e}], 0x1) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ubi_ctrl\x00', 0x200060, 0x0) fsync(r3) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000080)) r4 = fcntl$dupfd(r1, 0x406, r0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r5, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r6, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$PERF_EVENT_IOC_RESET(r6, 0x2403, 0x2) ioctl$sock_netdev_private(r4, 0x89f5, &(0x7f0000000080)="4b3bdc59c7ebe65ce14c97691023ab1d876f36f0f1e84176") 23:12:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x149a2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x6) 23:12:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x8002b013634b6793, 0x0) ioctl$TCSETXF(r2, 0x5434, &(0x7f0000000200)={0x2, 0x1ff, [0x5, 0x8, 0x0, 0x2], 0xfe01}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x7, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6, 0x0, 0xb, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x10000, 0x2000, &(0x7f0000025000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000ff], 0x1f004, 0x485}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r4, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) setsockopt$inet_buf(r4, 0x0, 0x2d, &(0x7f0000000100)="dcfe972fa720386c3f25c59290888a31858455999a4e40ea45e155a6b994413f62d90cef442f8a42641713e3d09f0e3a55e2bf707157b41366ccf9662ec0f87e25e585d461c38adc4d6d55678d96228bf1aad4ab81decba9723a7092cd5cb5280bc086a0df09cf0f582aac30e945381aeee5d0c70028d4112d97e52a820a0b6e83ae55c57c76e79b28d629d91ee292be5ab48a90e285a7498215b6c8e055e93bfff6c39dcb4c3ec5b63f4d5addc371897a3c4647bda22b2d662b64495ad20dcb81878e58a9622984ff8fadff77a49949f0b3a5ea0550e0dec2e90b9f9bb8bf9614b5d7a5f9a74e80d3c6cec8e91856f89a4d", 0xf2) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX=0x0], 0x12) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r5, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$TIOCGWINSZ(r5, 0x5413, &(0x7f0000000480)) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r6, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) ioctl$TIOCCONS(r6, 0x541d) r7 = gettid() ptrace$setopts(0x4206, r7, 0x0, 0x0) tkill(r7, 0x19) ptrace$cont(0x18, r7, 0x0, 0x0) ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r7, 0x0, 0x0) r8 = syz_open_procfs(r7, &(0x7f00000003c0)='net/xfrm_stat\x00') write$P9_RUNLINKAT(r8, &(0x7f0000000400)={0x7, 0x4d, 0x1}, 0x7) [ 413.872461] attempt to access beyond end of device [ 413.892486] loop0: rw=12288, want=8200, limit=20 [ 413.917868] attempt to access beyond end of device 23:12:13 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x0, 0x0}, 0x10) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x1f}], 0x1, 0x0) [ 413.978474] loop0: rw=12288, want=12296, limit=20 [ 414.017542] attempt to access beyond end of device [ 414.030890] attempt to access beyond end of device [ 414.068152] loop1: rw=12288, want=8200, limit=20 [ 414.070557] loop0: rw=12288, want=8200, limit=20 [ 414.092059] attempt to access beyond end of device [ 414.107139] attempt to access beyond end of device [ 414.120708] loop1: rw=12288, want=12296, limit=20 23:12:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80800, 0x0) connect$bt_rfcomm(r2, &(0x7f00000000c0)={0x1f, {0x5, 0x7f, 0x4, 0x9, 0x4}, 0x7}, 0xa) r3 = openat(r2, &(0x7f0000000100)='./file0\x00', 0x71592f9b7ddcd050, 0x10) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f0000000140)={{0x7f, 0x1}, {0x7, 0x2}, 0x8, 0x3, 0x6}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x4], 0x1f004, 0x485}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 414.149274] attempt to access beyond end of device [ 414.163703] loop0: rw=12288, want=12296, limit=20 [ 414.169175] loop1: rw=12288, want=8200, limit=20 [ 414.188420] attempt to access beyond end of device [ 414.209408] loop1: rw=12288, want=12296, limit=20 [ 414.254624] attempt to access beyond end of device [ 414.295139] loop0: rw=12288, want=8200, limit=20 [ 414.328491] attempt to access beyond end of device [ 414.360012] loop0: rw=12288, want=12296, limit=20 [ 414.395667] attempt to access beyond end of device [ 414.444074] loop0: rw=12288, want=8200, limit=20 [ 414.449472] attempt to access beyond end of device [ 414.455686] loop0: rw=12288, want=12296, limit=20 [ 571.353415] INFO: task syz-executor.3:16043 blocked for more than 140 seconds. [ 571.362045] Not tainted 4.14.155-syzkaller #0 [ 571.367096] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 571.375200] syz-executor.3 D28528 16043 7156 0x00000004 [ 571.381414] Call Trace: [ 571.384041] __schedule+0x7b8/0x1cd0 [ 571.387752] ? pci_mmcfg_check_reserved+0x150/0x150 [ 571.392917] schedule+0x92/0x1c0 [ 571.396455] schedule_timeout+0x93b/0xe10 [ 571.400875] ? wait_for_completion+0x274/0x420 [ 571.405487] ? find_held_lock+0x35/0x130 [ 571.409830] ? usleep_range+0x130/0x130 [ 571.413920] ? wait_for_completion+0x274/0x420 [ 571.418527] ? _raw_spin_unlock_irq+0x28/0x90 [ 571.423253] ? trace_hardirqs_on_caller+0x400/0x590 [ 571.428317] wait_for_completion+0x27c/0x420 [ 571.433127] ? try_to_wake_up+0xa8/0xf90 [ 571.437337] ? wait_for_completion_interruptible+0x490/0x490 [ 571.443754] ? wake_up_q+0xf0/0xf0 [ 571.447469] kthread_stop+0xda/0x650 [ 571.451451] vivid_stop_generating_vid_cap+0x1b9/0x664 [ 571.456840] vid_cap_stop_streaming+0x7c/0xd0 [ 571.461420] ? vid_cap_buf_queue+0x230/0x230 [ 571.465999] __vb2_queue_cancel+0xa3/0x890 [ 571.470400] ? lock_downgrade+0x740/0x740 [ 571.474618] vb2_core_streamoff+0x52/0x110 [ 571.478867] __vb2_cleanup_fileio+0x78/0x150 [ 571.483380] vb2_core_queue_release+0x1d/0x80 [ 571.487922] _vb2_fop_release+0x1cf/0x2a0 [ 571.492184] vb2_fop_release+0x75/0xc0 [ 571.496096] vivid_fop_release+0x180/0x3f0 [ 571.500412] ? vivid_remove+0x3d0/0x3d0 [ 571.504398] ? dev_debug_store+0xe0/0xe0 [ 571.508555] v4l2_release+0xf9/0x190 [ 571.512607] __fput+0x275/0x7a0 [ 571.515913] ____fput+0x16/0x20 [ 571.519195] task_work_run+0x114/0x190 [ 571.523245] exit_to_usermode_loop+0x1da/0x220 [ 571.527890] do_syscall_64+0x4bc/0x640 [ 571.531903] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 571.536818] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 571.542113] RIP: 0033:0x4141d1 [ 571.545307] RSP: 002b:00007ffd93331520 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 571.553120] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00000000004141d1 [ 571.560503] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 571.567803] RBP: 0000000000000001 R08: ffffffff812af34e R09: 00000000e1ded0b8 [ 571.575696] R10: 00007ffd93331600 R11: 0000000000000293 R12: 000000000075bf20 [ 571.583053] R13: 0000000000064d41 R14: 0000000000760ae0 R15: 000000000075bf2c [ 571.590573] ? __virt_addr_valid+0x8e/0x1f0 [ 571.594941] [ 571.594941] Showing all locks held in the system: [ 571.601354] 1 lock held by khungtaskd/1018: [ 571.606101] #0: (tasklist_lock){.+.+}, at: [] debug_show_all_locks+0x7f/0x21f [ 571.615341] 2 locks held by getty/7107: [ 571.619325] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 571.628318] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 571.638068] 2 locks held by getty/7108: [ 571.642109] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 571.650893] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 571.660293] 2 locks held by getty/7109: [ 571.664307] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 571.673254] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 571.683332] 2 locks held by getty/7110: [ 571.687395] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 571.696274] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 571.705687] 2 locks held by getty/7111: [ 571.709671] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 571.718514] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 571.728040] 2 locks held by getty/7112: [ 571.732144] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 571.741146] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 571.750845] 2 locks held by getty/7113: [ 571.755025] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 571.764178] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 571.773716] [ 571.775487] ============================================= [ 571.775487] [ 571.783440] NMI backtrace for cpu 1 [ 571.787232] CPU: 1 PID: 1018 Comm: khungtaskd Not tainted 4.14.155-syzkaller #0 [ 571.794680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 571.804206] Call Trace: [ 571.806813] dump_stack+0x142/0x197 [ 571.810442] nmi_cpu_backtrace.cold+0x57/0x94 [ 571.815052] ? irq_force_complete_move.cold+0x7d/0x7d [ 571.820264] nmi_trigger_cpumask_backtrace+0x141/0x189 [ 571.825606] arch_trigger_cpumask_backtrace+0x14/0x20 [ 571.830871] watchdog+0x5e7/0xb90 [ 571.834454] kthread+0x319/0x430 [ 571.838008] ? hungtask_pm_notify+0x50/0x50 [ 571.842322] ? kthread_create_on_node+0xd0/0xd0 [ 571.847013] ret_from_fork+0x24/0x30 [ 571.851015] Sending NMI from CPU 1 to CPUs 0: [ 571.855849] NMI backtrace for cpu 0 skipped: idling at pc 0xffffffff861cf9be [ 571.856758] Kernel panic - not syncing: hung_task: blocked tasks [ 571.869407] CPU: 1 PID: 1018 Comm: khungtaskd Not tainted 4.14.155-syzkaller #0 [ 571.876961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 571.886403] Call Trace: [ 571.888992] dump_stack+0x142/0x197 [ 571.892823] panic+0x1f9/0x42d [ 571.896066] ? add_taint.cold+0x16/0x16 [ 571.900061] ? irq_force_complete_move.cold+0x7d/0x7d [ 571.905332] watchdog+0x5f8/0xb90 [ 571.908807] kthread+0x319/0x430 [ 571.912204] ? hungtask_pm_notify+0x50/0x50 [ 571.916551] ? kthread_create_on_node+0xd0/0xd0 [ 571.921235] ret_from_fork+0x24/0x30 [ 571.927567] Kernel Offset: disabled [ 571.931271] Rebooting in 86400 seconds..