istxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) 19:09:35 executing program 6: r0 = socket(0x10, 0x2, 0x100000000000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(r1, r1) pause() setpriority(0x1, 0x0, 0x0) ioctl$FICLONE(r0, 0x40049409, r0) 19:09:35 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB='trusted.ppp1/\r/vmnet0\x00']) 19:09:35 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280)=0x38, 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x8, 0x3ff, 0x1, 0x170, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x80000001, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:09:35 executing program 5: r0 = dup(0xffffffffffffff9c) r1 = getuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000300)={0xa0, 0x0, 0x3, {{0x3, 0x0, 0xd51, 0x9, 0x100000001, 0x9e70, {0x8, 0x100, 0x176d54f, 0x4db, 0x8000, 0x7ff, 0x3f, 0x9, 0x7f, 0x4, 0x5, r1, r2, 0x8000, 0x4}}, {0x0, 0x1}}}, 0xa0) write$P9_RFSYNC(r0, &(0x7f0000000100)={0x7, 0x33, 0x1}, 0x7) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x4, 0x1, 0x82, &(0x7f0000000180)="bac3deb08158aa8dd9fbf930d9fae5680a4d8f2f5f0516a886fb7a8d87714a51e772777082e62c95a39ef1f6641592d6a30111be3ffd84fcd768e1900fbda5cf2f9effe903deb4380dabe17c055e52cf00cd7bc4611148ff13ebb5fe64a15470482a17a7e065d163ddd5e371d2635ce99ba11055a2eca36b300dec318ff5572422a5"}) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x1ffe, 0x0) ioctl(r3, 0xc0084904, &(0x7f0000000000)) ioctl(r3, 0x2, &(0x7f0000000000)="fb8fb5c12b77a5ce3cc7502c3d56dc854baac92e7ecbf65d62d454f7c851f9b1ae16cebf8b07ee04eb2fd32ea571803f29fb48f1e040f588e6078f329062186ed7ab88836be3f2e6fceed5a918616cd9285841d776aa84ae99390ed5f5def98627ba774f37a2a921758f9bd035905c629a16c3318f910cbde255bb979a34fe51d7cbd28a3abb9645fa66641a9304faef16138bf2dc3fd43b99cc9ff3615f0fb6360e999c60a9f03a28c27433626af600d63f18b539f93599e8c29f1573b6f3f9c3164dd97ae9678014f3f3e2e1ccecbc4f78d46cbe1a2a3d20d242ede235d160e1c33c10e3f4") 19:09:35 executing program 4: ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000380)=""/246) r0 = open(&(0x7f0000000080)='./file0\x00', 0x20000, 0x141) write$P9_RSTATFS(r0, &(0x7f0000000180)={0x43, 0x9, 0x2, {0x6, 0x5, 0x1, 0x1ff, 0x5, 0x4, 0x3, 0x2, 0x1}}, 0x43) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000100), &(0x7f0000000200)=0x4) finit_module(0xffffffffffffffff, &(0x7f0000000040)='/dev/ppp\x00', 0x3) write$P9_RAUTH(r0, &(0x7f0000000280)={0xfffffedf, 0x67, 0x2, {0x1a, 0x400000000000001, 0x2}}, 0xd) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x2, 0x0) ioctl$KDDELIO(r1, 0x4b35, 0x80) [ 340.990705] 9pnet: Insufficient options for proto=fd 19:09:35 executing program 2: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x3, 0x86, 0x2}) modify_ldt$write(0x1, &(0x7f0000000340)={0x1f, 0x20000800, 0x6000, 0x0, 0x0, 0x5d0733b2, 0xffffffff, 0x1}, 0x10) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000580)) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) syncfs(0xffffffffffffffff) flistxattr(0xffffffffffffffff, &(0x7f0000000800)=""/132, 0x84) 19:09:35 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280)=0x38, 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x8, 0x3ff, 0x1, 0x170, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x80000001, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:09:35 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) getgid() 19:09:35 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) flistxattr(r0, &(0x7f0000000180)=""/190, 0xbe) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) 19:09:35 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/rfkill\x00', 0x10001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x9) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) renameat2(r1, &(0x7f0000000400)='./file0\x00', r1, &(0x7f0000000440)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000fa2ebda44b42a45ee85803c8a02a02001900000626bd700000000000209d91310f"], 0x1}}, 0x0) mkdir(&(0x7f00000002c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, &(0x7f0000000680)={0xa, 0x4e22, 0x67, @dev}, 0x1c) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000240)={0x401, 0x7, 0x3}) rename(&(0x7f00000001c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000040)='./file0\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000340)={0xb559, 0xff, 0x2719, 'queue0\x00', 0x7b9afcba}) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000005c0)={0x6, {{0x2, 0x4e23, @local}}}, 0x88) r3 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x0, @rand_addr=0x81, 0x4e23, 0x2, 'ovf\x00', 0x0, 0x0, 0x6b}, 0x2c) dup2(r3, r2) 19:09:35 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) 19:09:35 executing program 0: r0 = socket$inet6(0xa, 0x21000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) bind$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000180)={0xd57, 0x0, 'client0\x00', 0xffffffff80000000, "475e56279f1dc19d", "cba39de7f4b33a041396866e4349ffd7cd74226fcfae6e7937c61aa995753f05", 0x8, 0x101}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x100) flistxattr(r0, &(0x7f0000000000)=""/124, 0x7c) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000240)=0x0) ptrace(0x10, r3) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000140)) signalfd4(r1, &(0x7f0000000340)={0x2000000000000009}, 0x8, 0x80000) write$P9_RWRITE(r1, &(0x7f0000000300)={0xb, 0x77, 0x2, 0x8000}, 0xb) openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x100, 0x0) 19:09:35 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) fchmod(r0, 0x35) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) 19:09:35 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280)=0x38, 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x8, 0x3ff, 0x1, 0x170, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x80000001, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:09:35 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) 19:09:35 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) sendmsg$unix(r0, &(0x7f00000004c0)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000200)="690b887df66c1ce7f798cb69407971349c70b0a78f39c2da5bda69b520f16c917f325bf6f45746056afdce19a4c1373daef8613b9e0a06f8da905266c79c4137d50e0f81f245994edf939b01bd7565d63e3c62b06ea5905ef77082446f6f651332ff4e9dc4dd70a58dedff47cd38fd94a20cc9e9074e16882ff307519c1f", 0x7e}, {&(0x7f0000000280)="caa4f5344ad1b6cb0a53b6a1c8a90dcdddb8937f961261cb5684f99f51c6a07f0846a223ed8d34c7e5f9f5a77f53204272e32c7294c4940196870e8f58908a5968da16c25f5e4994d6a84a941ff42916ec678dbb15da809823b19c5306afcbee71816e292e44e2f6ebf0467d39935c36865b8396413137f0e916b14c8fd147332dac6fb031e770f65861d62d6432f66033749858ccd6198ea72c4ae2e2c459a61484", 0xa2}, {&(0x7f0000000000)="bdeb", 0x2}, {&(0x7f0000000080)="ba537246958f11bd2ee3147d2cb3ac6648d4c90636", 0x15}, {&(0x7f0000000340)="4254d30aeef34aafe524fd153ea5df90014a9bd919b8546af1aa6d5170504a776193d4ea057d3f95813d5e6c026db49554a556324a40ae810320c44bb304e7b873ebd20012037f647815e0f7f4b0a6bf9eeea3b1ea88c60e9ae17ce7d4e28d6ca6fca6e80280de4893965420a5a827b74dcdf69b211e2e06fa3763e7888bd1572fa2694a5dbb93785bf7937e223d280a2216146e6e6cb7767099a4d43db7b904adb337dd6dc6b317c9b3a98ddb26744de646f4de6aefa97fd9e7159bba2ca1d521cf2eb909d622799525839908ae8f2280032cb6f8", 0xd5}, {&(0x7f0000000100)="66ca7cf2a9e89cab0614c4", 0xb}], 0x6, 0x0, 0x0, 0x4040000}, 0x84) [ 341.265520] 9pnet: Insufficient options for proto=fd [ 341.416125] 9pnet: Insufficient options for proto=fd 19:09:36 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280)=0x38, 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x8, 0x3ff, 0x1, 0x170, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x80000001, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:09:36 executing program 6: sched_setaffinity(0x0, 0x3bd, &(0x7f00000004c0)) r0 = perf_event_open(&(0x7f0000001580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8000000000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x8000, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000180), &(0x7f0000000340)=0x40) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f00000001c0)={0x0, 0xffff}) r2 = perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f2000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x0) add_key(&(0x7f0000000200)='ceph\x00', &(0x7f0000000240), 0x0, 0x0, 0xfffffffffffffffa) request_key(&(0x7f0000000280)='id_legacy\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000300)='user\x00', 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000400), &(0x7f0000000500)=""/4096, 0x1000, &(0x7f0000000480)={&(0x7f0000000440)={'xcbc(serpent)\x00'}}) r3 = getpid() perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0xfffffffffffffff9, 0x200, 0x0, 0x80000000, 0x0, 0x3, 0xd800c, 0x3, 0x2, 0x2, 0x0, 0x7, 0xffffffffffff0000, 0x7fff, 0x0, 0x7, 0x0, 0xf3ec, 0x0, 0x9, 0x81, 0x7, 0x5, 0x0, 0x2, 0x7, 0x0, 0x81, 0x0, 0x480000000000000, 0x0, 0x3, 0xd74, 0x1ff, 0x0, 0x9, 0x0, 0x800, 0x1, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x9, 0x81, 0x0, 0xffff, 0x1, 0xfff}, r3, 0x0, r0, 0x0) mprotect(&(0x7f000070a000/0x3000)=nil, 0x3000, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000), 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x2, 0x3, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x20) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) mprotect(&(0x7f000070b000/0x3000)=nil, 0x3000, 0x2) socket$packet(0x11, 0x0, 0x300) socket$inet_udp(0x2, 0x2, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) write(r4, &(0x7f0000000140)="3b8736d38c7c2c51ec576085f398d646c87890cd11925c3f5cc284f1bdc9c34063485a3980fbd65f5100000000000000", 0x30) 19:09:36 executing program 0: sched_setparam(0x0, &(0x7f0000000180)=0x8) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000100) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000000c0)=0x3) r2 = socket$inet6(0xa, 0x80005, 0x3c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r2, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x240, &(0x7f00000011c0)}}], 0x249, 0x0) mremap(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil) ioctl$TIOCNOTTY(r0, 0x5422) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@dev, @in=@rand_addr}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xe8) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) syz_open_pts(0xffffffffffffffff, 0x400) fchown(0xffffffffffffffff, 0x0, 0x0) memfd_create(&(0x7f0000000040)="0009e0ffffffffffffff05000000000400000000", 0x0) mmap$binder(&(0x7f000000b000/0x200000)=nil, 0x200000, 0x2000001, 0x10030, 0xffffffffffffffff, 0x0) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000680)) 19:09:36 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x80000, 0x0) sendfile(r1, r0, 0x0, 0xfff) 19:09:36 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@access_uid={'access'}}]}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) 19:09:36 executing program 2: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x3, 0x86, 0x2}) modify_ldt$write(0x1, &(0x7f0000000340)={0x1f, 0x20000800, 0x6000, 0x0, 0x0, 0x5d0733b2, 0xffffffff, 0x1}, 0x10) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000580)) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) syncfs(0xffffffffffffffff) flistxattr(0xffffffffffffffff, &(0x7f0000000800)=""/132, 0x84) 19:09:36 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000000)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') r1 = gettid() syz_open_procfs(r1, &(0x7f0000000100)="6e65742f3458a913aa") 19:09:36 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000000000000000000800450100eb249b25fb62bd58d57d8a073c000000000004907800000000ffffffff0000000000289078"], &(0x7f0000000380)) 19:09:36 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280)=0x38, 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x8, 0x3ff, 0x1, 0x170, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x80000001, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:09:36 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) 19:09:36 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x3, 0x86, 0x2}) modify_ldt$write(0x1, &(0x7f0000000340)={0x1f, 0x20000800, 0x6000, 0x0, 0x0, 0x5d0733b2, 0xffffffff, 0x1}, 0x10) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000580)) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) syncfs(0xffffffffffffffff) flistxattr(0xffffffffffffffff, &(0x7f0000000800)=""/132, 0x84) 19:09:36 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@access_uid={'access'}}]}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) [ 341.785131] 9pnet: Insufficient options for proto=fd 19:09:36 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280)=0x38, 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x8, 0x3ff, 0x1, 0x170, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x80000001, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:09:36 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000600)=0x8, 0x4) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x200000004e23, @multicast1}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000700)={@mcast2, 0x3, 0x40003, 0x3, 0x2, 0x2, 0x2, 0x40}, 0x20) r2 = accept(r1, &(0x7f0000000680)=@generic, &(0x7f0000000900)=0xffffffffffffff90) r3 = open(&(0x7f00000008c0)='./file0\x00', 0x1, 0x58) ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000007c0)) sendto$inet(r1, &(0x7f0000a88f88), 0x332, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000740)) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x5084f74d, {0x2, 0x4e22, @rand_addr}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x2, 0x4e21, @broadcast}, 0x0, 0x6, 0x0, 0x40, 0x0, 0x0, 0xcf39, 0x80000001, 0x4}) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000180)=""/193, &(0x7f0000000280)=0xc1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000880)={0xffff, 0x100000000, 0x7e, 0xc60, 0x9, 0x5}) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) syz_open_pts(r4, 0x2000) r6 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000480)="7daa82ba42b49fe0f8dace1e99a63e7330199736360e2d39fb356928ca980ede1713bb42469a3e3c01364a6c24397a393897627952cd", 0x36, 0xffffffffffffffff) r7 = add_key(&(0x7f00000004c0)='asymmetric\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000540)="8e8043e6c81d81d58d21133ece0fc1fc3e0b551f8d0fd4b577b01c2a52be54b79cf4ef85a2c3821c9b5dc3441b3ca53516815f1c9d9e8a31de3f0c15e85f511f8de4c4356e53d5348de2cd27292b0fb39395", 0x52, 0xfffffffffffffffd) keyctl$unlink(0x9, r6, r7) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000940)='/dev/ashmem\x00', 0x80000, 0x0) fcntl$dupfd(r1, 0x406, r2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) ioctl$RTC_EPOCH_READ(r4, 0x8008700d, &(0x7f0000000780)) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000840)={0x6, &(0x7f0000000800)=[{0xef4b, 0x8}, {0x5, 0x4000000000}, {0x7c, 0x2}, {0xffffffff, 0x8}, {0x0, 0x947d}, {0x675, 0x80000000}]}) geteuid() ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000980)=@generic={0xd4, 0xd9, 0x2d}) getuid() getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev, @in6=@dev}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f00000003c0)=0x314) 19:09:36 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101007, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000180)=""/77) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000000)={0x40000001}) fcntl$addseals(r0, 0x409, 0x2) 19:09:36 executing program 6: r0 = open(&(0x7f0000000180)='./file1\x00', 0x20000, 0x81) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) write$sndseq(r0, &(0x7f0000000380)=[{0x3, 0x1, 0x100000000, 0x6, @time, {0x1f63dd69, 0x1}, {0xffffffffffffff40, 0x6}, @time=@time={0x0, 0x989680}}, {0x1, 0x3, 0x80000000, 0x8, @tick=0xc2, {0x5, 0x6}, {0x2, 0x3f}, @ext={0x37, &(0x7f00000002c0)="b347d8bf6dc6efa5e2b60b1f620ce933decdf9fc4fd5ffb3062f62cdbaf33b578e57a7204c4ab3408438489ed121aa437f5670942975b7"}}, {0x0, 0x2, 0x9, 0x4, @time={0x77359400}, {0x8, 0x1}, {0x10000, 0x6}, @raw8={"6823fb0786525745829d9808"}}, {0x10001, 0x2, 0x401, 0xffffffffffffffff, @tick=0x2, {0x1, 0x8}, {0x7}, @time=@time={0x77359400}}, {0x3f, 0x8, 0x0, 0x80000001, @tick=0xffff, {0x20, 0x8}, {0x4, 0x3}, @quote={{0x1f, 0x2}, 0x8, &(0x7f0000000300)={0x80, 0xc0, 0xffff, 0x3, @tick=0x6, {0x4, 0x70000}, {0x400, 0xf94b}, @connect={{0x100000000, 0x9}, {0x7, 0x100}}}}}, {0x0, 0x0, 0x101, 0x3, @time={r1, r2+10000000}, {0x2, 0x1f}, {0x8, 0x78c3}, @note={0x5, 0x3, 0xfff, 0xfffffffffffffffb, 0x4}}, {0x9, 0x2, 0x81, 0x100000000, @tick=0x89, {0xfff, 0x972}, {0x0, 0xfffffffffffffff9}, @time=@tick=0x100000000}], 0x150) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r3 = socket$l2tp(0x18, 0x1, 0x1) read(r3, &(0x7f0000000140)=""/11, 0xb) epoll_create1(0xfff7fffffffffffb) creat(&(0x7f0000000700)='./bus\x00', 0x0) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB="2c726f6f746d6f6a653d30303030303030303030300000000000000003266d40b92c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r5, &(0x7f0000001480), 0x1213) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000280)) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xd43f58e118afee75}, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket(0x18, 0x0, 0x1) connect(r3, &(0x7f0000000200)=@rc={0x1f, {0x400, 0x8, 0x40, 0x8000, 0x9, 0xb09}, 0x401}, 0x19c) pipe(&(0x7f00000000c0)) open(&(0x7f0000000100)='./file0\x00', 0x109400, 0x84) socket$packet(0x11, 0x2, 0x300) sendmmsg(r7, &(0x7f00000002c0), 0x4000000000000f4, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./bus\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000200)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mlockall(0x2) ftruncate(r8, 0x8200) open(&(0x7f000000fffa)='./bus\x00', 0x402, 0x0) 19:09:36 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) getpeername$netlink(r0, &(0x7f0000000000), &(0x7f0000000080)=0xc) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) pwritev(r1, &(0x7f00000002c0)=[{&(0x7f0000000140)="5251abd21ba84efee41a42e6cbd5c60c48b93f238381c450469de6c487e26647b77480277f6e4dad49dea1c7f3552de817cbf7247164d3dcbc1b0d4ce44805fba14ecd6a24101d3413f19939e88a5a19ef155668a03d73c787c9dcc6c1f37c52021a79d3b8408e42abe4ea70", 0x6c}, {&(0x7f00000001c0)="c54a6d3d7a1910154f986280c47ac4741d5bba638d97e52aa247c2456abe63dff3a14a79ceeb23021c8a79c0077616916ea62ae4a7a063e38ed558b95543679397084738659f55d444ceeda91c059775f89b7e78da4feefdc1c9f514044a7e7939773b01e9ccf09b3c1ea5ec9e21f3282f8717def89a13be5b7eeeceefc1a8f77fce64d5973d92799d701b0744aa63e0407e67d40e8192f45833eaaf9c79fc50cc3c7f56d10f4a308945f294c10185b97977f7d07f4dbd65feab25282a526b83884f493852c8bb16c36e52f2065914c14cc80a36f9fe1ea8c8ba6548ec647b87b150595ce146c51ba39b57501aa35bff9ec9885ccdcdd8", 0xf7}], 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x1, 0x4) pwritev(r0, &(0x7f00000000c0), 0x0, 0x0) fcntl$getown(r1, 0x9) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000100)={'syzkaller1\x00', {0x2, 0x4e24}}) 19:09:36 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x101004, 0x0) write$cgroup_int(r0, &(0x7f0000000100)=0xf9, 0x12) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000004c0)=@req3={0x0, 0x2, 0x9, 0x101, 0x8, 0x8, 0x4}, 0x1c) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) accept4$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10, 0x80000) syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000240)='./file0\x00', 0x80000000, 0x4, &(0x7f0000000400)=[{&(0x7f0000000280)="d85832a5db4f81b6af13442a56eda534c147d830b9fe997583453d7125c55a444e17b1768c6b9fdff23f3fa6ab7994381f8db306a5501fea7782a469d82279a561ead12d3f227c3d8c3c47503823d8b6db7f6a93489d12e75c118919c4680300267035c2f94eb7af67def7f13d218d3456ca1da334c3e934", 0x78, 0x8}, {&(0x7f0000000300)="392f3fe616d015a77903c5c0f550c8864362", 0x12, 0x7f}, {&(0x7f0000000340)="a1aa599a0e6240e703e9c4584a85674556de233d6aad85d0e50dd62a45", 0x1d, 0x1}, {&(0x7f0000000380)="0c04c2a8f0483c4674f270b2dbd336c55f273a265a23e8d9fccef2c9d0586058f248b87a8a641af1c338ea98b4b89d7dcfc3ebdef820ec8065b88d84bfbfb8724b93040d37df6a1e5f17bc80aedce2cb8dbaa70943a697fa134e18a79fedbfaaf1ba059b28fa3a4796a4070b81fd53d97415c5cefd7afd", 0x77, 0x1}], 0x81900a, &(0x7f0000000480)={[{@disable_ext_identify='disable_ext_identify'}, {@inline_dentry='inline_dentry'}]}) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/relabel\x00', 0x2, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/keychord\x00', 0x200, 0x0) 19:09:36 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280)=0x38, 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x8, 0x3ff, 0x1, 0x170, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x80000001, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) [ 341.961487] IPVS: length: 193 != 8 19:09:36 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@access_uid={'access'}}]}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) [ 341.966979] 9pnet: Insufficient options for proto=fd 19:09:36 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000300)=0x1c, 0x80800) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x500, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x0, &(0x7f0000000480)={0x5, {{0x2, 0x4e20, @remote}}, {{0x2, 0x10000000004e23, @loopback}}}, 0x108) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x7, 0x5, 0x7}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f00000002c0)={0x1, 0x4a, &(0x7f0000000340)="1df046b6426f1dc7f03312a2807868d0403cd6f4d821ce230da7e00b16c0eb67747ead2b9eea909a286200ef896e4ac9b5e9f4bedc3dec6b997acd652cbcf71b36b2dfbfbfeb78455830"}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f0000000080)) pwritev(r3, &(0x7f0000000280)=[{&(0x7f0000000200)="f2f3a84f78d9eacade163de8cc45fdcb0a41634d59eea282b36caced17e47e944271dc23f9d20ae093228888bb1065d01acba032dfd31674a6c8e81ad89e5d321db38f876927a766c7b7b686e95b109a7502ddeec7967368d4bad7156435b3b85dc7ba04dfd24327b78613a076f24a0a62338730", 0x74}], 0x1000000000000175, 0x0) memfd_create(&(0x7f0000000100)='/dev/ppp\x00', 0x1) [ 342.034926] IPVS: length: 193 != 8 19:09:36 executing program 2: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x3, 0x86, 0x2}) modify_ldt$write(0x1, &(0x7f0000000340)={0x1f, 0x20000800, 0x6000, 0x0, 0x0, 0x5d0733b2, 0xffffffff, 0x1}, 0x10) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000580)) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) syncfs(0xffffffffffffffff) flistxattr(0xffffffffffffffff, &(0x7f0000000800)=""/132, 0x84) 19:09:36 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) fcntl$setsig(r0, 0xa, 0x2f) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) 19:09:36 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000040), &(0x7f0000000100)=0x4) 19:09:36 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280)=0x38, 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x8, 0x3ff, 0x1, 0x170, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x80000001, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:09:36 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) ioctl$FICLONE(r0, 0x40049409, r0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) read(r0, &(0x7f00000003c0)=""/129, 0xffffffffffffffad) [ 342.166920] 9pnet: Insufficient options for proto=fd 19:09:37 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x3, 0x86, 0x2}) modify_ldt$write(0x1, &(0x7f0000000340)={0x1f, 0x20000800, 0x6000, 0x0, 0x0, 0x5d0733b2, 0xffffffff, 0x1}, 0x10) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000580)) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) syncfs(0xffffffffffffffff) flistxattr(0xffffffffffffffff, &(0x7f0000000800)=""/132, 0x84) 19:09:37 executing program 5: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000018000143257229284288b167372367370000000000000000"], 0x1c}}, 0x0) 19:09:37 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) 19:09:37 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x101005, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000180)=0xc) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000240)={'icmp\x00'}, &(0x7f0000000280)=0x1e) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f00000001c0)=""/7) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0xfff, 0xc10, 0x0, 0x5, 0x0, 0xad4a, 0x60000, 0x2, 0x1ff, 0x4, 0x1f6, 0x69c, 0x6, 0x631, 0x4, 0x7, 0xe2, 0xdad0, 0x7e66, 0x4, 0x3, 0x14, 0x0, 0x10000, 0xd2ee, 0x8, 0x3f, 0xa, 0x4, 0x80000000, 0x40, 0xfffffffffffffffc, 0x101, 0x0, 0x8000, 0x4, 0x0, 0x4, 0x1, @perf_config_ext={0x400, 0x40}, 0x1200, 0x9172, 0x1, 0x7, 0x3ff, 0xfffffffffffffffd, 0x3}, r1, 0x2, r0, 0x8) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/load\x00', 0x2, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) 19:09:37 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='security.capability\x00') 19:09:37 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280)=0x38, 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x8, 0x3ff, 0x1, 0x170, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x80000001, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:09:37 executing program 6: r0 = socket$inet6(0xa, 0x2, 0xf761) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000d01000)=0x7ff, 0x4) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000000080)=0x1, 0xb95bcf97507aad14) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="5780d01c", 0x4) sendto$inet6(r0, &(0x7f0000adb000)="51e251578851f74182a74b89b27df427aeef44966d202e4138b5a18e75a0424e7fe93b0d32c7abba87b65f97aba1c26a06b6d94c4aefd8fdca10e744391062c8e602721c20051608d9aa6dacf61e1eb331a4daad402b9885599d56130f7149fb1111fa116e94324d585a0569fbd311dad54cb4e32ff7f02216844ef42eeb66c3d526c878d5135ad1c9262239339c18885e2a0a95854d6cde3dd2feeaa50216af6c5760923413af81199a65a6332b02ec7bbf79d557c033cbe032fdc44f66a5c59cc4a3c5d218f5896b359d1efd60baf98df6396567478f7b817ce6e11d59a7def452a0e1d0607f57f626a5b8d476636ef1ee76307524cf9ae49be4db0ab2c8ea0c5ebd1e80fed632155e14da1f7324d97bc61a3c1edc4431ee8a6caa2ed9f85cea5a2a9b263630c7d6fc35dda6002da571a2e51917e7c1019d8ce21a608147e408cc4c7c5f444fab931bda86d977d7c9ccefd881e5ef05b287f41eea526862885881c2cdc687dff02ba9b70a9b08734ac4d62c7f34465c34aa9e9f136c7f796d9eea41aa37f61830508338bb1f887089070567a1dd96cd700e7a098dabedb60f31acd17d487bc8be1a3101d2b5ac1715003793596c6daa93a27f4adb4d6fbea5669c24c206c944317ea18a2c762457f1bc945fec8f849641d44e7e2a24faeee28f3f266395fe18b0dce20c1f64e8896c8ff0e4a44a116fb32462471a0fcde143e551723d57339722765673b4163d66f473ac10f988cb25c89074fcb1bba20c41bddd9ca5cd2f106632f9884a47866d284b4efc6bb1aa74ed48d4a6535795f0873a99907ebc22be2337364cf9acc063e32f7d2ebdfad64d04aa405d2dbdee1128ab1e4761d2dd30885ad37dd168478f10789d172feef4c817a5cd372caade57f23300e45f47e001e3ea09364ab42ee9802477368b9910f4e24037c871cb8251568c792287a6f49fa61b7c2600accaa0e7b40c5912a9e100225c70441144ffa82927fa4802ed9ebb03eea8e945af5f4993f21a7f53baf7ec5bb6cc96b917dde82c18840c3500e9565f68f687b1c73d834c0d99d4acb002dc5682dbcdb1217a98f6c3ef8300b7fa93894e8a097b4511ba5c035e27c9fe8bfe7754741ac21bbc0303b81672e3117e5590fe2d92f912759b9937f64204ec5caa92e218daa5a3ef64617beb30cccb31016b13ed8d7bcabb03e176b1c906a38cbda3bf1c1256ab74ab6f42ed9bafbbd0096263be1a7da1e1c88deec55a653d170e1e13c77dacaa60a37a6ba2383e661ebc9f13dbaade2dd884c9951819fb4608e19e70cd240200fb12f24c71f496cfe9bc88fe1bbea1e9a24b1d4664fb0776aca6269b396779680e52f86877d9209988d12ccb137be01ab7496d00547a7d4849d365a18dbb55c429cde87d33c4b74ad2273cdfee88b5418866ef327f25e9cbcd5a64d97184339f7e4cb5f8de171d2779c0f68884ae835e398f982d5749f085628d3608986656ea04b721f828202e9342bd7d19dfa091e772aebf9718030167a8c029df7c58b7f400582bd95e5ad802050d8775ef373e8e2c5bf3525f907add3be426cd5a079c49abffe933e9ee213a3baf34f932d1299312691e1c53e6247ae0989ad66070d51fad22856a8b6b28954e7d41189b11c5321789eec8670de9e8db0b0473ba2e02731e60be632697d61e052c18d4bcc6d1572fdf426f7b2fee6c1dee66c85c497b90facaf63b8ec5cde4a73400f9180bcfc0f81eca9580a7c81462a077f9034026bf72aa7c6de4b3c15d4a2dbd6fd7d87084aea9f25fb4bf5ec83eb56874a760533792dff2695407ccdd6a7375e0007230fd3f6501c152f1c1ff279b1d67cc95f2820762b7927659368e41657bdef2dd15b63498a93b787bdb26809d734aaf98b86fcf9fc643a34d03ebbe072820662d20f4774d66c5ae0a0adade5b8f6242a059b926221ee3d677487471c432b0d6d64dad030703475bb3ecac39b204a814f5ece5961621358e36f8a2cf7196c76959824bbb475a7cad8f57853fe05f59f341b5b4967904daf833d91ae9461ef10036f8be7700d66f2d2c3a63dba8eb35e7127246029e222f0b2aebbe767f5125e2d9ea5d5987b9bb96f303e4f3c647c776c5b6306472896dcebe0de6d001b453a4e26dfe433b409586e0faca3ee89e8b936ea46b97a0f663544a8f4784c6b484334949f583b02557645c7d7884910eaf4879da3f4f37ce789b728a49d0546730e2adb0a9cb74620b0cf3a28061a607089a47a23e831c16dd002fc6ad4ebd7c62d265da40d6bfd145698d18d14522e19aa599cd9e412c4644dccb31849bd5e31411c6ff9249be50762cc6fdaa01a7cdcb162dc0516524002b688a462f69b6cce348a6dc5e9356ae3938909ea062f9501220214e83a4e621b8d685925c92c7564e9132cfe10f8acb646b731114ff101479f99d70a4bd6033bf5e4e6675120fa21d0610a685af21ba76162fa5cc571056b295b8f9987fdef14526be89516234dee2d93bf7ceba533af07bb7a6e9f1d5756f81a7558b5e029e662c5dfe00f657bd5a5165c6d44bd90f719342b7ac36eb8f10cdaeda44c079ecb31d324125ac848a27ba173ad35d1acd4e206387ecea474d6a70086d225448e247bfcd51ecae1f15dfe10acc50e7757cca9c5ef80562b63224c3259d6d1fc928264d356b8345ba03e10cd6970c0343ee98359dcb5920b83cb0aa034807f40050c6cf63543e107d85bfa82ce4f5e90f6078a743b0c7ccdd007c7c0115abfd5a9a52873b7b5da78a1ab7404016c5d00aabcfc3e16070b8222a99efebebf6042e6da1dbb3e782d831c0eb4f464b82abc0a8", 0x7d0, 0x0, &(0x7f0000809000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) readv(r0, &(0x7f0000854f90)=[{&(0x7f0000a7b000)=""/196, 0xc4}], 0x1) 19:09:37 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000140)="025cc80700145f8b764070") openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, 0x2011, r1, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) write$cgroup_type(r2, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) pread64(0xffffffffffffffff, &(0x7f0000000840)=""/37, 0x25, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) 19:09:37 executing program 4: r0 = memfd_create(&(0x7f0000000080)='vboxnet1\x00', 0x1) sync_file_range(r0, 0x5013, 0x1, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000400)={0x0, 0x20200000001, 0xea, 'queue0\x00', 0x9}) creat(&(0x7f0000000000)='./file0\x00', 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) 19:09:37 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000200)="025cc83d6d345f8f762070") r2 = syz_open_dev$evdev(&(0x7f0000000600)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000000)=""/70) 19:09:37 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280)=0x38, 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x8, 0x3ff, 0x1, 0x170, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x80000001, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) [ 342.478115] attempt to access beyond end of device [ 342.489534] loop0: rw=536870912, want=114, limit=112 [ 342.506955] buffer_io_error: 76 callbacks suppressed [ 342.506960] Buffer I/O error on dev loop0, logical block 113, lost async page write [ 342.527244] attempt to access beyond end of device [ 342.532330] loop0: rw=536870912, want=115, limit=112 [ 342.542239] Buffer I/O error on dev loop0, logical block 114, lost async page write [ 342.554249] attempt to access beyond end of device [ 342.559993] loop0: rw=536870912, want=116, limit=112 [ 342.573652] Buffer I/O error on dev loop0, logical block 115, lost async page write [ 342.588008] attempt to access beyond end of device [ 342.596661] loop0: rw=536870912, want=117, limit=112 [ 342.603385] Buffer I/O error on dev loop0, logical block 116, lost async page write [ 342.611428] attempt to access beyond end of device [ 342.616501] loop0: rw=536870912, want=130, limit=112 [ 342.624387] Buffer I/O error on dev loop0, logical block 129, lost async page write [ 342.632645] attempt to access beyond end of device [ 342.637830] loop0: rw=536870912, want=131, limit=112 [ 342.643057] Buffer I/O error on dev loop0, logical block 130, lost async page write [ 342.653460] attempt to access beyond end of device [ 342.658564] loop0: rw=536870912, want=132, limit=112 [ 342.663735] Buffer I/O error on dev loop0, logical block 131, lost async page write [ 342.675933] attempt to access beyond end of device [ 342.681264] loop0: rw=536870912, want=133, limit=112 [ 342.686474] Buffer I/O error on dev loop0, logical block 132, lost async page write [ 342.695923] attempt to access beyond end of device [ 342.701154] loop0: rw=536870912, want=2189, limit=112 [ 342.710868] attempt to access beyond end of device [ 342.723367] loop0: rw=536870912, want=3605, limit=112 [ 342.729001] attempt to access beyond end of device [ 342.734004] loop0: rw=536870912, want=3606, limit=112 [ 342.739368] Buffer I/O error on dev loop0, logical block 3605, lost async page write [ 342.747460] attempt to access beyond end of device [ 342.752603] loop0: rw=536870912, want=3607, limit=112 [ 342.757848] Buffer I/O error on dev loop0, logical block 3606, lost async page write [ 342.770840] attempt to access beyond end of device [ 342.780283] loop0: rw=536870912, want=3608, limit=112 [ 342.788146] attempt to access beyond end of device [ 342.793271] loop0: rw=536870912, want=3609, limit=112 [ 342.798523] attempt to access beyond end of device [ 342.803914] loop0: rw=536870912, want=3638, limit=112 [ 342.809550] attempt to access beyond end of device [ 342.814814] loop0: rw=536870912, want=3639, limit=112 [ 342.820149] attempt to access beyond end of device [ 342.825175] loop0: rw=536870912, want=3640, limit=112 [ 342.830586] attempt to access beyond end of device [ 342.835569] loop0: rw=536870912, want=3641, limit=112 [ 342.840911] attempt to access beyond end of device [ 342.845934] loop0: rw=536870912, want=3662, limit=112 [ 342.859383] attempt to access beyond end of device [ 342.867261] loop0: rw=536870912, want=3663, limit=112 [ 342.872663] attempt to access beyond end of device [ 342.877667] loop0: rw=536870912, want=3664, limit=112 [ 342.889665] attempt to access beyond end of device [ 342.901406] loop0: rw=536870912, want=3665, limit=112 [ 342.906744] attempt to access beyond end of device [ 342.918351] loop0: rw=536870912, want=3698, limit=112 19:09:37 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r2) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYPTR64=&(0x7f0000000180)=ANY=[]], 0x1}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="7f0000"], 0x18}, 0x0) fcntl$setstatus(r1, 0x4, 0x2400) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000000)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0xfffffffffffffdc5}}], 0x0, 0x0, 0x0) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f00000000c0)) 19:09:37 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) 19:09:37 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$FICLONE(r0, 0x40049409, r0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) write$FUSE_GETXATTR(r0, &(0x7f0000000000)={0x18, 0x0, 0x1, {0xfffffffffffff001}}, 0x18) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) 19:09:37 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x8c0, 0x0) getdents(r0, &(0x7f0000000180)=""/136, 0x88) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x4000, 0x0) 19:09:37 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(0xffffffffffffffff, r0, &(0x7f0000000280)=0x38, 0x2000000000000001) r1 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x8, 0x3ff, 0x1, 0x170, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x80000001, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r1, 0xb, r0, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) [ 342.928386] attempt to access beyond end of device [ 342.939382] loop0: rw=536870912, want=3699, limit=112 [ 342.956262] attempt to access beyond end of device [ 342.963658] loop0: rw=536870912, want=3700, limit=112 [ 342.969219] attempt to access beyond end of device [ 342.971635] attempt to access beyond end of device [ 342.971641] loop2: rw=536870912, want=114, limit=112 [ 342.971652] attempt to access beyond end of device [ 342.971656] loop2: rw=536870912, want=115, limit=112 [ 342.971666] attempt to access beyond end of device [ 342.971670] loop2: rw=536870912, want=116, limit=112 [ 342.971679] attempt to access beyond end of device [ 342.971683] loop2: rw=536870912, want=117, limit=112 [ 342.971693] attempt to access beyond end of device [ 342.971697] loop2: rw=536870912, want=130, limit=112 [ 342.971706] attempt to access beyond end of device [ 342.971710] loop2: rw=536870912, want=131, limit=112 [ 342.971719] attempt to access beyond end of device [ 342.971723] loop2: rw=536870912, want=132, limit=112 [ 342.971732] attempt to access beyond end of device [ 342.971736] loop2: rw=536870912, want=133, limit=112 [ 342.972633] attempt to access beyond end of device [ 342.972637] loop2: rw=536870912, want=2189, limit=112 [ 342.973858] attempt to access beyond end of device [ 342.973862] loop2: rw=536870912, want=4237, limit=112 [ 342.974446] attempt to access beyond end of device [ 342.974451] loop2: rw=536870912, want=4757, limit=112 [ 342.974555] attempt to access beyond end of device [ 342.974560] loop2: rw=536870912, want=4758, limit=112 [ 342.974571] attempt to access beyond end of device [ 342.974575] loop2: rw=536870912, want=4759, limit=112 [ 342.974584] attempt to access beyond end of device [ 342.974588] loop2: rw=536870912, want=4760, limit=112 [ 342.974597] attempt to access beyond end of device [ 342.974601] loop2: rw=536870912, want=4761, limit=112 [ 342.974611] attempt to access beyond end of device [ 342.974615] loop2: rw=536870912, want=4790, limit=112 [ 342.974627] attempt to access beyond end of device [ 342.974631] loop2: rw=536870912, want=4791, limit=112 [ 342.974641] attempt to access beyond end of device [ 342.974645] loop2: rw=536870912, want=4792, limit=112 [ 342.974654] attempt to access beyond end of device [ 342.974658] loop2: rw=536870912, want=4793, limit=112 [ 342.974673] attempt to access beyond end of device [ 342.974677] loop2: rw=536870912, want=4814, limit=112 [ 342.974686] attempt to access beyond end of device [ 342.974690] loop2: rw=536870912, want=4815, limit=112 [ 342.974700] attempt to access beyond end of device [ 342.974704] loop2: rw=536870912, want=4816, limit=112 [ 342.974714] attempt to access beyond end of device [ 342.974718] loop2: rw=536870912, want=4817, limit=112 [ 342.974728] attempt to access beyond end of device [ 342.974732] loop2: rw=536870912, want=4850, limit=112 [ 342.974742] attempt to access beyond end of device [ 342.974746] loop2: rw=536870912, want=4851, limit=112 [ 342.974756] attempt to access beyond end of device [ 342.974760] loop2: rw=536870912, want=4852, limit=112 [ 342.974769] attempt to access beyond end of device [ 342.974773] loop2: rw=536870912, want=4853, limit=112 [ 342.974788] attempt to access beyond end of device [ 342.974792] loop2: rw=536870912, want=4866, limit=112 [ 342.974801] attempt to access beyond end of device [ 342.974805] loop2: rw=536870912, want=4867, limit=112 [ 342.974814] attempt to access beyond end of device [ 342.974818] loop2: rw=536870912, want=4868, limit=112 [ 342.974828] attempt to access beyond end of device [ 342.974832] loop2: rw=536870912, want=4869, limit=112 [ 342.974842] attempt to access beyond end of device [ 342.974846] loop2: rw=536870912, want=4878, limit=112 [ 342.974855] attempt to access beyond end of device [ 342.974860] loop2: rw=536870912, want=4879, limit=112 [ 342.974869] attempt to access beyond end of device [ 342.974873] loop2: rw=536870912, want=4880, limit=112 [ 342.974882] attempt to access beyond end of device [ 342.974886] loop2: rw=536870912, want=4881, limit=112 [ 342.975763] attempt to access beyond end of device [ 342.975767] loop2: rw=536870912, want=6929, limit=112 [ 342.976995] attempt to access beyond end of device [ 342.976999] loop2: rw=536870912, want=8977, limit=112 [ 342.978202] attempt to access beyond end of device [ 342.978207] loop2: rw=536870912, want=11025, limit=112 [ 342.979432] attempt to access beyond end of device [ 342.979437] loop2: rw=536870912, want=13073, limit=112 [ 342.996930] attempt to access beyond end of device [ 342.996936] loop2: rw=536870912, want=15121, limit=112 [ 343.002086] attempt to access beyond end of device [ 343.002092] loop2: rw=536870912, want=17169, limit=112 [ 343.006171] attempt to access beyond end of device [ 343.006178] loop2: rw=536870912, want=19217, limit=112 [ 343.011110] attempt to access beyond end of device [ 343.011115] loop2: rw=536870912, want=21265, limit=112 [ 343.015030] attempt to access beyond end of device [ 343.015036] loop2: rw=536870912, want=23313, limit=112 [ 343.017464] attempt to access beyond end of device [ 343.017471] loop2: rw=536870912, want=25361, limit=112 [ 343.019066] attempt to access beyond end of device [ 343.019073] loop2: rw=536870912, want=27409, limit=112 [ 343.020565] attempt to access beyond end of device [ 343.020571] loop2: rw=536870912, want=29457, limit=112 [ 343.027208] attempt to access beyond end of device [ 343.027215] loop2: rw=536870912, want=31505, limit=112 [ 343.028430] attempt to access beyond end of device [ 343.028436] loop2: rw=536870912, want=32985, limit=112 [ 343.526371] loop0: rw=536870912, want=3701, limit=112 [ 343.531566] attempt to access beyond end of device [ 343.536494] loop0: rw=536870912, want=3714, limit=112 [ 343.541673] attempt to access beyond end of device [ 343.546639] loop0: rw=536870912, want=3715, limit=112 [ 343.551822] attempt to access beyond end of device [ 343.556948] loop0: rw=536870912, want=3716, limit=112 [ 343.562164] attempt to access beyond end of device [ 343.567469] loop0: rw=536870912, want=3717, limit=112 [ 343.572668] attempt to access beyond end of device [ 343.577598] loop0: rw=536870912, want=3726, limit=112 [ 343.582803] attempt to access beyond end of device [ 343.587793] loop0: rw=536870912, want=3727, limit=112 [ 343.592973] attempt to access beyond end of device [ 343.597948] loop0: rw=536870912, want=3728, limit=112 [ 343.603156] attempt to access beyond end of device [ 343.608104] loop0: rw=536870912, want=3729, limit=112 [ 343.613972] attempt to access beyond end of device [ 343.618954] loop0: rw=536870912, want=5777, limit=112 [ 343.624934] attempt to access beyond end of device [ 343.629891] loop0: rw=536870912, want=7825, limit=112 [ 343.636175] attempt to access beyond end of device [ 343.641088] loop0: rw=536870912, want=9873, limit=112 [ 343.647667] attempt to access beyond end of device [ 343.652577] loop0: rw=536870912, want=11921, limit=112 [ 343.658745] attempt to access beyond end of device [ 343.663688] loop0: rw=536870912, want=13969, limit=112 [ 343.670051] attempt to access beyond end of device [ 343.674995] loop0: rw=536870912, want=16017, limit=112 [ 343.681235] attempt to access beyond end of device [ 343.686183] loop0: rw=536870912, want=18065, limit=112 [ 343.692304] attempt to access beyond end of device [ 343.697237] loop0: rw=536870912, want=20113, limit=112 [ 343.703497] attempt to access beyond end of device [ 343.708482] loop0: rw=536870912, want=22161, limit=112 [ 343.714661] attempt to access beyond end of device [ 343.719620] loop0: rw=536870912, want=24209, limit=112 [ 343.725824] attempt to access beyond end of device [ 343.730797] loop0: rw=536870912, want=26257, limit=112 [ 343.737457] attempt to access beyond end of device [ 343.742400] loop0: rw=536870912, want=28305, limit=112 [ 343.748516] attempt to access beyond end of device [ 343.753465] loop0: rw=536870912, want=30353, limit=112 [ 343.759587] attempt to access beyond end of device [ 343.764532] loop0: rw=536870912, want=32401, limit=112 [ 343.770293] attempt to access beyond end of device [ 343.775223] loop0: rw=536870912, want=32985, limit=112 19:09:38 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x3, 0x86, 0x2}) modify_ldt$write(0x1, &(0x7f0000000340)={0x1f, 0x20000800, 0x6000, 0x0, 0x0, 0x5d0733b2, 0xffffffff, 0x1}, 0x10) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000580)) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) syncfs(0xffffffffffffffff) flistxattr(0xffffffffffffffff, &(0x7f0000000800)=""/132, 0x84) 19:09:38 executing program 6: r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="09042abd7000fbdbdf24f1b0110063639af8b72716e264ba84965eca92e8e810d9da58a922420576f282ac566cfcc8db82d027750bb01c9ea71275f8c504aff92dd40cda3294fa3252f201d64e5a6f4bc65e0c47bf09c85967bc07b09f08deac46115bbc5ce6ed8bf37f53c1ed28386f7e706cf80c805dbc53ffd00b1dca744283cdfecd54115d2f425dff51012e7bcffd4aa835bd59eacc672414109e2f90d9d2305c37e70740617c983ace19ccfc4f99f8275c813f1621efd491a867"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0xc8d0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r2, r2, r2) setresuid(r2, r2, r2) 19:09:38 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) 19:09:38 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, 0xffffffffffffffff, &(0x7f0000000280)=0x38, 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x8, 0x3ff, 0x1, 0x170, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x80000001, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:09:38 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000180)=0x0) setpgid(r1, r2) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000000)={'bridge_slave_0\x00', 0x7ff}) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000001c0)={'ifb0\x00', {0x2, 0x4e21, @rand_addr=0x5}}) fcntl$getflags(r0, 0xb) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x8, 0x5, 0x1}, {{0x0, 0x2710}, 0x8, 0x5, 0x6}, {{0x0, 0x7530}, 0xfc9, 0x1, 0xfffffffffffff168}, {{0x0, 0x2710}, 0x2, 0xaa83, 0x8}, {{r3, r4/1000+30000}, 0x5, 0x6, 0xffffffff}, {{r5, r6/1000+10000}, 0x6}], 0x90) 19:09:38 executing program 3: r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x1c) sync_file_range(r0, 0x2, 0x2000, 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x2800000000000200, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) 19:09:38 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0xee00) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) bind$inet(r2, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r2, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) r3 = gettid() fcntl$setown(r2, 0x8, r3) recvfrom(r2, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739c9d, 0x0, 0x0, 0x35) 19:09:38 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000140)="025cc80700145f8b764070") openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, 0x2011, r1, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) write$cgroup_type(r2, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) pread64(0xffffffffffffffff, &(0x7f0000000840)=""/37, 0x25, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) 19:09:38 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x8, 0x3ff, 0x1, 0x170, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x80000001, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:09:38 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000100)=0x5) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x141000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x200000, 0x0) 19:09:38 executing program 7: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x652040, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000400)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) write$P9_RUNLINKAT(r1, &(0x7f0000000080)={0xffffffffffffff1a}, 0x4ce) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a0000002901000000000077e4985c7587e200000000000000fc000000000000000000000000000007002e2f66696c65300c31ed15e9d4420f9bf1a79af91f468b682771bf22358b77"], 0x2a) r3 = dup(r1) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f0000000600)) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f010001000000000000000000000000000007db182eaad72f550058774da512e500c51a0fbfe56e6a731e54dd055933eef60271113364cd1216b72910"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) utime(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x5, 0x1}) listxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=""/57, 0x39) 19:09:38 executing program 6: getuid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000002e80)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004880)={{{@in=@multicast1, @in=@dev}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000004980)=0x328) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000500)={0x14, 0x69, 0x1, {0x1}}, 0x14) arch_prctl(0x1004, &(0x7f0000000600)="d538da96aba9cbfe6a7694707734a1f44ca2fbaaabe0eaa89b0de6e6b5f13c991ceb6d9db3497f05bfe49b2e265f6ed8d8ee4f4e3d24f5d401bacafa33378f6ba48a70ce29ad6aef4dd90275c1fd8f77b749fb70f974bd0c544d2d") r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) sendto$inet6(0xffffffffffffffff, &(0x7f00000007c0), 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000340)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000280)) r4 = add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, r4, &(0x7f0000000680)=""/57, 0x39) syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x109040) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000240)={0x40000000}) write$9p(0xffffffffffffffff, &(0x7f0000000400)="f6110892f57227e4f3246e09436754dfcdfc59f4af88e13a614e4aea845a3f1d06c2cf1141e5bfa6fa07a5bc1d47ea712bcd4b6ebc92ef0295586c8ae71cb96da96474613fada784e297725e751bbc9cd26ddfadf9feb49e5ea2173732ec541ff4e4", 0x5b) sendto$inet(r3, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) ptrace(0x4219, r1) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/access\x00', 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r3, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) inotify_init() lstat(&(0x7f0000004a80)='./file0\x00', &(0x7f0000004ac0)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000009480)) openat$selinux_member(0xffffffffffffff9c, &(0x7f000000abc0)='/selinux/member\x00', 0x2, 0x0) getgid() [ 344.241697] attempt to access beyond end of device [ 344.246662] loop0: rw=536870912, want=114, limit=112 [ 344.253713] attempt to access beyond end of device [ 344.267609] loop0: rw=536870912, want=115, limit=112 [ 344.278291] attempt to access beyond end of device 19:09:38 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x8, 0x3ff, 0x1, 0x170, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x80000001, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:09:38 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000000)=0x2, 0x4) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x100010, r0, 0x0) 19:09:38 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) r1 = fcntl$getown(r0, 0x9) ioctl$LOOP_CLR_FD(r0, 0x4c01) perf_event_open(&(0x7f0000000180)={0x4, 0x70, 0x9, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0x78, 0x482a, 0x4, 0x9, 0x6831b944, 0x5, 0x8, 0x0, 0x591, 0xfffffffffffffffe, 0x40, 0x7, 0xfffffffffffffffc, 0x3f, 0x582d, 0x8000, 0x9, 0xfffffffffffffffb, 0xffffffffffff0001, 0x80000001, 0x2, 0x7, 0x101, 0x9, 0x7, 0xb52, 0x7, 0x2, 0x4, 0x5, 0x7d, 0x0, 0x2, 0x4, @perf_config_ext={0x5f3, 0x8}, 0xe042, 0xff, 0x0, 0x5, 0xffffffff, 0x10000, 0x43f}, r1, 0xb, r0, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00'}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) write$binfmt_misc(r0, &(0x7f0000000200)={'syz1', "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"}, 0x1004) socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000080)) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) [ 344.291657] loop0: rw=536870912, want=116, limit=112 [ 344.301636] attempt to access beyond end of device [ 344.306578] loop0: rw=536870912, want=117, limit=112 [ 344.312104] attempt to access beyond end of device [ 344.317105] loop0: rw=536870912, want=130, limit=112 [ 344.328769] attempt to access beyond end of device [ 344.340952] loop0: rw=536870912, want=131, limit=112 [ 344.352946] attempt to access beyond end of device [ 344.358075] loop0: rw=536870912, want=132, limit=112 [ 344.363585] attempt to access beyond end of device [ 344.368509] loop0: rw=536870912, want=133, limit=112 [ 344.374571] attempt to access beyond end of device [ 344.379532] loop0: rw=536870912, want=2189, limit=112 [ 344.386128] attempt to access beyond end of device [ 344.402444] loop0: rw=536870912, want=4237, limit=112 [ 344.409908] attempt to access beyond end of device [ 344.417404] loop0: rw=536870912, want=6285, limit=112 [ 344.444062] attempt to access beyond end of device [ 344.470588] loop0: rw=536870912, want=7253, limit=112 [ 344.508586] attempt to access beyond end of device 19:09:39 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x8, 0x3ff, 0x1, 0x170, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x80000001, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) [ 344.533407] loop0: rw=536870912, want=7254, limit=112 [ 344.556336] attempt to access beyond end of device [ 344.573367] loop0: rw=536870912, want=7255, limit=112 [ 344.601023] attempt to access beyond end of device [ 344.615695] loop0: rw=536870912, want=7256, limit=112 [ 344.632786] attempt to access beyond end of device [ 344.637794] loop0: rw=536870912, want=7257, limit=112 [ 344.661350] attempt to access beyond end of device [ 344.683239] loop0: rw=536870912, want=7286, limit=112 [ 344.688877] attempt to access beyond end of device [ 344.693802] loop0: rw=536870912, want=7287, limit=112 [ 344.728910] attempt to access beyond end of device [ 344.734902] loop0: rw=536870912, want=7288, limit=112 [ 344.745727] attempt to access beyond end of device [ 344.755479] loop0: rw=536870912, want=7289, limit=112 [ 344.760984] attempt to access beyond end of device [ 344.775719] loop0: rw=536870912, want=7310, limit=112 [ 344.788668] attempt to access beyond end of device [ 344.801898] loop0: rw=536870912, want=7311, limit=112 [ 344.818414] attempt to access beyond end of device [ 344.829942] loop0: rw=536870912, want=7312, limit=112 [ 344.836999] attempt to access beyond end of device [ 344.850105] loop0: rw=536870912, want=7313, limit=112 [ 344.857935] attempt to access beyond end of device [ 344.866065] loop0: rw=536870912, want=7346, limit=112 [ 344.896644] attempt to access beyond end of device [ 344.922396] loop0: rw=536870912, want=7347, limit=112 [ 344.928130] attempt to access beyond end of device [ 344.944233] loop0: rw=536870912, want=7348, limit=112 [ 344.949479] attempt to access beyond end of device [ 344.954706] loop0: rw=536870912, want=7349, limit=112 [ 344.959966] attempt to access beyond end of device [ 344.964929] loop0: rw=536870912, want=7362, limit=112 [ 344.970165] attempt to access beyond end of device [ 344.975473] loop0: rw=536870912, want=7363, limit=112 [ 344.980708] attempt to access beyond end of device [ 344.985966] loop0: rw=536870912, want=7364, limit=112 [ 344.991558] attempt to access beyond end of device [ 344.996486] loop0: rw=536870912, want=7365, limit=112 [ 345.001900] attempt to access beyond end of device [ 345.006839] loop0: rw=536870912, want=7374, limit=112 [ 345.012053] attempt to access beyond end of device [ 345.017006] loop0: rw=536870912, want=7375, limit=112 [ 345.022291] attempt to access beyond end of device [ 345.027259] loop0: rw=536870912, want=7376, limit=112 [ 345.032805] attempt to access beyond end of device [ 345.037763] loop0: rw=536870912, want=7377, limit=112 [ 345.043889] attempt to access beyond end of device [ 345.048846] loop0: rw=536870912, want=9425, limit=112 [ 345.055155] attempt to access beyond end of device [ 345.060093] loop0: rw=536870912, want=11473, limit=112 [ 345.066184] attempt to access beyond end of device [ 345.071168] loop0: rw=536870912, want=13521, limit=112 [ 345.077666] attempt to access beyond end of device [ 345.082630] loop0: rw=536870912, want=15569, limit=112 [ 345.089207] attempt to access beyond end of device [ 345.094154] loop0: rw=536870912, want=17617, limit=112 [ 345.100268] attempt to access beyond end of device [ 345.105180] loop0: rw=536870912, want=19665, limit=112 [ 345.111645] attempt to access beyond end of device [ 345.116595] loop0: rw=536870912, want=21713, limit=112 [ 345.123160] attempt to access beyond end of device [ 345.128106] loop0: rw=536870912, want=23761, limit=112 [ 345.134187] attempt to access beyond end of device [ 345.139154] loop0: rw=536870912, want=25809, limit=112 [ 345.145704] attempt to access beyond end of device [ 345.150732] loop0: rw=536870912, want=27857, limit=112 [ 345.157341] attempt to access beyond end of device [ 345.162283] loop0: rw=536870912, want=29905, limit=112 [ 345.169072] attempt to access beyond end of device [ 345.174039] loop0: rw=536870912, want=31953, limit=112 [ 345.180319] attempt to access beyond end of device [ 345.185354] loop0: rw=536870912, want=32985, limit=112 19:09:40 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x3, 0x86, 0x2}) modify_ldt$write(0x1, &(0x7f0000000340)={0x1f, 0x20000800, 0x6000, 0x0, 0x0, 0x5d0733b2, 0xffffffff, 0x1}, 0x10) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000580)) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) syncfs(0xffffffffffffffff) 19:09:40 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) 19:09:40 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x2fb, &(0x7f0000000100)=0x1004) setpgid(r1, r1) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000180)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) 19:09:40 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x0) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x8, 0x3ff, 0x1, 0x170, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x80000001, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:09:40 executing program 4: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x100, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000180)=""/246) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000280)={{0x3, 0x3, 0x81, 0x0, 0x5}, 0x8, 0x0, 'id1\x00', 'timer0\x00', 0x0, 0x4, 0x3, 0x4, 0x4}) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x70, 0x4, 0xd58, 0x9, 0x4, 0x0, 0x1f, 0x408, 0x6, 0xffff, 0x6, 0xfff, 0x1000, 0xfffffffffffffffd, 0x3f, 0xeb, 0x120, 0x0, 0xdcca, 0x411117c0, 0x75fc6950, 0xc39, 0x200, 0x7fffffff, 0x6, 0x5, 0x0, 0x80, 0xff, 0x7, 0xe0000, 0x1, 0x1f, 0x4, 0xfffffffffffffffa, 0x9, 0x5, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000100), 0xd}, 0x400, 0x7, 0x8, 0x6, 0xff, 0x6, 0x5}, r0, 0x10, r0, 0x4) times(&(0x7f0000000000)) 19:09:40 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0xee00) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) bind$inet(r2, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r2, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) r3 = gettid() fcntl$setown(r2, 0x8, r3) recvfrom(r2, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739c9d, 0x0, 0x0, 0x35) 19:09:40 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x8, 0x3ff, 0x1, 0x170, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x80000001, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:09:40 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000140)="025cc80700145f8b764070") openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, 0x2011, r1, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) write$cgroup_type(r2, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) pread64(0xffffffffffffffff, &(0x7f0000000840)=""/37, 0x25, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) 19:09:40 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x0) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x8, 0x3ff, 0x1, 0x170, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x80000001, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:09:40 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x10000014, 0x0) 19:09:40 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) timer_create(0x1, &(0x7f0000000300)={0x0, 0x3d, 0x0, @thr={&(0x7f0000000380)="e5e7bae1fd8161b555f32dacdf169641c6a19c35af41dad95f9fec1524fbcd76edf36fafab2f77012fc3c4122df7f66af079e4ef7e507511a9efe1009c33b3269b5a73fdeb639cfc59c2547c3bfdab35fffaf343416fc88f34d8dbc90567a0", &(0x7f0000000400)="1d3045147ec33d52f48b63eab156534cfec5cdc2fd2431151d5e957bbe28471802552bbf00dea82c10a0503247f45524d32d468406e8383463b29a40379cfa030200cee45ad29748b6ee96a65ceb5ae0734648f5dbadd310ebfac711d9"}}, &(0x7f00000004c0)=0x0) timer_getoverrun(r2) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/status\x00', 0x0, 0x0) accept4$unix(r3, &(0x7f0000000680), &(0x7f0000000700)=0x6e, 0x16dabc1d85dc67cc) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3db9c719da32ba79793992862aa2f6540ef5af46472af568fcd4aedb081f1f38757f8d3ca3", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) 19:09:40 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x480, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)=0x0) sched_getaffinity(r1, 0x8, &(0x7f0000000200)) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={0x0, @rand_addr}, &(0x7f0000000100)=0xc) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x400, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f000082ef0a)=""/246) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000040)={0x5, 0x6, 0x400, 0x3, 0x63, 0x1, 0x4, 0x31, 0x7, 0x3}) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000180)={0xce89, 0xfd, 0x10000000000009, 0x0, 0x0, 0x1, 0x4, 0x10000, 0x7ff, 0x1}) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) [ 345.604413] attempt to access beyond end of device [ 345.609445] loop0: rw=536870912, want=130, limit=112 [ 345.620766] attempt to access beyond end of device [ 345.641003] loop0: rw=536870912, want=131, limit=112 19:09:40 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x8, 0x3ff, 0x1, 0x170, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x80000001, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:09:40 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x0) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x8, 0x3ff, 0x1, 0x170, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x80000001, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:09:40 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x2000088000, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x989680}}, &(0x7f00000001c0)) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000100)=""/16) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000000)=""/39) socket$l2tp(0x18, 0x1, 0x1) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) epoll_pwait(r0, &(0x7f0000000240)=[{}], 0x1, 0x100, &(0x7f0000000280), 0x8) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000200)='/dev/ppp\x00') [ 345.650270] attempt to access beyond end of device [ 345.655488] loop0: rw=536870912, want=132, limit=112 [ 345.661114] attempt to access beyond end of device [ 345.666864] loop0: rw=536870912, want=133, limit=112 [ 345.672129] attempt to access beyond end of device [ 345.677268] loop0: rw=536870912, want=142, limit=112 [ 345.682638] attempt to access beyond end of device [ 345.687850] loop0: rw=536870912, want=143, limit=112 [ 345.693373] attempt to access beyond end of device [ 345.698413] loop0: rw=536870912, want=144, limit=112 [ 345.703724] attempt to access beyond end of device [ 345.708695] loop0: rw=536870912, want=145, limit=112 [ 345.714432] attempt to access beyond end of device [ 345.719353] loop0: rw=536870912, want=2193, limit=112 [ 345.726108] attempt to access beyond end of device [ 345.731040] loop0: rw=536870912, want=4241, limit=112 [ 345.737706] attempt to access beyond end of device [ 345.742646] loop0: rw=536870912, want=6289, limit=112 19:09:40 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x3ff, 0x1, 0x170, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x80000001, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) [ 345.769342] attempt to access beyond end of device [ 345.785458] loop0: rw=536870912, want=6553, limit=112 [ 345.790778] attempt to access beyond end of device [ 345.805600] loop0: rw=536870912, want=6582, limit=112 [ 345.811026] attempt to access beyond end of device [ 345.820261] loop0: rw=536870912, want=6583, limit=112 [ 345.825573] attempt to access beyond end of device [ 345.832330] loop0: rw=536870912, want=6584, limit=112 [ 345.839862] 9pnet: Insufficient options for proto=fd [ 345.845337] attempt to access beyond end of device [ 345.850332] loop0: rw=536870912, want=6585, limit=112 [ 345.855818] attempt to access beyond end of device [ 345.860932] loop0: rw=536870912, want=6606, limit=112 [ 345.867475] attempt to access beyond end of device [ 345.869165] 9pnet: Insufficient options for proto=fd [ 345.883689] loop0: rw=536870912, want=6607, limit=112 [ 345.889409] attempt to access beyond end of device [ 345.894481] loop0: rw=536870912, want=6608, limit=112 [ 345.899783] attempt to access beyond end of device [ 345.905522] loop0: rw=536870912, want=6609, limit=112 [ 345.911207] attempt to access beyond end of device [ 345.917540] loop0: rw=536870912, want=6658, limit=112 [ 345.922972] attempt to access beyond end of device [ 345.928044] loop0: rw=536870912, want=6659, limit=112 [ 345.933373] attempt to access beyond end of device [ 345.941234] loop0: rw=536870912, want=6660, limit=112 [ 345.946638] attempt to access beyond end of device [ 345.951640] loop0: rw=536870912, want=6661, limit=112 [ 345.956994] attempt to access beyond end of device [ 345.961987] loop0: rw=536870912, want=6670, limit=112 [ 345.967353] attempt to access beyond end of device [ 345.972350] loop0: rw=536870912, want=6671, limit=112 [ 345.977670] attempt to access beyond end of device [ 345.982665] loop0: rw=536870912, want=6672, limit=112 [ 345.997847] attempt to access beyond end of device [ 346.002936] loop0: rw=536870912, want=6673, limit=112 [ 346.009563] attempt to access beyond end of device [ 346.014571] loop0: rw=536870912, want=8721, limit=112 [ 346.021525] attempt to access beyond end of device [ 346.026634] loop0: rw=536870912, want=10769, limit=112 [ 346.033658] attempt to access beyond end of device [ 346.038868] loop0: rw=536870912, want=12817, limit=112 [ 346.050575] attempt to access beyond end of device [ 346.060155] loop0: rw=536870912, want=14865, limit=112 [ 346.069473] attempt to access beyond end of device [ 346.074653] loop0: rw=536870912, want=16913, limit=112 [ 346.081753] attempt to access beyond end of device [ 346.087029] loop0: rw=536870912, want=18961, limit=112 [ 346.094119] attempt to access beyond end of device [ 346.099606] loop0: rw=536870912, want=21009, limit=112 [ 346.106643] attempt to access beyond end of device [ 346.111670] loop0: rw=536870912, want=23057, limit=112 [ 346.118558] attempt to access beyond end of device [ 346.123573] loop0: rw=536870912, want=25105, limit=112 [ 346.130381] attempt to access beyond end of device [ 346.135385] loop0: rw=536870912, want=27153, limit=112 [ 346.142301] attempt to access beyond end of device [ 346.147288] loop0: rw=536870912, want=29201, limit=112 [ 346.153944] attempt to access beyond end of device [ 346.158946] loop0: rw=536870912, want=31249, limit=112 [ 346.165454] attempt to access beyond end of device [ 346.170505] loop0: rw=536870912, want=32993, limit=112 19:09:41 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x3, 0x86, 0x2}) modify_ldt$write(0x1, &(0x7f0000000340)={0x1f, 0x20000800, 0x6000, 0x0, 0x0, 0x5d0733b2, 0xffffffff, 0x1}, 0x10) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000580)) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) syncfs(0xffffffffffffffff) 19:09:41 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) 19:09:41 executing program 6: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) mount$9p_fd(0x0, &(0x7f0000001ac0)='./bus\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f00000000c0)) 19:09:41 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f0000000000)={0x7, 0x100000000}) fremovexattr(r0, &(0x7f0000000080)=@random={'osx.', '/dev/ppp\x00'}) 19:09:41 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x3ff, 0x1, 0x170, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x80000001, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:09:41 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = syz_open_dev$mice(&(0x7f0000000300)='/dev/input/mice\x00', 0x0, 0x200) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000380)=0x0) connect(r2, &(0x7f0000000400)=@in6={0xa, 0x4e23, 0x1b3, @empty, 0x8}, 0x80) waitid(0x2, r3, &(0x7f00000003c0), 0x20000000, &(0x7f0000000600)) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0000000000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) 19:09:41 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x10000, 0x20) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@ipv4={[], [], @rand_addr}, @in6=@mcast1}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@local}}, &(0x7f0000000140)=0xe8) epoll_pwait(r1, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x3f, &(0x7f00000000c0)={0x40be4a08}, 0x8) lseek(r0, 0x0, 0x2) r2 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) fcntl$setstatus(r0, 0x4, 0x6000) execveat(r2, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000500)=[&(0x7f0000000440)='GPL$-/user)$^(securityproc-\x00', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='bond_slave_1\x00'], &(0x7f00000005c0)=[&(0x7f0000000540)='\x00', &(0x7f0000000580)='\x00'], 0x1000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f0000000200)='./bus\x00', 0xa) creat(&(0x7f00000001c0)='./bus\x00', 0x8) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000180)='bond_slave_1\x00') 19:09:41 executing program 5: socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000080)={0xfffffffffffffc00, {{0xa, 0x4e24, 0x2, @local, 0x3}}}, 0x88) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) fchmod(r2, 0x20) 19:09:41 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) ioctl$FICLONE(r0, 0x40049409, r0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) write$binfmt_misc(r0, &(0x7f0000000180)={'syz1', "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"}, 0x102) 19:09:41 executing program 5: sched_setaffinity(0x0, 0x3cb, &(0x7f00000000c0)) r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000200)="0a5cc80700315f85714070") mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14) r2 = socket(0x0, 0x80000000000001, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000300)={0x81, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e20, @rand_addr=0x2}, {0x2, 0x4e23, @loopback}, 0x8, 0x5, 0x81, 0x80000001, 0x9, &(0x7f0000000040)='veth0_to_bridge\x00', 0x1fc000000000, 0x7, 0x4}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000280)=0x8) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000100)=""/189) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f00000003c0)) 19:09:41 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0xfffffffffffffffe, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000080)={0xff, @loopback, 0x4e20, 0x1, 'nq\x00', 0x1, 0xc, 0x5}, 0x2c) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000040)={0x3f, @loopback, 0x4e24, 0x1, 'nq\x00', 0x20, 0x5, 0x4b}, 0x2c) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000100)='127.0.0.1\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=tcp,', {'port'}, 0x2c, {[{@msize={'msize', 0x3d, 0xffffffff}}]}}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000000)=0x2) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000002c0)={'filter\x00', 0x0, 0x3, 0xb1, [], 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000200)=""/177}, &(0x7f0000000340)=0x78) 19:09:41 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x3ff, 0x1, 0x170, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x80000001, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:09:41 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101009, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe, 0x10}, 0xc) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000100)={r1, r2/1000+30000}, 0x10) [ 346.673672] attempt to access beyond end of device [ 346.678650] loop0: rw=536870912, want=114, limit=112 [ 346.690727] attempt to access beyond end of device [ 346.696744] loop0: rw=536870912, want=115, limit=112 [ 346.704378] attempt to access beyond end of device [ 346.709737] loop0: rw=536870912, want=116, limit=112 [ 346.715633] attempt to access beyond end of device 19:09:41 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) truncate(&(0x7f0000000300)='./file0\x00', 0x7fff) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RWALK(r1, &(0x7f0000000380)={0x57, 0x6f, 0x2, {0x6, [{0x0, 0x3, 0x7}, {0x1, 0x3, 0x7}, {0x2, 0x0, 0x5}, {0x1, 0x4, 0x3}, {0x4, 0x2, 0x4}, {0x20}]}}, 0x57) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x80, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f00000004c0)) write$P9_RLERROR(r1, &(0x7f0000000400)={0xe, 0x7, 0x1, {0x5, 'rfdno'}}, 0xe) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) 19:09:41 executing program 6: r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000bc0)={&(0x7f0000000480), 0xc, &(0x7f0000000b80)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0010f5a130602393326b00000000"], 0x14}}, 0x0) [ 346.720954] loop0: rw=536870912, want=117, limit=112 [ 346.735672] attempt to access beyond end of device [ 346.740684] loop0: rw=536870912, want=130, limit=112 [ 346.746196] attempt to access beyond end of device [ 346.751223] loop0: rw=536870912, want=131, limit=112 [ 346.764463] attempt to access beyond end of device 19:09:41 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) r1 = memfd_create(&(0x7f0000000000)='/dev/ppp\x00', 0x1) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000180)=""/171) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) [ 346.778978] loop0: rw=536870912, want=132, limit=112 [ 346.792081] attempt to access beyond end of device [ 346.802680] loop0: rw=536870912, want=133, limit=112 [ 346.809941] attempt to access beyond end of device [ 346.815178] loop0: rw=536870912, want=2189, limit=112 [ 346.825657] attempt to access beyond end of device [ 346.830625] loop0: rw=536870912, want=4237, limit=112 [ 346.837174] attempt to access beyond end of device [ 346.842610] loop0: rw=536870912, want=5845, limit=112 [ 346.852428] attempt to access beyond end of device [ 346.857862] loop0: rw=536870912, want=5846, limit=112 [ 346.863258] attempt to access beyond end of device [ 346.868655] loop0: rw=536870912, want=5847, limit=112 [ 346.875608] attempt to access beyond end of device [ 346.881365] loop0: rw=536870912, want=5848, limit=112 [ 346.893167] attempt to access beyond end of device [ 346.900021] loop0: rw=536870912, want=5849, limit=112 [ 346.905457] attempt to access beyond end of device [ 346.910474] loop0: rw=536870912, want=5878, limit=112 [ 346.915839] attempt to access beyond end of device [ 346.920837] loop0: rw=536870912, want=5879, limit=112 [ 346.926211] attempt to access beyond end of device [ 346.931248] loop0: rw=536870912, want=5880, limit=112 [ 346.936517] attempt to access beyond end of device [ 346.941477] loop0: rw=536870912, want=5881, limit=112 [ 346.946844] attempt to access beyond end of device [ 346.951810] loop0: rw=536870912, want=5902, limit=112 [ 346.957046] attempt to access beyond end of device [ 346.961971] loop0: rw=536870912, want=5903, limit=112 [ 346.968218] attempt to access beyond end of device [ 346.978751] loop0: rw=536870912, want=5904, limit=112 [ 346.989998] attempt to access beyond end of device [ 346.995034] loop0: rw=536870912, want=5905, limit=112 [ 347.000259] attempt to access beyond end of device [ 347.005272] loop0: rw=536870912, want=5938, limit=112 [ 347.010534] attempt to access beyond end of device [ 347.015579] loop0: rw=536870912, want=5939, limit=112 [ 347.020805] attempt to access beyond end of device [ 347.025812] loop0: rw=536870912, want=5940, limit=112 [ 347.031059] attempt to access beyond end of device [ 347.036249] loop0: rw=536870912, want=5941, limit=112 [ 347.041489] attempt to access beyond end of device [ 347.046439] loop0: rw=536870912, want=5954, limit=112 [ 347.051662] attempt to access beyond end of device [ 347.056722] loop0: rw=536870912, want=5955, limit=112 [ 347.061990] attempt to access beyond end of device [ 347.066994] loop0: rw=536870912, want=5956, limit=112 [ 347.072279] attempt to access beyond end of device [ 347.077306] loop0: rw=536870912, want=5957, limit=112 [ 347.082573] attempt to access beyond end of device [ 347.087567] loop0: rw=536870912, want=5966, limit=112 [ 347.092838] attempt to access beyond end of device [ 347.097956] loop0: rw=536870912, want=5967, limit=112 [ 347.103202] attempt to access beyond end of device [ 347.108236] loop0: rw=536870912, want=5968, limit=112 [ 347.113450] attempt to access beyond end of device [ 347.118435] loop0: rw=536870912, want=5969, limit=112 [ 347.124366] attempt to access beyond end of device [ 347.129354] loop0: rw=536870912, want=8017, limit=112 [ 347.135796] attempt to access beyond end of device [ 347.140745] loop0: rw=536870912, want=10065, limit=112 [ 347.147015] attempt to access beyond end of device [ 347.151966] loop0: rw=536870912, want=12113, limit=112 [ 347.158252] attempt to access beyond end of device [ 347.163200] loop0: rw=536870912, want=14161, limit=112 [ 347.169516] attempt to access beyond end of device [ 347.174469] loop0: rw=536870912, want=16209, limit=112 [ 347.180668] attempt to access beyond end of device [ 347.185646] loop0: rw=536870912, want=18257, limit=112 [ 347.191805] attempt to access beyond end of device [ 347.196803] loop0: rw=536870912, want=20305, limit=112 [ 347.202966] attempt to access beyond end of device [ 347.208059] loop0: rw=536870912, want=22353, limit=112 [ 347.214288] attempt to access beyond end of device [ 347.219257] loop0: rw=536870912, want=24401, limit=112 [ 347.225542] attempt to access beyond end of device [ 347.230538] loop0: rw=536870912, want=26449, limit=112 [ 347.236815] attempt to access beyond end of device [ 347.241762] loop0: rw=536870912, want=28497, limit=112 [ 347.248008] attempt to access beyond end of device [ 347.252964] loop0: rw=536870912, want=30545, limit=112 [ 347.259100] attempt to access beyond end of device [ 347.264053] loop0: rw=536870912, want=32593, limit=112 [ 347.269796] attempt to access beyond end of device [ 347.274744] loop0: rw=536870912, want=32985, limit=112 19:09:42 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x3, 0x86, 0x2}) modify_ldt$write(0x1, &(0x7f0000000340)={0x1f, 0x20000800, 0x6000, 0x0, 0x0, 0x5d0733b2, 0xffffffff, 0x1}, 0x10) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000580)) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) syncfs(0xffffffffffffffff) 19:09:42 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x170, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x80000001, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:09:42 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x10000000000020, 0x0, 0x0, 0xfffffffffffff010}, {0x6}]}, 0x10) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000540)="6cf04e8e", 0x4}], 0x1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x1f, &(0x7f0000000200)={@empty, 0x0}, &(0x7f0000000240)=0x14) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000280)={r3, 0x1, 0x6}, 0x10) 19:09:42 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x10000, 0x20) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@ipv4={[], [], @rand_addr}, @in6=@mcast1}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@local}}, &(0x7f0000000140)=0xe8) epoll_pwait(r1, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x3f, &(0x7f00000000c0)={0x40be4a08}, 0x8) lseek(r0, 0x0, 0x2) r2 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) fcntl$setstatus(r0, 0x4, 0x6000) execveat(r2, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000500)=[&(0x7f0000000440)='GPL$-/user)$^(securityproc-\x00', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='bond_slave_1\x00'], &(0x7f00000005c0)=[&(0x7f0000000540)='\x00', &(0x7f0000000580)='\x00'], 0x1000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f0000000200)='./bus\x00', 0xa) creat(&(0x7f00000001c0)='./bus\x00', 0x8) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000180)='bond_slave_1\x00') 19:09:42 executing program 4: ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) capset(&(0x7f0000000080)={0x19980330, r0}, &(0x7f0000000100)={0x1, 0x3e, 0x5, 0x47, 0x7, 0x6}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000001c0)={0x3, 0x8, 0x100000001, 0x5, 0x7, 0x8, 0x5, 0x7, 0xee76, 0x4, 0x5, 0x5}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$TIOCSBRK(r2, 0x5427) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000380)=""/246) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) 19:09:42 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x44, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x253}], 0x1, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) 19:09:42 executing program 6: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x80000, 0x4) ioctl(r0, 0x81, &(0x7f0000000040)="d3e2d18838ae5753c307be81740fe551e70c1da5d261a1685e655f8bd4b5c4a28900458133f6e2b3f81ad817cd0ff10bc31ef927c4e7922d1ea3ea448c923b68f3c0827eef677b3ee21883598cdfb7e505b00593d6fc015a722a1d0126f71b60ef3dc1374b7052f408f0b83fa211ec5cba4521da2f09b99d6d5691cfb7063aac52d491a8bf8a65acfeb1c074d02269ef7d65495c2228341baa07c49fa17e17d638a7d64caef76d18") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0xd1, &(0x7f0000000100), 0x4) 19:09:42 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) lseek(r0, 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) 19:09:42 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x170, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x80000001, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:09:42 executing program 6: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/status\x00', 0x0, 0x0) ioctl$EVIOCGREP(r0, 0x40107446, &(0x7f00000001c0)=""/174) 19:09:42 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="e2a22c770000fe14b1ed9f747a0000000000add012d64beba179930306fe2560e0a1dae976adea7c3fef752e2218ff37222674a879bd3ff6d93b6d32620edc436cb225b82c698e993d2257928a36ea77d84f4cc369214626dacd866895b104f8e22f53d767df53381d33d54ad4f2db5ab33ac0b0483f39422482a69a3b4f6905e2272f6af06da79e84f7296fc9f04bb52108c1b753d53d22164ec26402786c80ea9afa6c3591a165070868cf8e18a962c103f624066d74", @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) 19:09:42 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000000)=[0x6, 0x1000]) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) 19:09:42 executing program 5: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = dup2(r1, r0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) pwritev(r2, &(0x7f0000000180)=[{&(0x7f0000000000)="07f1a1cf4c0899dc67127f1f2cc014397de57454d368315469a3172caf7c8f365350add27d6d8272523ef679d5b4755be4feb8da01c8391fc0e726ff7878414c52e639d68a6d3858311db146d14033c42f6de99700a4abd332ddbc3087ee20a4e854701ca61ccdb6840f921210b53637722e8110a83c1e32c3080249adbb554c0ba7f59032df7cfa4966393e7b262a1232", 0x91}, {&(0x7f00000000c0)="51edc80b487931b47e5ebf569430a52d4fb596333a6eaeca9fcb43e99dace679fd6963538e9b62c084db014381df5d9867399b6b342dc611399c0342", 0x3c}], 0x2, 0x0) write$sndseq(r0, &(0x7f000000a000)=[{0x0, 0x3, 0x0, 0x0, @tick=0xfffffffffffffffd, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)={0x16, @time={0x0, 0x989680}}) [ 347.649907] attempt to access beyond end of device [ 347.655157] loop0: rw=536870912, want=130, limit=112 [ 347.674942] buffer_io_error: 142 callbacks suppressed [ 347.674948] Buffer I/O error on dev loop0, logical block 129, lost async page write [ 347.688847] attempt to access beyond end of device [ 347.693839] loop0: rw=536870912, want=131, limit=112 19:09:42 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x3fffc, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x400000001, 0x87d, 0x4}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000300)=0x3) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f000082ef0a)=""/246) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r3 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) r4 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r3) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e6e0cd849177902e8a343672dcebf1d528df058"], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper], 0x0, 0x0, &(0x7f0000000680)}) dup(r4) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000140)="ad"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000100)="c8"}) r5 = socket$inet6(0xa, 0x11000000000002, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/member\x00', 0x2, 0x0) ioctl(r5, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f00000001c0)={{0x1, 0x2, 0x2, 0x2, 0x13c}, 0x9, 0x7}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x63, &(0x7f0000000240)={'icmp6\x00'}, &(0x7f00000002c0)=0x1e) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x6f}], 0x1, 0x0) 19:09:42 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x170, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x80000001, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) [ 347.703077] Buffer I/O error on dev loop0, logical block 130, lost async page write [ 347.720542] attempt to access beyond end of device [ 347.727743] loop0: rw=536870912, want=132, limit=112 [ 347.734932] Buffer I/O error on dev loop0, logical block 131, lost async page write [ 347.744924] attempt to access beyond end of device 19:09:42 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='mountinfo\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/exec\x00') sendfile(r2, r1, &(0x7f0000000080), 0x489) ioctl$TIOCLINUX5(r2, 0x541c, &(0x7f0000000040)={0x5, 0x8001, 0xffff, 0x0, 0x10000}) [ 347.751331] loop0: rw=536870912, want=133, limit=112 [ 347.756724] Buffer I/O error on dev loop0, logical block 132, lost async page write [ 347.781395] attempt to access beyond end of device [ 347.789372] loop0: rw=536870912, want=142, limit=112 [ 347.809430] binder: 30227:30230 unknown command -670274034 [ 347.809439] binder: 30227:30230 ioctl c0306201 20008fd0 returned -22 [ 347.809663] binder: 30227:30230 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 347.840436] binder: 30227:30242 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 347.850218] 9pnet: Insufficient options for proto=fd [ 347.873978] 9pnet: Insufficient options for proto=fd [ 347.881547] Buffer I/O error on dev loop0, logical block 141, lost async page write [ 347.894026] attempt to access beyond end of device [ 347.899106] loop0: rw=536870912, want=143, limit=112 [ 347.904522] Buffer I/O error on dev loop0, logical block 142, lost async page write [ 347.913646] attempt to access beyond end of device [ 347.918664] loop0: rw=536870912, want=144, limit=112 [ 347.925033] Buffer I/O error on dev loop0, logical block 143, lost async page write [ 347.933011] attempt to access beyond end of device [ 347.937968] loop0: rw=536870912, want=145, limit=112 [ 347.943367] Buffer I/O error on dev loop0, logical block 144, lost async page write [ 347.952378] attempt to access beyond end of device [ 347.957339] loop0: rw=536870912, want=2193, limit=112 [ 347.963786] attempt to access beyond end of device [ 347.968765] loop0: rw=536870912, want=4241, limit=112 [ 347.975216] attempt to access beyond end of device [ 347.980224] loop0: rw=536870912, want=6289, limit=112 [ 347.986879] attempt to access beyond end of device [ 347.991850] loop0: rw=536870912, want=8337, limit=112 [ 347.997839] attempt to access beyond end of device [ 348.002815] loop0: rw=536870912, want=9433, limit=112 [ 348.008227] attempt to access beyond end of device [ 348.013211] loop0: rw=536870912, want=9462, limit=112 [ 348.018430] Buffer I/O error on dev loop0, logical block 9461, lost async page write [ 348.026436] attempt to access beyond end of device [ 348.031391] loop0: rw=536870912, want=9463, limit=112 [ 348.037126] Buffer I/O error on dev loop0, logical block 9462, lost async page write [ 348.045075] attempt to access beyond end of device [ 348.050028] loop0: rw=536870912, want=9464, limit=112 [ 348.055287] attempt to access beyond end of device [ 348.060228] loop0: rw=536870912, want=9465, limit=112 [ 348.065463] attempt to access beyond end of device [ 348.070423] loop0: rw=536870912, want=9486, limit=112 [ 348.075668] attempt to access beyond end of device [ 348.080618] loop0: rw=536870912, want=9487, limit=112 [ 348.085849] attempt to access beyond end of device [ 348.090793] loop0: rw=536870912, want=9488, limit=112 [ 348.096048] attempt to access beyond end of device [ 348.100999] loop0: rw=536870912, want=9489, limit=112 [ 348.106269] attempt to access beyond end of device [ 348.111206] loop0: rw=536870912, want=9522, limit=112 [ 348.116458] attempt to access beyond end of device [ 348.121413] loop0: rw=536870912, want=9523, limit=112 [ 348.126651] attempt to access beyond end of device [ 348.131603] loop0: rw=536870912, want=9524, limit=112 [ 348.136834] attempt to access beyond end of device [ 348.141778] loop0: rw=536870912, want=9525, limit=112 [ 348.147199] attempt to access beyond end of device [ 348.152155] loop0: rw=536870912, want=9538, limit=112 [ 348.157410] attempt to access beyond end of device [ 348.162353] loop0: rw=536870912, want=9539, limit=112 [ 348.168009] attempt to access beyond end of device [ 348.172972] loop0: rw=536870912, want=9540, limit=112 [ 348.178211] attempt to access beyond end of device [ 348.183177] loop0: rw=536870912, want=9541, limit=112 [ 348.189129] attempt to access beyond end of device [ 348.194093] loop0: rw=536870912, want=11597, limit=112 [ 348.200442] attempt to access beyond end of device [ 348.205429] loop0: rw=536870912, want=13645, limit=112 [ 348.211595] attempt to access beyond end of device [ 348.216564] loop0: rw=536870912, want=15693, limit=112 [ 348.222794] attempt to access beyond end of device [ 348.227790] loop0: rw=536870912, want=17741, limit=112 [ 348.233988] attempt to access beyond end of device [ 348.239168] loop0: rw=536870912, want=19789, limit=112 [ 348.245420] attempt to access beyond end of device [ 348.250372] loop0: rw=536870912, want=21837, limit=112 [ 348.256921] attempt to access beyond end of device [ 348.261882] loop0: rw=536870912, want=23885, limit=112 [ 348.268147] attempt to access beyond end of device [ 348.273101] loop0: rw=536870912, want=25933, limit=112 [ 348.279382] attempt to access beyond end of device [ 348.284341] loop0: rw=536870912, want=27981, limit=112 [ 348.290676] attempt to access beyond end of device [ 348.296028] loop0: rw=536870912, want=30029, limit=112 [ 348.302294] attempt to access beyond end of device [ 348.307332] loop0: rw=536870912, want=32077, limit=112 [ 348.313229] attempt to access beyond end of device [ 348.318200] loop0: rw=536870912, want=32989, limit=112 [ 348.596338] binder: 30227:30242 unknown command -670274034 [ 348.602148] binder: 30227:30242 ioctl c0306201 20008fd0 returned -22 [ 348.609662] binder: 30227:30263 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 348.618365] binder: 30227:30242 BC_DEAD_BINDER_DONE 0000000000000000 not found 19:09:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x3, 0x86, 0x2}) modify_ldt$write(0x1, &(0x7f0000000340)={0x1f, 0x20000800, 0x6000, 0x0, 0x0, 0x5d0733b2, 0xffffffff, 0x1}, 0x10) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000580)) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:09:43 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f00000002c0)=0x6, 0x3) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100), 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/raw\x00') r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000010}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xc0, r3, 0x805, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x8}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x36}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0xffff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fff}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x38}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x4}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2c}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x76fc}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20048080}, 0x8000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r4, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 19:09:43 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='bond_slave_0\x00') ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) ioctl$RTC_PIE_OFF(r0, 0x7006) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000180)='cifs.idmap\x00', 0x0) 19:09:43 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x170, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x80000001, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:09:43 executing program 6: openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/user\x00', 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000788000)=0x2, 0x4) r0 = accept(0xffffffffffffff9c, 0x0, &(0x7f0000000380)) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x4e24, @broadcast}, {0x1, @random="59a310eebccc"}, 0x0, {0x2, 0x4e21, @broadcast}, 'team0\x00'}) socketpair$inet(0x2, 0x80003, 0x400, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000300)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000140)) r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f0000000540)="00eb0c432d0174df5f00000000", 0x3) ioctl$TIOCLINUX2(r4, 0x541c, &(0x7f00000003c0)={0x2, 0xffffffffffffffab, 0x0, 0x100000000, 0x1, 0x80000001}) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x8000, 0x0) sendfile(r3, r3, &(0x7f0000000000), 0x2000005) getsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000002d40)={@remote}, &(0x7f0000002d80)=0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000003340)=[{{&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @loopback}, 0x2, 0x0, 0x0, 0x3}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)}], 0x1, &(0x7f0000000400)=ANY=[]}, 0x2}], 0x1, 0x4040000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) 19:09:43 executing program 2: r0 = socket(0x12, 0x2, 0xe7) write(r0, &(0x7f0000000100)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100020423dcffdf00", 0x1f) 19:09:43 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0xfffffffffffffffc) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000000000000000000000000000000000000700ae2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) 19:09:43 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="80fd"}], 0xbe, 0x0) 19:09:43 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) sendto$inet(r0, &(0x7f0000000180)="3c40b494a0b331de673404444e218c6d3138d176054ed81b8e6574df6f7153cebbfa0f563064277853436da81f1bee25e2778b5cbc9ccf2756e7a97f64e6bbdd3ae72aa20ef8d66abf3f3160fa16b240fe031c1d8f3b1fbd20ba8a833f9d642cbfd192e102798476337a79159d4e0a7589c065fc2a36800e74f3df72b38391feb2206f55c9dcbb4129c8ab3140d5061352d80ad9abeabbc3754e9bc6b9277fb49964beefa52f7498c051c07d1aabc2a74bc72c80008536eb92e1cc58bdb12266fb62ba15eeea362cbf9ed881110bd4901eac3992a6c894", 0xd7, 0x20048080, &(0x7f0000000000)={0x2, 0x3, @multicast1}, 0x10) 19:09:43 executing program 2: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x3, 0x86, 0x2}) modify_ldt$write(0x1, &(0x7f0000000340)={0x1f, 0x20000800, 0x6000, 0x0, 0x0, 0x5d0733b2, 0xffffffff, 0x1}, 0x10) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000580)) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) syncfs(0xffffffffffffffff) [ 348.718455] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 348.731421] 9pnet: Insufficient options for proto=fd [ 348.753787] 9pnet: Insufficient options for proto=fd 19:09:43 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x170, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x80000001, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:09:43 executing program 7: pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xfffffffffffffe5c}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) 19:09:43 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000180), &(0x7f0000000000)=0x68) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) 19:09:43 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000180)="c7cb80052851cf03afc36515f4288e7eff2afcf3248a75f7ff7c363e2c2329b88d01cbec196c235c89fc44ae9e338a827063a20ced57095ffcfcd86d04d1c5caea7adbe9466b46f0d4eb4576549c6b62125c9b7fd6c2496bcd5aa88cf3a9461b802717cdf540bdd9808e4cbd5dd9100341e873038b953cfee7e63f77746c0cd689741b82362a604ab0012a42bc8f50bc644452dbdab5df3610c2a80ca880fcbbf6376f566cdbd1bb82589d2ed3ee871c95023858daad7a54e01936009811dfbef1ce12095e55ac4e544c818cc55833913137dad0fb06cec3dd43da02299b9001657bd140bc8e3acc3c8375f56e8462f0d8c43fc5862dd658cfe076558b19bd13") ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x1, r1}) [ 348.769817] attempt to access beyond end of device [ 348.775925] 9pnet: Insufficient options for proto=fd [ 348.780026] 9pnet: Insufficient options for proto=fd [ 348.813905] loop0: rw=536870912, want=130, limit=112 19:09:43 executing program 6: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000440)) r1 = getpgid(0x0) ioprio_set$pid(0x1, r1, 0x168) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/mls\x00', 0x0, 0x0) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000000340)=""/158) r3 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000040)='/dev/pktcdvd/control\x00', 0x440040, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8080}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xf8, r4, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x74, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x26, 0x4}}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x43}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x7f}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_AF={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x56d3}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x4000001) [ 348.820321] attempt to access beyond end of device [ 348.830206] loop0: rw=536870912, want=131, limit=112 19:09:43 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/keychord\x00', 0x4000, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000080)={'ip\x00\x00\x00\x000\x00', {0x2, 0x4e21}}) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x4000, 0x0) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000140)=""/94) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f00000000c0)=0x80) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xc, 0x31, 0xffffffffffffffff, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000000)) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000040)) lseek(0xffffffffffffffff, 0x0, 0x3) [ 348.869337] attempt to access beyond end of device [ 348.898454] loop0: rw=536870912, want=132, limit=112 [ 348.950209] attempt to access beyond end of device [ 348.974332] loop0: rw=536870912, want=133, limit=112 [ 348.980442] attempt to access beyond end of device [ 348.985659] loop0: rw=536870912, want=142, limit=112 [ 348.991573] attempt to access beyond end of device [ 348.996843] loop0: rw=536870912, want=143, limit=112 [ 349.002160] attempt to access beyond end of device [ 349.007238] loop0: rw=536870912, want=144, limit=112 [ 349.014869] attempt to access beyond end of device [ 349.019875] loop0: rw=536870912, want=145, limit=112 [ 349.026266] attempt to access beyond end of device [ 349.031449] loop0: rw=536870912, want=2193, limit=112 [ 349.038535] attempt to access beyond end of device [ 349.043720] loop0: rw=536870912, want=4241, limit=112 [ 349.055792] attempt to access beyond end of device [ 349.068556] loop0: rw=536870912, want=5977, limit=112 [ 349.074292] attempt to access beyond end of device [ 349.079349] loop0: rw=536870912, want=6006, limit=112 [ 349.084748] attempt to access beyond end of device [ 349.089768] loop0: rw=536870912, want=6007, limit=112 [ 349.095187] attempt to access beyond end of device [ 349.100218] loop0: rw=536870912, want=6008, limit=112 [ 349.106050] attempt to access beyond end of device [ 349.111069] loop0: rw=536870912, want=6009, limit=112 [ 349.116444] attempt to access beyond end of device [ 349.121577] loop0: rw=536870912, want=6030, limit=112 [ 349.126878] attempt to access beyond end of device [ 349.132013] loop0: rw=536870912, want=6031, limit=112 [ 349.137298] attempt to access beyond end of device [ 349.142412] loop0: rw=536870912, want=6032, limit=112 [ 349.147731] attempt to access beyond end of device [ 349.152863] loop0: rw=536870912, want=6033, limit=112 [ 349.158193] attempt to access beyond end of device [ 349.163336] loop0: rw=536870912, want=6082, limit=112 [ 349.168639] attempt to access beyond end of device [ 349.173794] loop0: rw=536870912, want=6083, limit=112 [ 349.179089] attempt to access beyond end of device [ 349.184219] loop0: rw=536870912, want=6084, limit=112 [ 349.189561] attempt to access beyond end of device [ 349.194753] loop0: rw=536870912, want=6085, limit=112 [ 349.200170] attempt to access beyond end of device [ 349.205291] loop0: rw=536870912, want=6094, limit=112 [ 349.210593] attempt to access beyond end of device [ 349.215958] loop0: rw=536870912, want=6095, limit=112 [ 349.221406] attempt to access beyond end of device [ 349.226555] loop0: rw=536870912, want=6096, limit=112 [ 349.231967] attempt to access beyond end of device [ 349.237216] loop0: rw=536870912, want=6097, limit=112 [ 349.243936] attempt to access beyond end of device [ 349.249125] loop0: rw=536870912, want=8145, limit=112 [ 349.256244] attempt to access beyond end of device [ 349.261293] loop0: rw=536870912, want=10193, limit=112 [ 349.268560] attempt to access beyond end of device [ 349.273752] loop0: rw=536870912, want=12241, limit=112 [ 349.280924] attempt to access beyond end of device [ 349.293081] loop0: rw=536870912, want=14289, limit=112 [ 349.300168] attempt to access beyond end of device [ 349.305712] loop0: rw=536870912, want=16337, limit=112 [ 349.311970] attempt to access beyond end of device [ 349.316951] loop0: rw=536870912, want=18385, limit=112 [ 349.323351] attempt to access beyond end of device [ 349.328309] loop0: rw=536870912, want=20433, limit=112 [ 349.334547] attempt to access beyond end of device [ 349.339496] loop0: rw=536870912, want=22481, limit=112 [ 349.346096] attempt to access beyond end of device [ 349.351041] loop0: rw=536870912, want=24529, limit=112 [ 349.353967] attempt to access beyond end of device [ 349.353973] loop2: rw=536870912, want=130, limit=112 [ 349.353985] attempt to access beyond end of device [ 349.353990] loop2: rw=536870912, want=131, limit=112 [ 349.353999] attempt to access beyond end of device [ 349.354003] loop2: rw=536870912, want=132, limit=112 [ 349.354012] attempt to access beyond end of device [ 349.354016] loop2: rw=536870912, want=133, limit=112 [ 349.354025] attempt to access beyond end of device [ 349.354029] loop2: rw=536870912, want=142, limit=112 [ 349.354038] attempt to access beyond end of device [ 349.354042] loop2: rw=536870912, want=143, limit=112 [ 349.354051] attempt to access beyond end of device [ 349.354055] loop2: rw=536870912, want=144, limit=112 [ 349.354067] attempt to access beyond end of device [ 349.354071] loop2: rw=536870912, want=145, limit=112 [ 349.354831] attempt to access beyond end of device [ 349.354836] loop2: rw=536870912, want=1881, limit=112 [ 349.355138] attempt to access beyond end of device [ 349.355143] loop2: rw=536870912, want=1910, limit=112 [ 349.355152] attempt to access beyond end of device [ 349.355156] loop2: rw=536870912, want=1911, limit=112 [ 349.355165] attempt to access beyond end of device [ 349.355170] loop2: rw=536870912, want=1912, limit=112 [ 349.355179] attempt to access beyond end of device [ 349.355183] loop2: rw=536870912, want=1913, limit=112 [ 349.355192] attempt to access beyond end of device [ 349.355196] loop2: rw=536870912, want=1934, limit=112 [ 349.355205] attempt to access beyond end of device [ 349.355209] loop2: rw=536870912, want=1935, limit=112 [ 349.355219] attempt to access beyond end of device [ 349.355223] loop2: rw=536870912, want=1936, limit=112 [ 349.355232] attempt to access beyond end of device [ 349.355236] loop2: rw=536870912, want=1937, limit=112 [ 349.355250] attempt to access beyond end of device [ 349.355254] loop2: rw=536870912, want=1986, limit=112 [ 349.355263] attempt to access beyond end of device [ 349.355267] loop2: rw=536870912, want=1987, limit=112 [ 349.355279] attempt to access beyond end of device [ 349.355283] loop2: rw=536870912, want=1988, limit=112 [ 349.355292] attempt to access beyond end of device [ 349.355296] loop2: rw=536870912, want=1989, limit=112 [ 349.355305] attempt to access beyond end of device [ 349.355310] loop2: rw=536870912, want=1998, limit=112 [ 349.355319] attempt to access beyond end of device [ 349.355323] loop2: rw=536870912, want=1999, limit=112 [ 349.355332] attempt to access beyond end of device [ 349.355336] loop2: rw=536870912, want=2000, limit=112 [ 349.355345] attempt to access beyond end of device [ 349.355349] loop2: rw=536870912, want=2001, limit=112 [ 349.356222] attempt to access beyond end of device [ 349.356226] loop2: rw=536870912, want=4049, limit=112 [ 349.358137] attempt to access beyond end of device [ 349.358143] loop2: rw=536870912, want=6097, limit=112 [ 349.359350] attempt to access beyond end of device [ 349.359355] loop2: rw=536870912, want=8145, limit=112 [ 349.360554] attempt to access beyond end of device [ 349.360559] loop2: rw=536870912, want=10193, limit=112 [ 349.361898] attempt to access beyond end of device [ 349.361903] loop2: rw=536870912, want=12241, limit=112 [ 349.363225] attempt to access beyond end of device [ 349.363230] loop2: rw=536870912, want=14289, limit=112 [ 349.364521] attempt to access beyond end of device [ 349.364526] loop2: rw=536870912, want=16337, limit=112 [ 349.365736] attempt to access beyond end of device [ 349.365740] loop2: rw=536870912, want=18385, limit=112 [ 349.366964] attempt to access beyond end of device [ 349.366969] loop2: rw=536870912, want=20433, limit=112 [ 349.368233] attempt to access beyond end of device [ 349.368238] loop2: rw=536870912, want=22481, limit=112 [ 349.369440] attempt to access beyond end of device [ 349.369445] loop2: rw=536870912, want=24529, limit=112 [ 349.370674] attempt to access beyond end of device [ 349.370678] loop2: rw=536870912, want=26577, limit=112 [ 349.372691] attempt to access beyond end of device [ 349.372697] loop2: rw=536870912, want=28625, limit=112 [ 349.374233] attempt to access beyond end of device [ 349.374239] loop2: rw=536870912, want=30673, limit=112 [ 349.375456] attempt to access beyond end of device [ 349.375460] loop2: rw=536870912, want=32721, limit=112 [ 349.375918] attempt to access beyond end of device [ 349.375922] loop2: rw=536870912, want=32993, limit=112 [ 349.775219] attempt to access beyond end of device [ 349.780143] loop0: rw=536870912, want=26577, limit=112 [ 349.786309] attempt to access beyond end of device [ 349.791289] loop0: rw=536870912, want=28625, limit=112 [ 349.797667] attempt to access beyond end of device [ 349.802605] loop0: rw=536870912, want=30673, limit=112 [ 349.809017] attempt to access beyond end of device [ 349.813960] loop0: rw=536870912, want=32721, limit=112 [ 349.819884] attempt to access beyond end of device [ 349.824825] loop0: rw=536870912, want=32993, limit=112 19:09:44 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x3, 0x86, 0x2}) modify_ldt$write(0x1, &(0x7f0000000340)={0x1f, 0x20000800, 0x6000, 0x0, 0x0, 0x5d0733b2, 0xffffffff, 0x1}, 0x10) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000580)) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:09:44 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x170, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x80000001, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:09:44 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000180)=""/72) 19:09:44 executing program 6: r0 = memfd_create(&(0x7f0000000240)='\t', 0x5) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000140)={0x8001, 0x800, 0x101, 0x6f800000000000, 0xfffffffffffff801, 0x9a91}) write$FUSE_DIRENT(r0, &(0x7f0000000040)={0x68, 0xfffffffffffffffe, 0x4, [{0x2, 0x6, 0x16, 0x7f, '{.-#@trusted]bdev!self'}, {0x1, 0x81, 0xd, 0x401, '/dev/snd/seq\x00'}]}, 0x68) r1 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000280)="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", 0xfb}], 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f00000000c0)={0x6, 0x3, 0x13e, 0x8000, 0x80000001, 0x9}) 19:09:44 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x4e20, 0x2, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x10}}, 0x9}}, 0xb8c2, 0x3, 0x0, "21b30fa07aebb7f42b8ef8d9139d4a47c29d9b29a8773b01cad1864884886bc658cbeb91a3068096c24ba9c234167c53b8a046edab89d2dd15987659d6de39ed2279c4c30fb72e6d0a2a6611acd93620"}, 0xd8) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) sendto$inet(r2, &(0x7f0000000180)="7f", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x0, @dev}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000140)=0xc) ioprio_get$uid(0x3, r3) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") sendto$inet(r0, &(0x7f00000004c0)="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", 0x1000, 0x10, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000100)='lo\x00', 0x10) sendto$inet(r2, &(0x7f0000000000), 0x0, 0xc0, &(0x7f00000000c0), 0x334) 19:09:44 executing program 3: geteuid() r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000380)=""/247) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) 19:09:44 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x400, 0x0) ioctl$TIOCLINUX2(r2, 0x541c, &(0x7f0000000380)={0x2, 0xfffffffffffeffff, 0x9, 0x9, 0x5f, 0x9}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) 19:09:44 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100000008912, &(0x7f00000005c0)="0a49c80700315f85714070") socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x4aae}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = gettid() sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7f) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x1) write$binfmt_elf64(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="02"], 0x1) fcntl$setstatus(r3, 0x4, 0x4000) write$selinux_access(r3, &(0x7f0000000000)={'system_u:object_r:etc_t:s0', 0x20, '/usr/sbin/ntpd'}, 0xfffffeff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) listen(r3, 0x401) 19:09:44 executing program 4: r0 = dup(0xffffffffffffff9c) recvfrom$unix(r0, &(0x7f00000015c0)=""/87, 0x57, 0x2000, &(0x7f0000001640)=@file={0x0, './file0\x00'}, 0x6e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="80fd02090003", 0x6}], 0x1, 0x0) 19:09:44 executing program 6: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x9) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff91d9063a}, 0x0, 0x0, 0xffffffffffffffff, 0x1) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000300)={{{@in=@broadcast, @in6=@dev}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f0000000400)=0xe8) r3 = socket$inet6(0xa, 0x2, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x200) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000004c0)=0x282, 0x4) sendmmsg(r3, &(0x7f00000002c0), 0x400000000000174, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x31d) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x248040, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x1000) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000180)=0x2) accept4(r3, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000240)=0x80, 0x80000) ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5) flistxattr(r2, &(0x7f00000001c0), 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f00000002c0)) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000080)) 19:09:44 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x21) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) 19:09:44 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x80000001, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:09:44 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0xf5201e211ea06a05, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f0000000000), 0x1000000000000053, 0x0) [ 350.201641] attempt to access beyond end of device [ 350.211577] loop0: rw=536870912, want=114, limit=112 [ 350.233257] attempt to access beyond end of device 19:09:44 executing program 5: rt_sigprocmask(0x2, &(0x7f0000000100)={0x200}, &(0x7f00000001c0), 0x8) memfd_create(&(0x7f0000000580)="2ddd36e6560ed3de7621d7c62b144142d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b21cd6cd95a0e1bbfdd61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127710e90f2cd72b82865874ca0dd6205daeddf2b2365295065b0087e569b6589482ac31e076e98f88b55d2faf0fb4c7cdd9d333d0487735e26e747c3e7d6e57ab1bffd69c005a7", 0x0) add_key$keyring(&(0x7f0000000780)='keyring\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x4002, 0x0) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000480)) symlink(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280)='./file0/file1\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000340)=0xc) get_robust_list(0x0, &(0x7f0000000780)=&(0x7f0000000740)={&(0x7f0000000180)={&(0x7f0000000140)}, 0x0, &(0x7f0000000700)={&(0x7f0000000280)}}, &(0x7f00000007c0)=0x18) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x40, 0x0) 19:09:44 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000380)=""/246) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x9}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xa4, r1, 0x204, 0x70bd27, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x277}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x13}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5b}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x62}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x20}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xded}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9732}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40080}, 0x800) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) [ 350.253339] loop0: rw=536870912, want=115, limit=112 [ 350.258462] attempt to access beyond end of device [ 350.263492] loop0: rw=536870912, want=116, limit=112 [ 350.268628] attempt to access beyond end of device [ 350.278481] loop0: rw=536870912, want=117, limit=112 [ 350.284822] attempt to access beyond end of device [ 350.289780] loop0: rw=536870912, want=130, limit=112 [ 350.300135] attempt to access beyond end of device [ 350.305344] loop0: rw=536870912, want=131, limit=112 [ 350.310478] attempt to access beyond end of device [ 350.315768] loop0: rw=536870912, want=132, limit=112 [ 350.321047] attempt to access beyond end of device [ 350.329662] loop0: rw=536870912, want=133, limit=112 [ 350.336013] attempt to access beyond end of device [ 350.341021] loop0: rw=536870912, want=2189, limit=112 [ 350.348784] attempt to access beyond end of device [ 350.353841] loop0: rw=536870912, want=4237, limit=112 [ 350.360524] attempt to access beyond end of device [ 350.365762] loop0: rw=536870912, want=6285, limit=112 [ 350.372574] attempt to access beyond end of device [ 350.377503] loop0: rw=536870912, want=8333, limit=112 [ 350.384066] attempt to access beyond end of device [ 350.389057] loop0: rw=536870912, want=9301, limit=112 [ 350.395369] attempt to access beyond end of device [ 350.400350] loop0: rw=536870912, want=9302, limit=112 [ 350.405842] attempt to access beyond end of device [ 350.410930] loop0: rw=536870912, want=9303, limit=112 [ 350.418562] attempt to access beyond end of device [ 350.425316] loop0: rw=536870912, want=9304, limit=112 [ 350.430516] attempt to access beyond end of device [ 350.447689] loop0: rw=536870912, want=9305, limit=112 19:09:45 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000000)) [ 350.455040] attempt to access beyond end of device [ 350.461558] loop0: rw=536870912, want=9334, limit=112 [ 350.493200] attempt to access beyond end of device [ 350.509708] loop0: rw=536870912, want=9335, limit=112 [ 350.516610] attempt to access beyond end of device [ 350.545215] loop0: rw=536870912, want=9336, limit=112 [ 350.562132] attempt to access beyond end of device [ 350.580385] loop0: rw=536870912, want=9337, limit=112 [ 350.587489] attempt to access beyond end of device [ 350.592759] loop0: rw=536870912, want=9358, limit=112 [ 350.607077] attempt to access beyond end of device [ 350.612803] loop0: rw=536870912, want=9359, limit=112 [ 350.618581] attempt to access beyond end of device [ 350.623554] loop0: rw=536870912, want=9360, limit=112 [ 350.628916] attempt to access beyond end of device [ 350.633968] loop0: rw=536870912, want=9361, limit=112 [ 350.639937] attempt to access beyond end of device [ 350.645031] loop0: rw=536870912, want=9394, limit=112 [ 350.651493] attempt to access beyond end of device [ 350.656682] loop0: rw=536870912, want=9395, limit=112 [ 350.661982] attempt to access beyond end of device [ 350.666978] loop0: rw=536870912, want=9396, limit=112 [ 350.675125] attempt to access beyond end of device [ 350.680096] loop0: rw=536870912, want=9397, limit=112 [ 350.685380] attempt to access beyond end of device [ 350.690352] loop0: rw=536870912, want=9410, limit=112 [ 350.695613] attempt to access beyond end of device [ 350.700560] loop0: rw=536870912, want=9411, limit=112 [ 350.705797] attempt to access beyond end of device [ 350.710711] loop0: rw=536870912, want=9412, limit=112 [ 350.716185] attempt to access beyond end of device [ 350.721144] loop0: rw=536870912, want=9413, limit=112 [ 350.726404] attempt to access beyond end of device [ 350.731345] loop0: rw=536870912, want=9422, limit=112 [ 350.736550] attempt to access beyond end of device [ 350.741469] loop0: rw=536870912, want=9423, limit=112 [ 350.746655] attempt to access beyond end of device [ 350.751567] loop0: rw=536870912, want=9424, limit=112 [ 350.756821] attempt to access beyond end of device [ 350.761763] loop0: rw=536870912, want=9425, limit=112 [ 350.767619] attempt to access beyond end of device [ 350.772530] loop0: rw=536870912, want=11473, limit=112 [ 350.779107] attempt to access beyond end of device [ 350.792906] loop0: rw=536870912, want=13521, limit=112 [ 350.799592] attempt to access beyond end of device [ 350.804521] loop0: rw=536870912, want=15569, limit=112 [ 350.810759] attempt to access beyond end of device [ 350.815746] loop0: rw=536870912, want=17617, limit=112 [ 350.821831] attempt to access beyond end of device [ 350.827012] loop0: rw=536870912, want=19665, limit=112 [ 350.833046] attempt to access beyond end of device [ 350.838029] loop0: rw=536870912, want=21713, limit=112 [ 350.844620] attempt to access beyond end of device [ 350.849576] loop0: rw=536870912, want=23761, limit=112 [ 350.858955] attempt to access beyond end of device [ 350.863910] loop0: rw=536870912, want=25809, limit=112 [ 350.870047] attempt to access beyond end of device [ 350.874982] loop0: rw=536870912, want=27857, limit=112 [ 350.881667] attempt to access beyond end of device [ 350.886641] loop0: rw=536870912, want=29905, limit=112 [ 350.892805] attempt to access beyond end of device [ 350.897769] loop0: rw=536870912, want=31953, limit=112 [ 350.903665] attempt to access beyond end of device [ 350.908657] loop0: rw=536870912, want=32985, limit=112 19:09:45 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x3, 0x86, 0x2}) modify_ldt$write(0x1, &(0x7f0000000340)={0x1f, 0x20000800, 0x6000, 0x0, 0x0, 0x5d0733b2, 0xffffffff, 0x1}, 0x10) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000580)) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) 19:09:45 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) getsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000000), &(0x7f0000000080)=0x4) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) 19:09:45 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x80000001, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:09:45 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x2) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getpeername(r2, &(0x7f0000000600)=@ipx, &(0x7f0000000500)=0x80) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="a989d572546eff0f66000000000000", @ANYRESHEX=r0, @ANYBLOB="02ee0000000100", @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rfkill\x00', 0x103001, 0x0) openat$cgroup_procs(r3, &(0x7f0000000380)='tasks\x00', 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x42903010}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000003e0000002cbd7000fedb80250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) 19:09:45 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) bind(r0, &(0x7f0000000180)=@l2={0x1f, 0x7f, {0x5, 0x8, 0x0, 0x8, 0x101, 0x9}, 0x2, 0x5}, 0x80) write$P9_RLINK(r0, &(0x7f0000000100)={0x7, 0x47, 0x2}, 0x7) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0xffffffff, 0x200, 0x4}) ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f0000000000)={0x6, 0x80000001}) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) 19:09:45 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x4600, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f00000000c0)={'rose0\x00', 0x3}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000001000), 0xd88) capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8)) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x0, 0x6, 0x100}}, 0x50) 19:09:45 executing program 6: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x9) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff91d9063a}, 0x0, 0x0, 0xffffffffffffffff, 0x1) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000300)={{{@in=@broadcast, @in6=@dev}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f0000000400)=0xe8) r3 = socket$inet6(0xa, 0x2, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x200) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000004c0)=0x282, 0x4) sendmmsg(r3, &(0x7f00000002c0), 0x400000000000174, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x31d) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x248040, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x1000) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000180)=0x2) accept4(r3, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000240)=0x80, 0x80000) ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5) flistxattr(r2, &(0x7f00000001c0), 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f00000002c0)) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000080)) 19:09:45 executing program 2: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x9) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff91d9063a}, 0x0, 0x0, 0xffffffffffffffff, 0x1) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000300)={{{@in=@broadcast, @in6=@dev}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f0000000400)=0xe8) r3 = socket$inet6(0xa, 0x2, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x200) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000004c0)=0x282, 0x4) sendmmsg(r3, &(0x7f00000002c0), 0x400000000000174, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x31d) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x248040, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x1000) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000180)=0x2) accept4(r3, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000240)=0x80, 0x80000) ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5) flistxattr(r2, &(0x7f00000001c0), 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f00000002c0)) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000080)) 19:09:45 executing program 5: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x3, 0x86, 0x2}) modify_ldt$write(0x1, &(0x7f0000000340)={0x1f, 0x20000800, 0x6000, 0x0, 0x0, 0x5d0733b2, 0xffffffff, 0x1}, 0x10) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000580)) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:09:45 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x0, 0x0) readv(r0, &(0x7f0000002580)=[{&(0x7f0000000180)=""/253, 0xfd}, {&(0x7f0000000280)=""/202, 0xca}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/79, 0x4f}, {&(0x7f0000001400)=""/68, 0x44}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000080)=""/25, 0x19}, {&(0x7f0000002480)=""/196, 0xc4}], 0x8) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000000)) 19:09:45 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="34000000110010c70000ecffffff000000000000000000000000000000000c00152200008000000000000eadbe9a0149e4a8d8882b756b994c5d839b7f5400000000000017ad88211a26464504ac799ae9c443b7f1085272399379909396eb4cd96707008dff711a104a11a73fbb6a4d6f5a7c2a04356ec8cb217f516bdbec3c273b8ae079b67ae1be7e4489c230f566c3e4a4f346470323ce2d2eae2161420000007dd257d7529f92b6331e02e88fd70102ee2ae74738cf6cc8e45b"], 0x34}}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x501000, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f000082ef0a)=""/246) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000080)=""/63) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000000)) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) getdents64(r1, &(0x7f0000000180)=""/153, 0x99) fchmodat(r1, &(0x7f0000000100)='./file0\x00', 0x0) [ 351.315211] 9pnet_virtio: no channels available for device (null) [ 351.340877] attempt to access beyond end of device [ 351.340884] loop0: rw=536870912, want=130, limit=112 [ 351.340897] attempt to access beyond end of device 19:09:45 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x2, 0x2, 0x80000001, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) [ 351.340902] loop0: rw=536870912, want=131, limit=112 [ 351.340911] attempt to access beyond end of device [ 351.340916] loop0: rw=536870912, want=132, limit=112 19:09:45 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x4080, 0x28) accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14, 0x80000) connect$packet(r0, &(0x7f00000001c0)={0x11, 0xf5, r1, 0x1, 0x2, 0x6, @random="bf9a67bbaf90"}, 0x14) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) signalfd4(r2, &(0x7f0000000000)={0x7}, 0x8, 0x80000) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0x101) [ 351.340926] attempt to access beyond end of device 19:09:45 executing program 3: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x100, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101008, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000020}, 0xc, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="5c1100000e0f00002dbd7000fddbdf250c000006c887735b2dd281eccf205c3b836444dba75b59adc4275506c25881f27ce1bd2dbfbc29affc5a24916264dbccab1dbcc976aa86087cc67615b21ba799b7f580c713a5f3b05e4b4c6cd3fa63bb127538b9bb4cbcb44a9df68f5b84107300d7d472f91d9437bab8c91b2151946e0e1afd7e8305807cca53ba325ca47dfd4bf5ee3770004d861e4caf010ae16412db5161f7614d52ed2233767f032d3bc9b0ad18e203cba569573131b8287888021940c6898cbd4025d052fd5ce2761373a7160a8dced87bcaad081240056c92ef68f836f6094a5ad096eaff37597dcd0a3b5425220eb66c7dd21c4523664aee814e13649c186afa471cb008ca34ec7ff0dcafcb5f4f336d743d5bd1c5bb44f3bc7f7e40e6c3c19c69bdaf89108302d3832418c4a9403562f17d590df6bc390fc5bf8caf88d95e90b54dbac36da5894b117b640df922ca620fff748d4811cde971d55986dca843e1a7702f0da63e884f53d166c929126386e4b18f7eb5b97f88b8fc3d2b62bcb8a70ff2f8c5da725462e3a3cf13a5a88e549f32656a67ba7dbfa34490f99ab10aea12cad53eb7547c1bf78c6be4f7e2ad27ba8fe3c176f01e3d85da58ecd44c514bffe582356726f143a9816aaca175c8e57cafb0cbb4d7c33491b831d93b83359c606ea04f5943283bc01e161a98395e0cfc437c4121fad75025e18ef3b7d942d46e6662f347265475d6c987e2d164fdc6a0e8a63db307aa2554f28ae4d63734c6b0cec6facc048c010c79a63654345c6f172c7203a8f2c2c2118bac75923d36c25737c814ea8c470bb802e69b99905f26c3d482851e989172bb0972261afe0e3ba13d238ce7119940459ea7db73abc8a01c2ad473e84e99e2fd17f9bbd0ec6ae57961924dab7476a937b45662bdc5219374ba0fb48f511dda6a5f6a462858c336ed5728e5327a5f7170018fdd666dab6ea525400ef773a139cf422a62735351f41dece718a56b6188fb5cafcae5f1e18905b7ae9e57b8ba6051c37fe92fa7f645afcf6ae2275954c17f87a669493bd0bbbbac1ea2593ba73a1611800d7be68c4c2f30bafc454f35a000d2fa70f7837eab2ca0981a1cbfae578e178f116f8ea52296f2e6021f2a1a1dcd6afd17b3afb3fe73b9e006ff39977c6904af9d409f8e2d06012baa5c26bfccfd66b0cf8449a9b494737deb7b347bc959cb6683b4038aa64273dd4cba0b18814e6ad4d2764e6c8278fc0ee8472b0455bfc3df8e9e3448315dccb4e4f6eb211d0616dba2fc054f5c62d26e8909e4833c68c463de3c1b55d7e02f7d7d5a189c2f56cf6d6468f2bad33562e470f7ff64d046c9886b85a94f53ded432e74d80c3f40a360c5474d7da35a5ad6a9cd224f31985398811879d99f07bfe7d8910ab1a9d0421d72492befc96771439d19da418f8051081411a5425e28690ead6f6d5569fc782f677f0290d47db12f230ed638dbb7b59becebd49ce7d90aed6ff400d0357d8f9c33186377421d147bd9bd9e35eacd5ff44389ae84b136d140839492774579b801f48d79fac8b7083424da43477e4ae8c5968a8c61d181bf667c412d0a95292e1ae38e7b1ca2b8fe8b0915464306c74d94fab09aa151c503ef6daedd42c10ce66fa33c2fba35f5dcfcf5cd7b8ad33a8b38c6ee033c7a6942be7581551f03b3e4f60fc6f9b4118ac62b49c16eb8b5738c9f68863762d5b1058efcb829040a96feda5fb174d496c7eb3471a35e662c00c03f2dc41dfbc539738fa151148ce2bcedc9c46d6a9310eaa8bb30cda2e8685fd6e67ff7c56f5eaeda0f96b4cfd1588fa95ede7afc6c3cb07c79fe249970e26e2f1e56acb421d2a33c22b979b4fec89172a24a4c09ed2d4343f4c2db8fb6d541b57e3f3d97d7c23f03c2ae5f42ea4de337c688d746ba406bf8bb66174f1628b691b8e9a2e64ebdbbb2a7f879ddad478b7a8fc51eb27714ab9b3108384c027386922f21dc78dd3601e75eacfbb6e81fed771f0025abca989d53144f513845196157e043ad35028aa6188792c839685aa99598310b78ae75c1a1116638d911a4a07a5d21400fa41848c89af6fa72f6ddac20d9b6dd6cff9a6581e4136f686e6006c4e7c442f5f7fa63832973e05570368d6e8a6eee2903c1e2505c204fa948436f032bbd8622b80113d28090d25775ddc546bd2d0f237292a4dd211f06ab1cd5b5283007391ff1aa19f3aaeec620c8c195cee465a41a578c3d79e5ffdbc8f6871c3a03cab42598f4ed2b2c85dd9d3997276f27c75b1d613f4382a0dc7890d27aaeeb5be83e19a4e2b97a961ad37cb91290d60927ec43bacc7edad5a6dea2b9550d17577ba9abaa402f98fb35191871800312d5479553bafa5a8dc10c4b31a1b57fd1baa8beba5cf169ddd6a8e1d88dcec1634c6dcda7fdb992da3d61e60fa7b3337f3c12bd6d5a2025381d5283437e3ad2bb6ddbac6ca26d06c3d1a03d3d89be1b311b8a417ebeb4ae54ef92e0b2397b46767823e40d3bfdc76088f6ff7b38bac1c62568622aa37d04a0d5dd855ebd0c385512f2a73a4442c74f2c420f8b1cf96a64af33547209339833c9d9381aa5a3d49f87e18c1db6b9855e755e4d3c4cd981d4ecb8739fdf90ffcd2b370468abb374d5fe71255736839da85bfa38b5f5897e0def2f9cba6c0019432955ac49f96213fdc9c6e4aa56556f2368bab4445f1731bf3ca5ec0e265df891945f6bcd7b4ad7bf51a38596d8ed94146bd6b4cffdc335815202ef6d25f9fe1d2c104f257f84fd466a81ef790ac8ea2543fdf807f134507a4cff440c65a97c4ad2b73f8357232dc3344ad5348205bb664055ae95b6f4dd01dd4a447992b4446570dd57155d67253a3141261c174c17b2a440db25cb9ad336ba1558f697e2065f03412057d5e24059f720e100a0652e16070ea697035d86857653025b528d1b523616c4f658b91a341b8c90440c7eb58c572941a67abc78cc53dae784081a4caed265b3bd72da380c33dad18761c1f14bed6ae05cbc1ab690937493ed585a562e393e41be93cad02b2aee530f5d10dd4a523000c92fbe8a5404f2e6d64460490a122eeb7d15f4d62614d0b0338a53c7de81702852548784db7a15d91e8bb618b09a3963ee5715226d48ad2040ac697caef994b121902e70493e98ab845bb4338030176aa12a920a69a23942fec8d48451f1b169e8d8544a854eede68f74a19eb69b596e1015ca17b249729e0f63fd320561cc0ef8dadd48efd2f00b830d7119ee6b962958f48cfe2fa487cd46b03acc43c0e950d81b19517c7cb49e4b30d59d3b789a4214d1d608e45112bfa4b85950ed0263444ea473ea35ce6cfb4f08bad3a51f47db7b21c122e0e047d82371df8ac595c1d0ec6834906d74a5f574f46662c71962c99d58e47fc9833abed8302f99727048b96ea80e2f8f5e8f606c32f55497239a4ab66d045e124591109d8fc9cece685f6b3846a7c9c2de98709fd47a20e31585e8d405c96d735caf6d1f92296e64aad2ff6977c513119cd5679c50b5bc95f4a5eeaa83b42c4a101332f1e9bae79c4ae46bc9b86c41470f8e47695cc17618a15d7ed533a0039c38c474bf6d08b60a8d50296be35b4b69b538dfb3f9621a6e25b0f17e8dc813a361c269064bf7a65ddc53ae1a8d54f74b2ee88422f03c759f0af06ca80b48ec85c751e91050fc3bed9117300909bed7e63ea59c5268fcbec1ba5978a1b5d9ae2b76e479129b106d77f5fa7d9705f4f7ed06493e6005883e8e16c629a6ceb89e979e65b6a5ea127c79c5bff9cceaef79f62c859601654b81cf99353f1217c2324b0bfed37cdaf871abc06530b562e5c0b1ed2d1518b7dc7891241c1cde128ea40dadb01fd261c5c60e5df5d294eecc69f0f7e08cb569f8479792fc81933447f04dffffd4b4ad3e001ed6056f0e690e18313cf6e9876222c4f9cb266171be9e826617cfc1d1cd24aff798d9bfd36cc88b7da201e2f07575c95043e13e807115c89416e5797c2d661113f2d6d291ad0e01424c1d56b4ca7f77d6754704c8ac97bea98461e75d07748e775064e944fc55de2b73bdd15db1ffa2d7370f2755c321612158cca5005fab02208dc952537f0eb9811b72677693b50ed91e1f43622404249c64d39ffeaac1cbff7767ae34b010351b4c2cb0e77b875de51417d4dba2f3d3db18ec3a4e5ab6388422ed83d385f1f7f0a8074ddc27be9d90e3abe0528685d6b0f9c55086f832921e5304f88512b2fc28a3a3251448d48cdf6117933b895e95ed3ba6c8cce4f37ab7d05c5b299153c75edd605c17a9f1c523a910bbdc02b7205dc24d84794130f12d49366eb8198861610e985f965bfe17b58d71adb59cda3bd81d0f118519d3ea6423434aa655942755697e71da31ea0c05b9e1815645c94821658f1f307fa21bc2cad100cd34fddebe37cbdb442e7d9d3fc4cf4a2ce4ffe216ffe86d4e6667fa3027606b1aa11e9b266a38809e726a0927e17f47e01b92a22b538488a37e3a12eb2cbc29c0b72b5f4384e906802b1060c6ffe40fb98d9ca60c6d254d01e3a764ef0c4410de8a8aea0270a54ea34b1977f2edab8f39bd341d6ee51119d8fc9526838b5132e6577e62ecfa3825660f26c0a8d47cbbc74da14a8a8e6a490f36b54e529f6ae48e2af354c272d1a82e1866b303fd1f6e62fbd3aec34da0dd37002bad9588e9d62eb1d3690d7ad7664c45c9c2154966047146cd860f112e7ac16c11fc65bb60168c81f6db33c8a9c48b7d617b8d60a4d67eee45e227554e332f0831f8e21b18ffea645dfa85184f06816344abe6e93c52cf6bb753f68df9ada868ce7536098492a6e5607d9428e2e8e2c42fb83e1165e0ec2069a2a20bd3b4be04838e0c0ec400e4ee2ce4fe48aa495322f61088223184d65865c4d3b57c460e04a997b13be928fc0f6bc819ba4e82fef1868eabee3399e40febbc42df25b59e4e4d3a05bc3fff0e3866c538e15c97ad8dfb6e4492deb356fa7c1ac7b08a26d037db16480082b16bd772bc86b73f41b49684aa626a64369771fece6daead1002d440ead5f170f2f464e3d456ca9b8d04e5adcc9131694c5cb4988462c2db5e5e8ee7d8152a31eb172432e639b24632b395e8e15d8d5eab9feb17e406da8176a97ee8295be9bbde77d2b594bf87a155ed20cd55a1f2d6f502a194bbbcd2acb857b25471f51d47f47c47cd28528edd9ff996708402a7a74a3f8121389aa34a6802c6ae93eb716c0c467047cf0c108dbde698109937ed901a56ae264e4a7d67dab8f53eb8db6922feb9c43723fcaf90b0648ba1e96c8076060dfbf172c802278ce966ebb6a60c594e4af29b02167b6fc4280847752b84f4100a90ea9218bd79f015e7a0d69af0cc9f7a8259cfafb0b70a51e0a8a2062c004c4f088d7f29ac0431356bfb73b6b68b42b1126c014f02fd405b2c5c43c87170baa0387252b967e474799a1c2147e2645f93db17757e9af8316d754f80bc91d5f928c86ecd7493fb557978e44b70c871dcc6933fda56d882bf8f0021fc166b482eca4b8178e26064e86608ce62ee8bd8f5b6d60aa2368438e90e118479bb5b11c93b39dddc4971099efc0b92e64f62be33cc365c55013477c5e564423bf48057eafa8c626f245a53acb62890f2a450ed8a8eb4a8ab568983e93e0da125a217bbf26a71182da1f64d49193300d7e2e1232cfb6e79959baafb0a41192f29d81bfd356eb4a53d1dfa202dd8bb964383ef95d90e3775e8dab2f6cd230bf82908cc8592f7d0472d851c06c51efb8859edef450c4baad0a739682f0332cbea9761ea506f42acdebed074c89b9ea86661f008707ee316fdbb34060f920274f850c416a5cb5a1ff5ef25f8c1d869489b97913f5341d0ab74e584b3e5bfebfe2346a5d4ff095eb5619d8903f89593dffb07ed875e4c83ae1fd8437dfd69ce03c55f9457c835aa4f5a7d6507e5e99993ed3638ed7e20179e9fb3cd34e4ecf0739e0e5e2ee42a633f92ab1134dd8d9e15b06ecfcdb02121e6c5b030cd838e42f58b45e02c1360557e0341dbab927f9632fa0c383a27a97abc8f9636ef99c7138f9a2b62be2ca70438d602fdd0ffad0a9b441833b5a683a15d9ba816c5e954ce3114008002800", @ANYRES32=r0, @ANYBLOB="0000f572f0443d290a3b44857a5c2897b7d5038f0a3d62d81f6f428703000000668be062579a35b83518546205da3df95afed031aa1b3a17b924a6e2372a9a00004f6f701d9fd3127b02bbab6a0a0765453b1f00000000913924bbe16499be66cc6b596e9b6ec4fed200c2ae154b337621803e2fbb0000000000"], 0x115c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0xfffffffffffffffc) [ 351.340930] loop0: rw=536870912, want=133, limit=112 19:09:46 executing program 2: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x3, 0x86, 0x2}) modify_ldt$write(0x1, &(0x7f0000000340)={0x1f, 0x20000800, 0x6000, 0x0, 0x0, 0x5d0733b2, 0xffffffff, 0x1}, 0x10) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000580)) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) [ 351.340940] attempt to access beyond end of device 19:09:46 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x2, 0x2, 0x80000001, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) [ 351.340945] loop0: rw=536870912, want=142, limit=112 [ 351.340955] attempt to access beyond end of device [ 351.340959] loop0: rw=536870912, want=143, limit=112 [ 351.340969] attempt to access beyond end of device [ 351.340974] loop0: rw=536870912, want=144, limit=112 [ 351.340983] attempt to access beyond end of device [ 351.340988] loop0: rw=536870912, want=145, limit=112 [ 351.342308] attempt to access beyond end of device [ 351.342315] loop0: rw=536870912, want=2193, limit=112 [ 351.343770] attempt to access beyond end of device [ 351.343776] loop0: rw=536870912, want=4241, limit=112 [ 351.344839] attempt to access beyond end of device [ 351.344845] loop0: rw=536870912, want=5657, limit=112 [ 351.345120] attempt to access beyond end of device [ 351.345125] loop0: rw=536870912, want=5686, limit=112 [ 351.345138] attempt to access beyond end of device [ 351.345142] loop0: rw=536870912, want=5687, limit=112 [ 351.345152] attempt to access beyond end of device [ 351.345156] loop0: rw=536870912, want=5688, limit=112 [ 351.345165] attempt to access beyond end of device [ 351.345169] loop0: rw=536870912, want=5689, limit=112 [ 351.345178] attempt to access beyond end of device [ 351.345182] loop0: rw=536870912, want=5710, limit=112 [ 351.345192] attempt to access beyond end of device [ 351.345196] loop0: rw=536870912, want=5711, limit=112 [ 351.345205] attempt to access beyond end of device [ 351.345210] loop0: rw=536870912, want=5712, limit=112 [ 351.345219] attempt to access beyond end of device [ 351.345223] loop0: rw=536870912, want=5713, limit=112 [ 351.345237] attempt to access beyond end of device [ 351.345242] loop0: rw=536870912, want=5762, limit=112 [ 351.345251] attempt to access beyond end of device [ 351.345255] loop0: rw=536870912, want=5763, limit=112 [ 351.345265] attempt to access beyond end of device [ 351.345269] loop0: rw=536870912, want=5764, limit=112 [ 351.345284] attempt to access beyond end of device [ 351.345288] loop0: rw=536870912, want=5765, limit=112 [ 351.345297] attempt to access beyond end of device [ 351.345301] loop0: rw=536870912, want=5774, limit=112 [ 351.345312] attempt to access beyond end of device [ 351.345316] loop0: rw=536870912, want=5775, limit=112 [ 351.345326] attempt to access beyond end of device [ 351.345330] loop0: rw=536870912, want=5776, limit=112 [ 351.345339] attempt to access beyond end of device [ 351.345343] loop0: rw=536870912, want=5777, limit=112 [ 351.346261] attempt to access beyond end of device [ 351.346265] loop0: rw=536870912, want=7825, limit=112 [ 351.347591] attempt to access beyond end of device [ 351.347600] loop0: rw=536870912, want=9873, limit=112 [ 351.386386] attempt to access beyond end of device [ 351.386393] loop0: rw=536870912, want=11921, limit=112 [ 351.391956] attempt to access beyond end of device [ 351.391962] loop0: rw=536870912, want=13969, limit=112 [ 351.394507] attempt to access beyond end of device [ 351.394514] loop0: rw=536870912, want=16017, limit=112 [ 351.397497] attempt to access beyond end of device [ 351.397504] loop0: rw=536870912, want=18065, limit=112 [ 351.411241] attempt to access beyond end of device [ 351.411248] loop0: rw=536870912, want=20113, limit=112 [ 351.416448] attempt to access beyond end of device [ 351.416455] loop0: rw=536870912, want=22161, limit=112 [ 351.433505] attempt to access beyond end of device [ 351.433512] loop0: rw=536870912, want=24209, limit=112 [ 351.441774] attempt to access beyond end of device [ 351.441780] loop0: rw=536870912, want=26257, limit=112 [ 351.443459] attempt to access beyond end of device [ 351.443465] loop0: rw=536870912, want=28305, limit=112 [ 351.457042] attempt to access beyond end of device [ 351.457049] loop0: rw=536870912, want=30353, limit=112 [ 351.465390] attempt to access beyond end of device [ 351.465398] loop0: rw=536870912, want=32401, limit=112 [ 351.467405] attempt to access beyond end of device [ 351.467412] loop0: rw=536870912, want=32993, limit=112 [ 352.114306] 9pnet_virtio: no channels available for device (null) [ 352.552526] attempt to access beyond end of device [ 352.557631] loop2: rw=536870912, want=114, limit=112 [ 352.567244] attempt to access beyond end of device [ 352.572484] loop2: rw=536870912, want=115, limit=112 [ 352.577699] attempt to access beyond end of device [ 352.582873] loop2: rw=536870912, want=116, limit=112 [ 352.588163] attempt to access beyond end of device [ 352.593506] loop2: rw=536870912, want=117, limit=112 19:09:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x3, 0x86, 0x2}) modify_ldt$write(0x1, &(0x7f0000000340)={0x1f, 0x20000800, 0x6000, 0x0, 0x0, 0x5d0733b2, 0xffffffff, 0x1}, 0x10) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000580)) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) 19:09:47 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000180)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) 19:09:47 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x40800, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x2, 0x5, 0x10001, 0x9, 0x7}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000340)=ANY=[@ANYBLOB="0004000000000000ff000000000000000500000000000000", @ANYRES32=r0, @ANYBLOB="00000000000200000000000000000000000000000000000000000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="00000000030000000000000000000000000000000000000000000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x007\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="00000000a6be00000000000000003d3aec4e4a64dd3b86868877123f000000000000000000000000000056b99545b28461cb6571f3d9ae6355e801b168add04e8ae7a7e2212c2f426563c965bb6146ab3cea51bd8f6466997329eece902482bef93d75e69b5c929aa6907f474fd02be7929f2e5753398477f9c99fa1821a55bac60d7d4edfebe8359f2a9512106353524c3594dbc55c8ad335d076a782a8440f3bccde99819e62dfff8157d762f78d80467b483f6a9666f3c4d736bf314ed00f9bc97ec2c6b0b9c5cf"]) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000240)="80fd55416b08c27e6f68ee3b44da06a6cfa6997157901e2fc186213dbf9ed251562c144df5fc9f4ebfc4b0933f7d3f17c06b0ead1ca35ac98b84f07d58ebbc70a7631c0589139e12b695fd642b80ec98a430c47853457e60a2c7eb73b67aa62d73b277c918fb58c2a1efb7ab497042b4c20a42aa8dc5e5425c6c9a018278da0b5922f9282bf8353772f62f3a4849c0ccbc36db14af3d1e0b5ffb14161f9b2fcc2f14a0c7dbbe205e1cd99d18474fecaac21855ddf8bb5c76e3ce9ba50e776585d59fa0925e0613e8f65751861e1703f1d7", 0xd1}], 0x1, 0x0) 19:09:47 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x2, 0x2, 0x80000001, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:09:47 executing program 6: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x9) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff91d9063a}, 0x0, 0x0, 0xffffffffffffffff, 0x1) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000300)={{{@in=@broadcast, @in6=@dev}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f0000000400)=0xe8) r3 = socket$inet6(0xa, 0x2, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x200) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000004c0)=0x282, 0x4) sendmmsg(r3, &(0x7f00000002c0), 0x400000000000174, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x31d) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x248040, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x1000) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000180)=0x2) accept4(r3, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000240)=0x80, 0x80000) ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5) flistxattr(r2, &(0x7f00000001c0), 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f00000002c0)) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000080)) 19:09:47 executing program 5: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x3, 0x86, 0x2}) modify_ldt$write(0x1, &(0x7f0000000340)={0x1f, 0x20000800, 0x6000, 0x0, 0x0, 0x5d0733b2, 0xffffffff, 0x1}, 0x10) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000580)) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:09:47 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) 19:09:47 executing program 2: r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x311000, 0x40) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000240)={0x6, {0x2, 0x4e24, @remote}, {0x2, 0x4e21, @local}, {0x2, 0x4e20, @multicast1}, 0x0, 0x107, 0x3, 0x18000, 0x0, &(0x7f0000000200)='veth0_to_team\x00', 0x8, 0x6, 0xfffffffffffffff9}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) fcntl$setsig(r1, 0xa, 0x1c) syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[]) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000180)=0x5) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x0, 0x45}, 0x14) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="000000000000000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700000000000000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}]) [ 352.598736] attempt to access beyond end of device [ 352.604049] loop2: rw=536870912, want=130, limit=112 [ 352.609338] attempt to access beyond end of device [ 352.614446] loop2: rw=536870912, want=131, limit=112 [ 352.619638] attempt to access beyond end of device [ 352.628961] loop2: rw=536870912, want=132, limit=112 [ 352.644171] attempt to access beyond end of device [ 352.661687] attempt to access beyond end of device 19:09:47 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) prctl$setendian(0x14, 0x3) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="80fd02d50002", 0x6}], 0x1, 0x4) 19:09:47 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000080)=0x1) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000300)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0xffffffffffffffe9}], 0xe334cb033d9ef93, 0x100) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000400)={0x1, 0x7e, 0x0, 0x2, 0x3, [{0x1ff, 0xfffffffffffffffe, 0x6, 0x0, 0x0, 0x402}, {0x3, 0xfffffffffffffad9, 0x7, 0x0, 0x0, 0x2004}, {0x2, 0x5, 0x9}]}) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000000)={0x0, 0x100, 0x1}) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000200)={0x7ff}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x7, 0x200, 0x85, 0x0, 0xf}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000240)=0x43be) 19:09:47 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) [ 352.661694] loop0: rw=536870912, want=114, limit=112 19:09:47 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x0, 0x2, 0x80000001, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) [ 352.661706] attempt to access beyond end of device [ 352.661711] loop0: rw=536870912, want=115, limit=112 19:09:47 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x200000, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) openat$cgroup_ro(r0, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) 19:09:47 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x0, 0x2, 0x80000001, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) [ 352.661721] attempt to access beyond end of device [ 352.661725] loop0: rw=536870912, want=116, limit=112 19:09:47 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000480)=""/150) 19:09:47 executing program 7: pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x2) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000100)) write$P9_RWALK(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="160000006f0100010000000002000000000050f60000634da70cd5cd583072c2c1969ada86aab609b4bc0b452248955bb0d1b68dd27fb97d9fb50ffae475b2e592f19ef63b3702267e81d9ba8cf2bd8eed287bc8120d66aa90f042359385f71c257fbcfc435d292cd38883a11a96635250d0825f4edb5a2f69f66081f1b42fa31c9fcb9a9f0cf678d2e69b06de99834da768c65702e5d3b749f9c2e1454aabc7037f78f79813e5c73897fa83cf38d9bf722870621a11e0d4c9c645d30a1934d6fa52cb58c8133b6f"], 0xc8) mkdir(&(0x7f0000000080)='./file0\x00', 0x10) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) [ 352.661736] attempt to access beyond end of device [ 352.661740] loop0: rw=536870912, want=117, limit=112 [ 352.661750] attempt to access beyond end of device [ 352.661754] loop0: rw=536870912, want=130, limit=112 [ 352.661765] attempt to access beyond end of device [ 352.661769] loop0: rw=536870912, want=131, limit=112 [ 352.661779] attempt to access beyond end of device [ 352.661784] loop0: rw=536870912, want=132, limit=112 [ 352.661794] attempt to access beyond end of device [ 352.661799] loop0: rw=536870912, want=133, limit=112 [ 352.662262] attempt to access beyond end of device [ 352.662267] loop0: rw=536870912, want=981, limit=112 [ 352.662436] attempt to access beyond end of device [ 352.662440] loop0: rw=536870912, want=982, limit=112 [ 352.662451] attempt to access beyond end of device [ 352.662456] loop0: rw=536870912, want=983, limit=112 [ 352.662465] attempt to access beyond end of device [ 352.662470] loop0: rw=536870912, want=984, limit=112 [ 352.662480] attempt to access beyond end of device [ 352.662485] loop0: rw=536870912, want=985, limit=112 [ 352.662495] attempt to access beyond end of device [ 352.662499] loop0: rw=536870912, want=1014, limit=112 [ 352.662509] attempt to access beyond end of device [ 352.662514] loop0: rw=536870912, want=1015, limit=112 [ 352.662524] attempt to access beyond end of device [ 352.662528] loop0: rw=536870912, want=1016, limit=112 [ 352.662538] attempt to access beyond end of device [ 352.662543] loop0: rw=536870912, want=1017, limit=112 [ 352.662560] attempt to access beyond end of device [ 352.662564] loop0: rw=536870912, want=1038, limit=112 [ 352.662573] attempt to access beyond end of device [ 352.662577] loop0: rw=536870912, want=1039, limit=112 [ 352.662588] attempt to access beyond end of device [ 352.662592] loop0: rw=536870912, want=1040, limit=112 [ 352.662602] attempt to access beyond end of device [ 352.662606] loop0: rw=536870912, want=1041, limit=112 [ 352.662616] attempt to access beyond end of device [ 352.662621] loop0: rw=536870912, want=1074, limit=112 [ 352.662630] attempt to access beyond end of device [ 352.662634] loop0: rw=536870912, want=1075, limit=112 [ 352.662645] attempt to access beyond end of device [ 352.662649] loop0: rw=536870912, want=1076, limit=112 [ 352.662659] attempt to access beyond end of device [ 352.662669] loop0: rw=536870912, want=1077, limit=112 [ 352.662687] attempt to access beyond end of device [ 352.662692] loop0: rw=536870912, want=1090, limit=112 [ 352.662703] attempt to access beyond end of device [ 352.662707] loop0: rw=536870912, want=1091, limit=112 [ 352.662717] attempt to access beyond end of device [ 352.662721] loop0: rw=536870912, want=1092, limit=112 [ 352.662731] attempt to access beyond end of device [ 352.662735] loop0: rw=536870912, want=1093, limit=112 [ 352.662745] attempt to access beyond end of device [ 352.662750] loop0: rw=536870912, want=1102, limit=112 [ 352.662760] attempt to access beyond end of device [ 352.662765] loop0: rw=536870912, want=1103, limit=112 [ 352.662775] attempt to access beyond end of device [ 352.662779] loop0: rw=536870912, want=1104, limit=112 [ 352.662789] attempt to access beyond end of device [ 352.662793] loop0: rw=536870912, want=1105, limit=112 [ 352.664099] attempt to access beyond end of device [ 352.664104] loop0: rw=536870912, want=3153, limit=112 [ 352.665586] attempt to access beyond end of device [ 352.665594] loop0: rw=536870912, want=5201, limit=112 [ 352.667148] attempt to access beyond end of device [ 352.667154] loop0: rw=536870912, want=7249, limit=112 19:09:48 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101008, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) 19:09:48 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) 19:09:48 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x0, 0x2, 0x80000001, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:09:48 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) socketpair(0x3, 0x1, 0xc1, &(0x7f0000000300)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) 19:09:48 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x0, 0x2, 0x80000001, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:09:48 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x40800, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x2, 0x5, 0x10001, 0x9, 0x7}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000340)=ANY=[@ANYBLOB="0004000000000000ff000000000000000500000000000000", @ANYRES32=r0, @ANYBLOB="00000000000200000000000000000000000000000000000000000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="00000000030000000000000000000000000000000000000000000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x007\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="00000000a6be00000000000000003d3aec4e4a64dd3b86868877123f000000000000000000000000000056b99545b28461cb6571f3d9ae6355e801b168add04e8ae7a7e2212c2f426563c965bb6146ab3cea51bd8f6466997329eece902482bef93d75e69b5c929aa6907f474fd02be7929f2e5753398477f9c99fa1821a55bac60d7d4edfebe8359f2a9512106353524c3594dbc55c8ad335d076a782a8440f3bccde99819e62dfff8157d762f78d80467b483f6a9666f3c4d736bf314ed00f9bc97ec2c6b0b9c5cf"]) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000240)="80fd55416b08c27e6f68ee3b44da06a6cfa6997157901e2fc186213dbf9ed251562c144df5fc9f4ebfc4b0933f7d3f17c06b0ead1ca35ac98b84f07d58ebbc70a7631c0589139e12b695fd642b80ec98a430c47853457e60a2c7eb73b67aa62d73b277c918fb58c2a1efb7ab497042b4c20a42aa8dc5e5425c6c9a018278da0b5922f9282bf8353772f62f3a4849c0ccbc36db14af3d1e0b5ffb14161f9b2fcc2f14a0c7dbbe205e1cd99d18474fecaac21855ddf8bb5c76e3ce9ba50e776585d59fa0925e0613e8f65751861e1703f1d7", 0xd1}], 0x1, 0x0) 19:09:48 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x3, 0x86, 0x2}) modify_ldt$write(0x1, &(0x7f0000000340)={0x1f, 0x20000800, 0x6000, 0x0, 0x0, 0x5d0733b2, 0xffffffff, 0x1}, 0x10) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000580)) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) [ 352.669710] attempt to access beyond end of device [ 352.669716] loop0: rw=536870912, want=9297, limit=112 [ 352.682150] attempt to access beyond end of device [ 352.682157] loop0: rw=536870912, want=11345, limit=112 [ 352.686579] attempt to access beyond end of device [ 352.686585] loop0: rw=536870912, want=13393, limit=112 [ 352.688883] attempt to access beyond end of device [ 352.688890] loop0: rw=536870912, want=15441, limit=112 [ 352.708569] attempt to access beyond end of device [ 352.708576] loop0: rw=536870912, want=17489, limit=112 [ 352.718443] attempt to access beyond end of device [ 352.718450] loop0: rw=536870912, want=19537, limit=112 [ 352.730460] attempt to access beyond end of device [ 352.730470] loop0: rw=536870912, want=21585, limit=112 [ 352.756363] attempt to access beyond end of device [ 352.756370] loop0: rw=536870912, want=23633, limit=112 [ 352.760277] attempt to access beyond end of device [ 352.760283] loop0: rw=536870912, want=25681, limit=112 [ 352.768732] attempt to access beyond end of device [ 352.768739] loop0: rw=536870912, want=27729, limit=112 [ 352.771500] attempt to access beyond end of device [ 352.771506] loop0: rw=536870912, want=29777, limit=112 [ 352.789869] attempt to access beyond end of device [ 352.789877] loop0: rw=536870912, want=31825, limit=112 [ 352.794814] attempt to access beyond end of device [ 352.794821] loop0: rw=536870912, want=32985, limit=112 [ 353.068043] 9pnet: Insufficient options for proto=fd [ 353.075071] 9pnet: Insufficient options for proto=fd [ 353.087901] 9pnet: Insufficient options for proto=fd [ 353.093355] 9pnet: Insufficient options for proto=fd [ 353.528735] attempt to access beyond end of device [ 353.528741] loop5: rw=536870912, want=130, limit=112 [ 353.528746] buffer_io_error: 157 callbacks suppressed [ 353.528751] Buffer I/O error on dev loop5, logical block 129, lost async page write [ 353.528761] attempt to access beyond end of device [ 353.528764] loop5: rw=536870912, want=131, limit=112 [ 353.528768] Buffer I/O error on dev loop5, logical block 130, lost async page write [ 353.528774] attempt to access beyond end of device [ 353.528778] loop5: rw=536870912, want=132, limit=112 [ 353.528781] Buffer I/O error on dev loop5, logical block 131, lost async page write [ 353.528788] attempt to access beyond end of device [ 353.528791] loop5: rw=536870912, want=133, limit=112 [ 353.528795] Buffer I/O error on dev loop5, logical block 132, lost async page write [ 353.528803] attempt to access beyond end of device [ 353.528806] loop5: rw=536870912, want=142, limit=112 [ 353.528809] Buffer I/O error on dev loop5, logical block 141, lost async page write [ 353.528816] attempt to access beyond end of device [ 353.528819] loop5: rw=536870912, want=143, limit=112 [ 353.528823] Buffer I/O error on dev loop5, logical block 142, lost async page write [ 353.528829] attempt to access beyond end of device [ 353.528832] loop5: rw=536870912, want=144, limit=112 [ 353.528836] Buffer I/O error on dev loop5, logical block 143, lost async page write [ 353.528843] attempt to access beyond end of device [ 353.528846] loop5: rw=536870912, want=145, limit=112 [ 353.528850] Buffer I/O error on dev loop5, logical block 144, lost async page write [ 353.529714] attempt to access beyond end of device [ 353.529720] loop5: rw=536870912, want=2137, limit=112 [ 353.530064] attempt to access beyond end of device [ 353.530068] loop5: rw=536870912, want=2166, limit=112 [ 353.530074] Buffer I/O error on dev loop5, logical block 2165, lost async page write [ 353.530084] attempt to access beyond end of device [ 353.530088] loop5: rw=536870912, want=2167, limit=112 [ 353.530098] Buffer I/O error on dev loop5, logical block 2166, lost async page write [ 353.530107] attempt to access beyond end of device [ 353.530111] loop5: rw=536870912, want=2168, limit=112 [ 353.530120] attempt to access beyond end of device [ 353.530124] loop5: rw=536870912, want=2169, limit=112 [ 353.530134] attempt to access beyond end of device [ 353.530138] loop5: rw=536870912, want=2190, limit=112 [ 353.530147] attempt to access beyond end of device [ 353.530151] loop5: rw=536870912, want=2191, limit=112 [ 353.530160] attempt to access beyond end of device [ 353.530164] loop5: rw=536870912, want=2192, limit=112 [ 353.530173] attempt to access beyond end of device [ 353.530177] loop5: rw=536870912, want=2193, limit=112 [ 353.530199] attempt to access beyond end of device [ 353.530203] loop5: rw=536870912, want=2242, limit=112 [ 353.530212] attempt to access beyond end of device [ 353.530216] loop5: rw=536870912, want=2243, limit=112 [ 353.530225] attempt to access beyond end of device [ 353.530229] loop5: rw=536870912, want=2244, limit=112 [ 353.530239] attempt to access beyond end of device [ 353.530243] loop5: rw=536870912, want=2245, limit=112 [ 353.530252] attempt to access beyond end of device [ 353.530256] loop5: rw=536870912, want=2254, limit=112 [ 353.530265] attempt to access beyond end of device [ 353.530270] loop5: rw=536870912, want=2255, limit=112 [ 353.530279] attempt to access beyond end of device [ 353.530283] loop5: rw=536870912, want=2256, limit=112 [ 353.530293] attempt to access beyond end of device [ 353.530297] loop5: rw=536870912, want=2257, limit=112 [ 353.531173] attempt to access beyond end of device [ 353.531177] loop5: rw=536870912, want=4305, limit=112 [ 353.532386] attempt to access beyond end of device [ 353.532391] loop5: rw=536870912, want=6353, limit=112 [ 353.533595] attempt to access beyond end of device [ 353.533600] loop5: rw=536870912, want=8401, limit=112 [ 353.534849] attempt to access beyond end of device [ 353.534855] loop5: rw=536870912, want=10449, limit=112 [ 353.536156] attempt to access beyond end of device [ 353.536161] loop5: rw=536870912, want=12497, limit=112 [ 353.537413] attempt to access beyond end of device [ 353.537420] loop5: rw=536870912, want=14545, limit=112 [ 353.545684] attempt to access beyond end of device [ 353.545690] loop5: rw=536870912, want=16593, limit=112 [ 353.558678] attempt to access beyond end of device [ 353.558684] loop5: rw=536870912, want=18641, limit=112 [ 353.572391] attempt to access beyond end of device [ 353.572397] loop5: rw=536870912, want=20689, limit=112 [ 353.575410] attempt to access beyond end of device [ 353.575417] loop5: rw=536870912, want=22737, limit=112 [ 353.585156] attempt to access beyond end of device [ 353.585162] loop5: rw=536870912, want=24785, limit=112 [ 353.591680] attempt to access beyond end of device [ 353.591687] loop5: rw=536870912, want=26833, limit=112 [ 353.594435] attempt to access beyond end of device [ 353.594441] loop5: rw=536870912, want=28881, limit=112 [ 353.602037] attempt to access beyond end of device [ 353.602043] loop5: rw=536870912, want=30929, limit=112 [ 353.604655] attempt to access beyond end of device [ 353.604660] loop5: rw=536870912, want=32977, limit=112 [ 353.605021] attempt to access beyond end of device [ 353.605025] loop5: rw=536870912, want=32993, limit=112 [ 354.326236] loop2: rw=536870912, want=133, limit=112 [ 354.331681] attempt to access beyond end of device [ 354.336604] loop2: rw=536870912, want=1301, limit=112 [ 354.342008] attempt to access beyond end of device [ 354.346981] loop2: rw=536870912, want=1302, limit=112 [ 354.352185] attempt to access beyond end of device [ 354.357262] loop2: rw=536870912, want=1303, limit=112 [ 354.362479] attempt to access beyond end of device [ 354.367442] loop2: rw=536870912, want=1304, limit=112 [ 354.372651] attempt to access beyond end of device [ 354.377599] loop2: rw=536870912, want=1305, limit=112 [ 354.382809] attempt to access beyond end of device [ 354.387783] loop2: rw=536870912, want=1334, limit=112 [ 354.392991] attempt to access beyond end of device [ 354.397968] loop2: rw=536870912, want=1335, limit=112 [ 354.403169] attempt to access beyond end of device [ 354.408124] loop2: rw=536870912, want=1336, limit=112 [ 354.413329] attempt to access beyond end of device [ 354.418291] loop2: rw=536870912, want=1337, limit=112 [ 354.423519] attempt to access beyond end of device [ 354.428469] loop2: rw=536870912, want=1358, limit=112 [ 354.433673] attempt to access beyond end of device [ 354.438706] loop2: rw=536870912, want=1359, limit=112 [ 354.443914] attempt to access beyond end of device [ 354.448923] loop2: rw=536870912, want=1360, limit=112 [ 354.454118] attempt to access beyond end of device [ 354.459088] loop2: rw=536870912, want=1361, limit=112 [ 354.464294] attempt to access beyond end of device [ 354.469367] loop2: rw=536870912, want=1394, limit=112 [ 354.474577] attempt to access beyond end of device [ 354.479522] loop2: rw=536870912, want=1395, limit=112 [ 354.484728] attempt to access beyond end of device [ 354.489696] loop2: rw=536870912, want=1396, limit=112 [ 354.494905] attempt to access beyond end of device [ 354.499878] loop2: rw=536870912, want=1397, limit=112 [ 354.505091] attempt to access beyond end of device [ 354.510058] loop2: rw=536870912, want=1410, limit=112 [ 354.515265] attempt to access beyond end of device [ 354.520223] loop2: rw=536870912, want=1411, limit=112 [ 354.525436] attempt to access beyond end of device [ 354.531427] loop2: rw=536870912, want=1412, limit=112 [ 354.536669] attempt to access beyond end of device [ 354.541610] loop2: rw=536870912, want=1413, limit=112 [ 354.546907] attempt to access beyond end of device [ 354.551852] loop2: rw=536870912, want=1422, limit=112 [ 354.557075] attempt to access beyond end of device [ 354.562010] loop2: rw=536870912, want=1423, limit=112 [ 354.567267] attempt to access beyond end of device [ 354.572210] loop2: rw=536870912, want=1424, limit=112 [ 354.577560] attempt to access beyond end of device [ 354.582488] loop2: rw=536870912, want=1425, limit=112 [ 354.588358] attempt to access beyond end of device [ 354.593303] loop2: rw=536870912, want=3473, limit=112 [ 354.599358] attempt to access beyond end of device [ 354.604303] loop2: rw=536870912, want=5521, limit=112 [ 354.610471] attempt to access beyond end of device [ 354.615415] loop2: rw=536870912, want=7569, limit=112 [ 354.621649] attempt to access beyond end of device [ 354.626590] loop2: rw=536870912, want=9617, limit=112 [ 354.632680] attempt to access beyond end of device [ 354.637624] loop2: rw=536870912, want=11665, limit=112 [ 354.643892] attempt to access beyond end of device [ 354.648874] loop2: rw=536870912, want=13713, limit=112 [ 354.655256] attempt to access beyond end of device [ 354.660288] loop2: rw=536870912, want=15761, limit=112 [ 354.666522] attempt to access beyond end of device [ 354.671494] loop2: rw=536870912, want=17809, limit=112 [ 354.677656] attempt to access beyond end of device [ 354.682594] loop2: rw=536870912, want=19857, limit=112 [ 354.689010] attempt to access beyond end of device [ 354.693955] loop2: rw=536870912, want=21905, limit=112 [ 354.700080] attempt to access beyond end of device [ 354.705015] loop2: rw=536870912, want=23953, limit=112 [ 354.711163] attempt to access beyond end of device [ 354.716112] loop2: rw=536870912, want=26001, limit=112 [ 354.722248] attempt to access beyond end of device [ 354.727200] loop2: rw=536870912, want=28049, limit=112 [ 354.733423] attempt to access beyond end of device [ 354.738377] loop2: rw=536870912, want=30097, limit=112 [ 354.744528] attempt to access beyond end of device [ 354.749556] loop2: rw=536870912, want=32145, limit=112 [ 354.755386] attempt to access beyond end of device [ 354.760351] loop2: rw=536870912, want=32985, limit=112 [ 354.932626] FAT-fs (loop2): bogus number of reserved sectors [ 354.938847] FAT-fs (loop2): Can't find a valid FAT filesystem [ 355.014550] loop2: p1 < > p4 [ 355.017707] loop2: partition table partially beyond EOD, truncated [ 355.027460] loop2: p1 size 2 extends beyond EOD, truncated [ 355.038711] loop2: p4 start 1854537728 is beyond EOD, truncated [ 355.098665] FAT-fs (loop2): bogus number of reserved sectors [ 355.104557] FAT-fs (loop2): Can't find a valid FAT filesystem 19:09:49 executing program 2: r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x311000, 0x40) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000240)={0x6, {0x2, 0x4e24, @remote}, {0x2, 0x4e21, @local}, {0x2, 0x4e20, @multicast1}, 0x0, 0x107, 0x3, 0x18000, 0x0, &(0x7f0000000200)='veth0_to_team\x00', 0x8, 0x6, 0xfffffffffffffff9}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) fcntl$setsig(r1, 0xa, 0x1c) syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[]) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000180)=0x5) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x0, 0x45}, 0x14) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="000000000000000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700000000000000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}]) 19:09:49 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="80fd02090003", 0x6}], 0x100000000000004b, 0x0) sendto$unix(r0, &(0x7f0000000180)="cc278f44287ead9e3a9c9869ca81f65ee24fefa5fb5ff5be7ad54ae66dde3a9b66112272329b941ec3add1aee6b76cd6eada435ee83dff39ef6f3a8ea5d008ff339501f5c63d", 0x46, 0x4004, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x28000, 0x118, 0x7, 0x1, 0x6e, 0x0, 0x3f, 0xd3f, 0x9, 0x1}) 19:09:49 executing program 6: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x3, 0x86, 0x2}) modify_ldt$write(0x1, &(0x7f0000000340)={0x1f, 0x20000800, 0x6000, 0x0, 0x0, 0x5d0733b2, 0xffffffff, 0x1}, 0x10) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000580)) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) 19:09:49 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) modify_ldt$write2(0x11, &(0x7f0000000600)={0xdc, 0x100000, 0x4000, 0x7, 0x6, 0x5, 0x2f3b71c8, 0x2, 0x1, 0x81}, 0x10) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/mls\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800021}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x70, r3, 0x8, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x4) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) 19:09:49 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x0, 0x80000001, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:09:49 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) pwritev(r0, &(0x7f00000000c0), 0x0, 0x0) 19:09:49 executing program 5: r0 = socket(0x200000000000005, 0x2, 0x8) setsockopt$inet_mreqsrc(r0, 0x0, 0x21, &(0x7f0000000080)={@broadcast, @loopback}, 0xc) dup3(r0, r0, 0x80000) 19:09:49 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x3, 0x86, 0x2}) modify_ldt$write(0x1, &(0x7f0000000340)={0x1f, 0x20000800, 0x6000, 0x0, 0x0, 0x5d0733b2, 0xffffffff, 0x1}, 0x10) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000580)) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:09:49 executing program 3: socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@loopback, @in=@multicast1}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@local}}, &(0x7f0000000080)=0xe8) fgetxattr(r1, &(0x7f0000001400)=@random={'btrfs.', '/dev/ppp\x00'}, &(0x7f00000002c0)=""/4096, 0x1000) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000012c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f0000001300)=0x10) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000001380)={@ipv4={[], [], @local}}, &(0x7f00000013c0)=0x14) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0x7f, 0xffffffffffffffff, 0x1400, 0x7fff, 0x9, 0x404, 0x3, 0xfffffffffffffb8d, 0x1, 0x100}, 0x10) fcntl$getownex(r0, 0x10, &(0x7f0000001340)) 19:09:49 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2040, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x3a, 0x5, 0x80, 0xf458, 0xca3a}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) 19:09:49 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x0, 0x80000001, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:09:49 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x40000, 0x2) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000380)=0xb79a, 0x4) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="160000006f01000100000000000000000000000000006811d79f5830f85c6dec22b33b42284d800b569581"], 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) 19:09:49 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000180)="6975db887d01ce9168fb6d0ae29e5d026883fcac92427388b1e4c9ee1f811637b96a16051bc8ba713a7676670fdd8196e4752714463ad7bd2ba014df2fc88273ee", 0x41}, {&(0x7f0000000080)="91e1f0b5fe56b4137a0084564e78dd57a4ff0f4dc93c157b142aebf8759ece3e4da75ee5a9d0", 0x26}, {&(0x7f0000000200)="b55c5ed581e400e5a272856a26473698baad7a121a880666d63bf68b7277543b5b39a4af531f27c61d32b890155e742521fc1a7030b1b37705fad8a25ac6f2fa03b40be7a4e719e13da2480ea1d09c22a452f1546b16f3ff9de1fdf65008f5482fd854795a50716f24ce", 0x6a}, {&(0x7f0000000280)="4d7ab4b361b8fb0594871c691c9c00bc2f7fe3abcd84de0df7c4d748f716658e08ec0f5172bfca4bc5be3525c5a48bba4109e3a80cabea9cc8dbdea5a1e8510ef5a497a2ec86d23cb01331d17484292f9cc247cb36c9fc023a0d90791500c2c32bad06c2ac004bdd33a4f9cb58018270f56bdf67d9f3c5a8feb6d558f3b97034de7c04524d1798ed21d06e3c39f3eeb4482832d4f6e975d16654d96aa45e", 0x9e}, {&(0x7f0000000340)="1844641b2e632d0cbb3951d6d07db5e45264466f872ae809b7ea91059a6c3cec52af7c1434753a639d371a4a7549c0c5825ad7a330b10a5b475b34c95b47597319d39c4b401e023c8a74eb21da16269aa64402535e22d0af7b08d5285169b90e8fddd3e9472b8844f29f600bfdc749ffae0ea393e4a4f8d7a63d7c236c5c1a049e011425080a47e835294bf015f01d6889b61c2392e18711ba30a65b15f95c7bc848c30d2dc36bcf4b941a6bcf7d2659055fd5e2072922b92430c8a850c0a45884c66b087c94ba7a17b6a7260afdc37e", 0xd0}], 0x5, 0x0) ioctl$void(r1, 0xc0045878) 19:09:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000480)={'team_slave_0\x00'}) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x2, 0x12004) ioctl$VT_RELDISP(r1, 0x5605) unshare(0x78000000) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000840)='/dev/pktcdvd/control\x00', 0x400000, 0x0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000003c0)) socket$inet6(0xa, 0x1000000000002, 0x0) r3 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) clock_adjtime(0x4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365, 0x10000}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="7f454c4653d8a1cf0602702d001d0000026c530f240ab158efd327819dd9d3aeee78aa2c0c3c71af04adf8d97af6489a60a89ff04640b033785cbd07b6580f4ab8e952c0d1ebcf"], 0x11) write$sndseq(r3, &(0x7f0000000080), 0xffffff17) setsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000100)="38c13251726176dc15777f14fe4b041fd46e18db67b85b9978d7d5676629992115876884131176d43b71b71f216c65b7138fd337b5a54dc8ecd138a3e7b8e5e9dbed46289690fa853fc67829ebd683e304bed6dbe8b7e1f648b5472a71c5c1502ca4b592d84b642e738585fcf0addfeca80ea64dfa41b81318a901bc51f23698bcb9fe46ab02b5a8", 0x88) ioctl$TCSBRK(r2, 0x5409, 0x84) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f00000002c0)=0x7, 0x4) r6 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000040)={{0x1}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000500)=""/99) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x410000, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f00000000c0)) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000800)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000640)={0x17c, r7, 0x810, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x9}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0xd}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x40000000400}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100000001}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0x20}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14}]}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1c}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'irlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x80000001}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x404c040}, 0x40004) r8 = memfd_create(&(0x7f0000034ffe)='\x00 ', 0x0) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000000)={'lo\x00'}) r9 = syz_open_dev$sndseq(&(0x7f0000053ff3)='/dev/snd/seq\x00', 0x0, 0x101802) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r9, 0xc0605345, &(0x7f0000000340)={0x5, 0xffffffffffffffff, {0x6, 0x0, 0x2, 0x3, 0x9}}) 19:09:49 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x0, 0x80000001, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:09:49 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0xa25) pwritev(r0, &(0x7f00000000c0), 0x0, 0x0) r1 = getpid() ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000000)=r1) [ 355.334104] FAT-fs (loop2): bogus number of reserved sectors [ 355.355262] FAT-fs (loop2): Can't find a valid FAT filesystem 19:09:49 executing program 2: r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x311000, 0x40) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000240)={0x6, {0x2, 0x4e24, @remote}, {0x2, 0x4e21, @local}, {0x2, 0x4e20, @multicast1}, 0x0, 0x107, 0x3, 0x18000, 0x0, &(0x7f0000000200)='veth0_to_team\x00', 0x8, 0x6, 0xfffffffffffffff9}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) fcntl$setsig(r1, 0xa, 0x1c) syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[]) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000180)=0x5) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x0, 0x45}, 0x14) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="000000000000000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700000000000000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}]) 19:09:49 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@ipv4={[], [], @rand_addr}, @in6=@local}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) r1 = getgid() stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r1, r2) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@mcast2, @in=@dev}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f0000000080)=0xe8) [ 355.523328] FAT-fs (loop2): bogus number of reserved sectors [ 355.532810] FAT-fs (loop2): Can't find a valid FAT filesystem [ 355.827547] attempt to access beyond end of device [ 355.832502] loop0: rw=536870912, want=130, limit=112 [ 355.837883] attempt to access beyond end of device [ 355.842845] loop0: rw=536870912, want=131, limit=112 [ 355.848412] attempt to access beyond end of device [ 355.853338] loop0: rw=536870912, want=132, limit=112 [ 355.858744] attempt to access beyond end of device [ 355.863709] loop0: rw=536870912, want=133, limit=112 [ 355.869366] attempt to access beyond end of device 19:09:50 executing program 6: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x3, 0x86, 0x2}) modify_ldt$write(0x1, &(0x7f0000000340)={0x1f, 0x20000800, 0x6000, 0x0, 0x0, 0x5d0733b2, 0xffffffff, 0x1}, 0x10) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000580)) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:09:50 executing program 5: r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = pkey_alloc(0x0, 0x1) signalfd4(r0, &(0x7f00000000c0)={0x80}, 0x8, 0x80800) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, r1) r2 = socket(0x10000000010, 0xfffffffffffffffd, 0x5) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000200)=0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x70, 0x400, 0x0, 0x9, 0x80000001, 0x0, 0x4b, 0x800, 0x1, 0x7fff, 0xbc, 0x2, 0x2, 0xe9c, 0x8, 0x9, 0x0, 0xd3b, 0x2, 0x1, 0x6, 0x77, 0xffff, 0xdaa5, 0x80000001, 0x100000001, 0x5, 0xfffffffffffffffe, 0x9, 0x6, 0xa8, 0x2634, 0x10000000000, 0x0, 0xb64, 0x0, 0x3fa4, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000000), 0x6}, 0x400, 0x7, 0x1d, 0x6, 0x7, 0x1ff, 0x380000}, r3, 0xc, r0, 0x3) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x121000, 0x0) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000180)={0x9, 0x794f, 0x5}) socket(0x10, 0x2, 0xbc90) write(r2, &(0x7f000002b000)="1f0000000202fffffd3b54c007110000f30501000b000600000423ca0000cf", 0x1f) 19:09:50 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="4423c3"]) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000e18b0a412fd93190cbdd51a1ed628370848669aafa4af5495d3de910f0f911b8eafead3cc93176128117f9c96705cf4d17ea40d832aaf15b659afb7449e332da0e866e09ea73f5df15f869a628006c9509bc9aab825c5d7116cfde19353fd85ad39a9177bd6ed3de1894ef9460ac09c5ae1fa80855175f52ba3b2de5b444b6966ba661b962df32838bcddfec70267906ef03731ed153b8d213bbaa3599c503924b42cabf910b4d52bc431467"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) write$P9_RREADDIR(r1, &(0x7f0000000600)={0x103, 0x29, 0x1, {0x1, [{{0x4, 0x2, 0x6}, 0x5, 0x10000, 0x7, './file0'}, {{0x12, 0x0, 0x3}, 0x100000000, 0x6c36, 0x7, './file0'}, {{0xc}, 0x3fff80000, 0x5, 0x7, './file0'}, {{0x0, 0x1, 0x6}, 0x1, 0x1f, 0x7, './file0'}, {{0x0, 0x4}, 0x7fff, 0x8, 0x7, './file0'}, {{0x4, 0x1, 0x6}, 0x91, 0x3, 0x7, './file0'}, {{0x1, 0x0, 0x4}, 0x1e6a, 0x8001, 0x7, './file0'}, {{0xa0}, 0xfff, 0x3, 0x7, './file0'}]}}, 0x103) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) 19:09:50 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) recvfrom$packet(r0, &(0x7f0000000180)=""/190, 0xbe, 0x42, &(0x7f00000007c0)={0x11, 0x1f, r1, 0x1, 0xffff, 0x6, @broadcast}, 0x14) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) getresuid(&(0x7f0000000080), &(0x7f0000000100)=0x0, &(0x7f0000000240)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000380)=0x0) fcntl$lock(r0, 0x6, &(0x7f00000003c0)={0x2, 0x1, 0x1f, 0xffffffff, r3}) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000280)={{{@in=@multicast1, @in6=@loopback, 0x4e24, 0x1, 0x4e22, 0x0, 0x2, 0x80, 0xa0, 0x2b, 0x0, r2}, {0x6, 0xea9, 0x6, 0x7fff, 0x9, 0x3, 0x65, 0x84a5}, {0x100000000, 0x401, 0x79, 0xffffffff}, 0x3, 0x6e6bb7, 0x0, 0x0, 0x2, 0x1}, {{@in=@loopback, 0x4d6, 0x3b}, 0x0, @in=@multicast1, 0x0, 0x1, 0x2, 0x6, 0xc920aaa, 0x6, 0x8}}, 0xe8) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) 19:09:50 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) ioctl$TIOCNOTTY(r0, 0x5422) kexec_load(0xfffffffffffff19e, 0x3, &(0x7f0000000240)=[{&(0x7f0000000000)="b3120aebd241015d52af9b54b5b39ff3e12ac4dc629503", 0x17, 0xf8, 0x7}, {&(0x7f0000000180)="1df4be877a3deaec5f2500a514373024cd99fc1d8fbe25e8d9ce2dc1ee8ebf3564258072c226bdcbc44e9f535b7e462c1ac176e947e06cafebadf4da47f520dc6217d76db5cdc9a7e4b4dde4d854ed39f6cfef67ed02ad2b24e1032b24f84ea946a501675f2046490deb484e59ee0e807b3962504173f655c7b935ceba9b8c098f28005827ae237b3034baf0b964fe", 0x8f, 0x2, 0x10000}, {&(0x7f0000000080)="0c211011cf2123e1c827b3b3e781b502e8db6d55", 0x14, 0x3, 0x1}], 0x2) 19:09:50 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:09:50 executing program 2: r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x311000, 0x40) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000240)={0x6, {0x2, 0x4e24, @remote}, {0x2, 0x4e21, @local}, {0x2, 0x4e20, @multicast1}, 0x0, 0x107, 0x3, 0x18000, 0x0, &(0x7f0000000200)='veth0_to_team\x00', 0x8, 0x6, 0xfffffffffffffff9}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) fcntl$setsig(r1, 0xa, 0x1c) syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[]) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000180)=0x5) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x0, 0x45}, 0x14) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="000000000000000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700000000000000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}]) 19:09:50 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x3, 0x86, 0x2}) modify_ldt$write(0x1, &(0x7f0000000340)={0x1f, 0x20000800, 0x6000, 0x0, 0x0, 0x5d0733b2, 0xffffffff, 0x1}, 0x10) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000580)) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) [ 355.874315] loop0: rw=536870912, want=142, limit=112 [ 355.879452] attempt to access beyond end of device [ 355.884408] loop0: rw=536870912, want=143, limit=112 [ 355.889582] attempt to access beyond end of device [ 355.894542] loop0: rw=536870912, want=144, limit=112 [ 355.899709] attempt to access beyond end of device [ 355.904669] loop0: rw=536870912, want=145, limit=112 [ 355.910675] attempt to access beyond end of device [ 355.921469] loop0: rw=536870912, want=1369, limit=112 19:09:50 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="80fd02090003", 0x6}], 0x1000005b, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000180)) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) 19:09:50 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) [ 355.936025] attempt to access beyond end of device [ 355.942588] loop0: rw=536870912, want=1398, limit=112 [ 355.952171] 9pnet: Insufficient options for proto=fd [ 355.966570] attempt to access beyond end of device [ 355.972300] 9pnet: Insufficient options for proto=fd 19:09:50 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:09:50 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) r1 = geteuid() stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, r2) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x4, 0x1f, 0x1, 0x0, "c7bed80dd3eb7713159de427c79433fd5be9b06c8009dc7b1783ffb8c04c5577"}) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000180)=""/189) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) 19:09:50 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) utime(&(0x7f0000000300)='./file0\x00', &(0x7f0000000380)={0x1f, 0x28aa}) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000400)={0x0, 0x5}) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) 19:09:50 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x4f) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) [ 355.988030] loop0: rw=536870912, want=1399, limit=112 [ 356.000089] attempt to access beyond end of device [ 356.005331] loop0: rw=536870912, want=1400, limit=112 [ 356.011193] attempt to access beyond end of device [ 356.016192] loop0: rw=536870912, want=1401, limit=112 [ 356.021508] attempt to access beyond end of device [ 356.026428] loop0: rw=536870912, want=1422, limit=112 19:09:50 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:09:50 executing program 2: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x3, 0x86, 0x2}) modify_ldt$write(0x1, &(0x7f0000000340)={0x1f, 0x20000800, 0x6000, 0x0, 0x0, 0x5d0733b2, 0xffffffff, 0x1}, 0x10) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000580)) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) [ 356.036849] attempt to access beyond end of device [ 356.039442] FAT-fs (loop2): bogus number of reserved sectors [ 356.039448] FAT-fs (loop2): Can't find a valid FAT filesystem [ 356.073949] loop0: rw=536870912, want=1423, limit=112 [ 356.079161] attempt to access beyond end of device [ 356.116190] loop0: rw=536870912, want=1424, limit=112 [ 356.139248] attempt to access beyond end of device [ 356.154323] loop0: rw=536870912, want=1425, limit=112 [ 356.160482] attempt to access beyond end of device [ 356.165575] loop0: rw=536870912, want=1474, limit=112 [ 356.172545] attempt to access beyond end of device [ 356.178113] loop0: rw=536870912, want=1475, limit=112 [ 356.183966] attempt to access beyond end of device [ 356.188888] loop0: rw=536870912, want=1476, limit=112 [ 356.194642] attempt to access beyond end of device [ 356.199590] loop0: rw=536870912, want=1477, limit=112 [ 356.208124] attempt to access beyond end of device [ 356.215242] loop0: rw=536870912, want=1486, limit=112 [ 356.221177] attempt to access beyond end of device [ 356.227621] loop0: rw=536870912, want=1487, limit=112 [ 356.233418] attempt to access beyond end of device [ 356.238564] loop0: rw=536870912, want=1488, limit=112 [ 356.243868] attempt to access beyond end of device [ 356.248805] loop0: rw=536870912, want=1489, limit=112 [ 356.257875] attempt to access beyond end of device [ 356.268420] loop0: rw=536870912, want=3537, limit=112 [ 356.275424] attempt to access beyond end of device [ 356.280356] loop0: rw=536870912, want=5585, limit=112 [ 356.286651] attempt to access beyond end of device [ 356.291872] loop0: rw=536870912, want=7633, limit=112 [ 356.298748] attempt to access beyond end of device [ 356.303801] loop0: rw=536870912, want=9681, limit=112 [ 356.310922] attempt to access beyond end of device [ 356.316106] loop0: rw=536870912, want=11729, limit=112 [ 356.331834] attempt to access beyond end of device [ 356.338684] loop0: rw=536870912, want=13777, limit=112 [ 356.347445] attempt to access beyond end of device [ 356.352494] loop0: rw=536870912, want=15825, limit=112 [ 356.359629] attempt to access beyond end of device [ 356.365448] loop0: rw=536870912, want=17873, limit=112 [ 356.374511] attempt to access beyond end of device [ 356.379433] loop0: rw=536870912, want=19921, limit=112 [ 356.385874] attempt to access beyond end of device [ 356.390854] loop0: rw=536870912, want=21969, limit=112 [ 356.404387] attempt to access beyond end of device [ 356.409350] loop0: rw=536870912, want=24017, limit=112 [ 356.420223] attempt to access beyond end of device [ 356.425224] loop0: rw=536870912, want=26065, limit=112 [ 356.432188] attempt to access beyond end of device [ 356.438875] loop0: rw=536870912, want=28113, limit=112 [ 356.446785] attempt to access beyond end of device [ 356.451767] loop0: rw=536870912, want=30161, limit=112 [ 356.458555] attempt to access beyond end of device [ 356.463736] loop0: rw=536870912, want=32209, limit=112 [ 356.469853] attempt to access beyond end of device [ 356.474840] loop0: rw=536870912, want=32993, limit=112 19:09:51 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="0401001700000000000000e0000001000000000000000000000000ac1414aa000000000000000000000000000000000000d424b603000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000010000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000014000e0000000000000000000000000000000000"], 0x104}}, 0x0) 19:09:51 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:09:51 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, r1) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) 19:09:51 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:09:51 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getgid() write$P9_RGETATTR(r1, &(0x7f0000000600)={0xa0, 0x19, 0x1, {0x10, {0x4, 0x3, 0x8}, 0x0, r2, r3, 0x5, 0x3, 0xfffffffffffff398, 0xfffffffffffffffe, 0x7ff, 0x2, 0x200, 0x5, 0x3, 0x0, 0x9, 0x1c, 0xffffffffffffffbc, 0x7, 0xfffffffffffffffa}}, 0xa0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) accept4$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f00000006c0)=0x63, 0x80000) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000700)={r5, 0x1, 0x6, @local}, 0x10) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) 19:09:51 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x400000, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000180)=""/246) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="80fd", 0x34d}], 0x1, 0x2) write$binfmt_elf32(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1e4) 19:09:51 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x0, 0x80000001, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:09:51 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x0, 0x80000001, 0x7f, 0x5edf, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:09:51 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) 19:09:51 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) 19:09:51 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14, 0x80000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'veth0_to_team\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', r3}) 19:09:51 executing program 5: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000244000)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x400800, 0x0) mknodat(r0, &(0x7f0000000080)='./file0\x00', 0x8100, 0x8000) 19:09:51 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000100), 0x4) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000440)={0x6, 0x0, &(0x7f0000000540)}) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000080)={0x1, 0x50, &(0x7f0000000000)="54bf77e0e34e244897e108069b1ca66863a92e6a6785857be6f85f51826785173a998618ed07d7e749a7cf95831cbdbd37b35d630fea30ba6b08d3decc49b8bd5769297bd634ebc80584db0617e18a66"}) 19:09:51 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x3, 0x86, 0x2}) modify_ldt$write(0x1, &(0x7f0000000340)={0x1f, 0x20000800, 0x6000, 0x0, 0x0, 0x5d0733b2, 0xffffffff, 0x1}, 0x10) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000580)) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) [ 357.220545] selinux_nlmsg_perm: 349 callbacks suppressed [ 357.220555] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=30826 comm=syz-executor6 19:09:51 executing program 6: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x3, 0x86, 0x2}) modify_ldt$write(0x1, &(0x7f0000000340)={0x1f, 0x20000800, 0x6000, 0x0, 0x0, 0x5d0733b2, 0xffffffff, 0x1}, 0x10) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000580)) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:09:51 executing program 5: socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rpc\x00') ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000200)={0x8, 0x401, 0x6}) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x200000000008) writev(r2, &(0x7f0000000640)=[{&(0x7f0000000000)="ea", 0x1}], 0x1) 19:09:51 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x800a6, &(0x7f0000000180)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@common=@cache_fscache='cache=fscache'}, {@sq={'sq', 0x3d, 0x200}}, {@rq={'rq', 0x3d, 0x8001}}, {@rq={'rq'}}, {@sq={'sq', 0x3d, 0x10001}}]}}) 19:09:51 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x0, 0x80000001, 0x7f, 0x5edf, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:09:51 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000380)) write$P9_RUNLINKAT(r1, &(0x7f0000000300)={0xfffffffffffffeb7, 0x4d, 0x6}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) [ 357.269953] attempt to access beyond end of device [ 357.275018] loop0: rw=536870912, want=130, limit=112 [ 357.289884] attempt to access beyond end of device [ 357.298211] loop0: rw=536870912, want=131, limit=112 [ 357.306786] attempt to access beyond end of device 19:09:51 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000180)={0x6, 0x2, 0x8, 0x0, 0x0, [{r0, 0x0, 0xffa}, {r0, 0x0, 0xff}, {r0, 0x0, 0x4}, {r0, 0x0, 0xfffffffffffffff7}, {r0}, {r0, 0x0, 0x7}, {r0, 0x0, 0xd3a}, {r0, 0x0, 0x3}]}) [ 357.315625] loop0: rw=536870912, want=132, limit=112 [ 357.320876] attempt to access beyond end of device [ 357.325807] loop0: rw=536870912, want=133, limit=112 [ 357.331754] attempt to access beyond end of device [ 357.338921] loop0: rw=536870912, want=142, limit=112 19:09:51 executing program 5: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) timerfd_create(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 19:09:51 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/urandom\x00', 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="e7984607310b0cd9ba0fb06a5ea90c1cdc9b302b9ec55b9f856d736a56542a664f5fe96ec697ddbad79de327f21eb17d56b806a4dfac16ee637982de156292176698ceb46d455b58d0e62c6930079a77b18205d14429254e05d5756beb35bfaa60b2578a75f59f931a050b19d84a506975d91e1d4336b676fb9e31eadf881058aa6f4232158f1dd01bfaa176675ef618da53f4692d24b23b8828eb5d7b5f5ceef6f0a0708863a66b35f4b5e4a5190663e711c1d3e9b48144cc7702e44e345999e9f0d649678eef6db0b95a18112c1b258335b187eef4095c7596912c45d9c9071903d19e78cd58694be4eebf971784ea9d9755c7c2eda979647bfcb2a4797882") socketpair$packet(0x11, 0x0, 0x300, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={'syzkaller0\x00', {0x2, 0x4, @multicast2}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fsetxattr(r2, &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000240)="707070311b656d3176626f786e657430", 0x10, 0x0) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000100), 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, &(0x7f0000d83ff8), 0x8000fffffffe) setxattr(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32]], &(0x7f0000000040)='grpquota', 0x8, 0x0) 19:09:51 executing program 4: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet6_int(r0, 0x29, 0xdc, &(0x7f0000000080), &(0x7f0000000100)=0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x10103d, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) [ 357.370248] attempt to access beyond end of device [ 357.375197] loop0: rw=536870912, want=143, limit=112 [ 357.412697] attempt to access beyond end of device [ 357.427287] loop0: rw=536870912, want=144, limit=112 [ 357.446126] attempt to access beyond end of device [ 357.459619] loop0: rw=536870912, want=145, limit=112 [ 357.480561] attempt to access beyond end of device [ 357.494605] loop0: rw=536870912, want=2193, limit=112 [ 357.511488] attempt to access beyond end of device [ 357.520989] loop0: rw=536870912, want=3737, limit=112 [ 357.531583] attempt to access beyond end of device [ 357.551544] loop0: rw=536870912, want=3766, limit=112 [ 357.557010] attempt to access beyond end of device [ 357.562117] loop0: rw=536870912, want=3767, limit=112 [ 357.567415] attempt to access beyond end of device [ 357.572716] loop0: rw=536870912, want=3768, limit=112 [ 357.578089] attempt to access beyond end of device [ 357.583236] loop0: rw=536870912, want=3769, limit=112 [ 357.588431] attempt to access beyond end of device [ 357.598831] loop0: rw=536870912, want=3790, limit=112 [ 357.604174] attempt to access beyond end of device [ 357.609757] loop0: rw=536870912, want=3791, limit=112 [ 357.615151] attempt to access beyond end of device [ 357.620123] loop0: rw=536870912, want=3792, limit=112 [ 357.625450] attempt to access beyond end of device [ 357.630406] loop0: rw=536870912, want=3793, limit=112 [ 357.635927] attempt to access beyond end of device [ 357.640900] loop0: rw=536870912, want=3842, limit=112 [ 357.646243] attempt to access beyond end of device [ 357.651230] loop0: rw=536870912, want=3843, limit=112 [ 357.656705] attempt to access beyond end of device [ 357.661727] loop0: rw=536870912, want=3844, limit=112 [ 357.667166] attempt to access beyond end of device [ 357.672250] loop0: rw=536870912, want=3845, limit=112 [ 357.677677] attempt to access beyond end of device [ 357.682955] loop0: rw=536870912, want=3854, limit=112 [ 357.688332] attempt to access beyond end of device [ 357.693406] loop0: rw=536870912, want=3855, limit=112 [ 357.698763] attempt to access beyond end of device [ 357.703913] loop0: rw=536870912, want=3856, limit=112 [ 357.709155] attempt to access beyond end of device [ 357.714373] loop0: rw=536870912, want=3857, limit=112 [ 357.720837] attempt to access beyond end of device [ 357.728993] loop0: rw=536870912, want=5905, limit=112 [ 357.745906] attempt to access beyond end of device [ 357.750840] loop0: rw=536870912, want=7953, limit=112 [ 357.766317] attempt to access beyond end of device [ 357.771540] loop0: rw=536870912, want=10001, limit=112 [ 357.785035] attempt to access beyond end of device [ 357.799472] loop0: rw=536870912, want=12049, limit=112 [ 357.807052] attempt to access beyond end of device [ 357.812321] loop0: rw=536870912, want=14097, limit=112 [ 357.825601] attempt to access beyond end of device [ 357.836525] loop0: rw=536870912, want=16145, limit=112 [ 357.843222] attempt to access beyond end of device [ 357.856835] loop0: rw=536870912, want=18193, limit=112 [ 357.875001] attempt to access beyond end of device [ 357.879932] loop0: rw=536870912, want=20241, limit=112 [ 357.891989] attempt to access beyond end of device [ 357.897232] loop0: rw=536870912, want=22289, limit=112 [ 357.908806] attempt to access beyond end of device [ 357.913870] loop0: rw=536870912, want=24337, limit=112 [ 357.920670] attempt to access beyond end of device [ 357.925667] loop0: rw=536870912, want=26385, limit=112 [ 357.932998] attempt to access beyond end of device [ 357.937985] loop0: rw=536870912, want=28433, limit=112 [ 357.944756] attempt to access beyond end of device [ 357.949683] loop0: rw=536870912, want=30481, limit=112 [ 357.956115] attempt to access beyond end of device [ 357.961069] loop0: rw=536870912, want=32529, limit=112 [ 357.967159] attempt to access beyond end of device [ 357.972124] loop0: rw=536870912, want=32993, limit=112 [ 357.975577] attempt to access beyond end of device [ 357.975583] loop6: rw=536870912, want=130, limit=112 [ 357.975594] attempt to access beyond end of device [ 357.975599] loop6: rw=536870912, want=131, limit=112 [ 357.975608] attempt to access beyond end of device [ 357.975612] loop6: rw=536870912, want=132, limit=112 [ 357.975621] attempt to access beyond end of device [ 357.975626] loop6: rw=536870912, want=133, limit=112 [ 357.975635] attempt to access beyond end of device [ 357.975639] loop6: rw=536870912, want=142, limit=112 [ 357.975648] attempt to access beyond end of device [ 357.975652] loop6: rw=536870912, want=143, limit=112 [ 357.975661] attempt to access beyond end of device [ 357.975665] loop6: rw=536870912, want=144, limit=112 [ 357.975674] attempt to access beyond end of device [ 357.975678] loop6: rw=536870912, want=145, limit=112 [ 357.976412] attempt to access beyond end of device [ 357.976416] loop6: rw=536870912, want=1753, limit=112 [ 357.976694] attempt to access beyond end of device [ 357.976698] loop6: rw=536870912, want=1782, limit=112 [ 357.976710] attempt to access beyond end of device [ 357.976714] loop6: rw=536870912, want=1783, limit=112 [ 357.976724] attempt to access beyond end of device [ 357.976728] loop6: rw=536870912, want=1784, limit=112 [ 357.976737] attempt to access beyond end of device [ 357.976741] loop6: rw=536870912, want=1785, limit=112 [ 357.976750] attempt to access beyond end of device [ 357.976754] loop6: rw=536870912, want=1806, limit=112 [ 357.976763] attempt to access beyond end of device [ 357.976768] loop6: rw=536870912, want=1807, limit=112 [ 357.976776] attempt to access beyond end of device [ 357.976781] loop6: rw=536870912, want=1808, limit=112 [ 357.976790] attempt to access beyond end of device [ 357.976794] loop6: rw=536870912, want=1809, limit=112 [ 357.976807] attempt to access beyond end of device [ 357.976812] loop6: rw=536870912, want=1858, limit=112 [ 357.976821] attempt to access beyond end of device [ 357.976825] loop6: rw=536870912, want=1859, limit=112 [ 357.976834] attempt to access beyond end of device [ 357.976838] loop6: rw=536870912, want=1860, limit=112 [ 357.976847] attempt to access beyond end of device [ 357.976851] loop6: rw=536870912, want=1861, limit=112 [ 357.976860] attempt to access beyond end of device [ 357.976864] loop6: rw=536870912, want=1870, limit=112 [ 357.976875] attempt to access beyond end of device [ 357.976879] loop6: rw=536870912, want=1871, limit=112 [ 357.976889] attempt to access beyond end of device [ 357.976893] loop6: rw=536870912, want=1872, limit=112 [ 357.976902] attempt to access beyond end of device [ 357.976906] loop6: rw=536870912, want=1873, limit=112 [ 357.978349] attempt to access beyond end of device [ 357.978354] loop6: rw=536870912, want=3921, limit=112 [ 357.979650] attempt to access beyond end of device [ 357.979655] loop6: rw=536870912, want=5969, limit=112 [ 357.980942] attempt to access beyond end of device [ 357.980947] loop6: rw=536870912, want=8017, limit=112 [ 357.982351] attempt to access beyond end of device [ 357.982356] loop6: rw=536870912, want=10065, limit=112 [ 357.984126] attempt to access beyond end of device [ 357.984132] loop6: rw=536870912, want=12113, limit=112 [ 357.985511] attempt to access beyond end of device [ 357.985517] loop6: rw=536870912, want=14161, limit=112 [ 357.986793] attempt to access beyond end of device [ 357.986798] loop6: rw=536870912, want=16209, limit=112 [ 357.992900] attempt to access beyond end of device [ 357.992906] loop6: rw=536870912, want=18257, limit=112 [ 357.994182] attempt to access beyond end of device [ 357.994187] loop6: rw=536870912, want=20305, limit=112 [ 357.995580] attempt to access beyond end of device [ 357.995586] loop6: rw=536870912, want=22353, limit=112 [ 357.996860] attempt to access beyond end of device [ 357.996865] loop6: rw=536870912, want=24401, limit=112 [ 357.998358] attempt to access beyond end of device [ 357.998363] loop6: rw=536870912, want=26449, limit=112 [ 357.999648] attempt to access beyond end of device [ 357.999653] loop6: rw=536870912, want=28497, limit=112 [ 358.000926] attempt to access beyond end of device [ 358.000931] loop6: rw=536870912, want=30545, limit=112 [ 358.002277] attempt to access beyond end of device [ 358.002282] loop6: rw=536870912, want=32593, limit=112 [ 358.003355] attempt to access beyond end of device [ 358.003361] loop6: rw=536870912, want=32993, limit=112 19:09:53 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x3, 0x86, 0x2}) modify_ldt$write(0x1, &(0x7f0000000340)={0x1f, 0x20000800, 0x6000, 0x0, 0x0, 0x5d0733b2, 0xffffffff, 0x1}, 0x10) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000580)) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:09:53 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x0, 0x80000001, 0x7f, 0x5edf, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:09:53 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0x1, 0x4, 0x200, 0x8b, 0x60000000, 0x200}) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) membarrier(0x8, 0x0) 19:09:53 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x101004, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f0000001700)=[{&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="ee60e02b53e8ec8b02cef25b714d9724d78dcd4b5af1af497d25fd9dccf6750eae5ea25770e2ff7a96c9beef9ab30c9549372bca2a466530b1bffdfaaae4955f8582c1f3e396ea4e8557e0de70ca49895334e3b443209fa40186916d4a26a2f99e4e25b61c5f573874046b1b0ee3c96f39905408626b231c8d77784034c6ae1a0d410d7643a98645fe8ec03ad5066ccfdfd7b9967ed384896f6c55711f8b764c4bc07b97ce65903b4bffef5b807069f4e48b60ff4e880139f7eb98bc5e74bfc1629098ee0b1e06e7", 0xc8}, {&(0x7f0000001280)="b29d671a2984353c1052af36cd2c8fc90ca9961ce6828239e3e57992b9d21721bdbe3a5b99d66e0197d8fa3d06e8ef7f094ee6831e1697ba89f196769657f1500ba32291518a262bf41eb5391518f49af808af827e8471fe2768c28e88e1bd24d5dbdea3213e4f8824abd3df7597667d1420efd8aa09c30633386cbfea5b3d1e2e8be0bc46d10531645b0f56674a7c5c7180e2797023319a70ca3236203fd05d50d3d063fd80ba341b1f01dfb1256c01d85168a1ec1a77acd1cc2f0685432d949009b5af066c7ef8ac0d8b99c53ec425ba067a3dcd470957e8d9e232e3444c9452c50df82e7bcae10d9547df4028f5d142385cd31f0d2ef7f20a5520dc18", 0xfe}, {&(0x7f0000001380)="07ce5affabd8c0e51cda7069aff20a30985e2d37b634416669c168e56e9cbac7098bcfbe2689775b173f0857ccda23ce2ab1bce6ea021257680c1d694a686529cef481807172346b7daac38096a82a942c2aee7fbff8ab3ae2074e6effccc2c2e335c27161bc9ca79950fbb8d841da517126e41a8595c7aa219bc23a96a53cfa874e5d2525591b", 0x87}, {&(0x7f0000001440)="a678c67ac7f99525fcffce843531e55cb843fce16a186fb8e3cd7a9e47b1ffe6cabce2809e64cdfa1dc94571acdf5d8b8c01015948ef2af0720475363552a277fb13943737022b8e3aed4a0e8cee40eb8fa376e74b95a5032ad0c4c6217ced0c2cfa81d6e5cadd029cebaff1cdc9ef9729f49e18b52d60ec501c2643589d83ff5576783c699039c73b950819", 0x8c}, {&(0x7f0000000000)="ce5b6083f7afad80cb6b6e649906960bfafce894ed6fde0810", 0x19}, {&(0x7f0000000040)="17450b724af3f2e6a5999217da132aaa2125dbcf8d7257b7941fa24254fee62d684142d302cc5989", 0x28}, {&(0x7f0000001500)="6721a6dd3194451703f434bb8c913e1b9b8e95ce6c7a51a9f3e4f6808c13e3b48af062970fab827df0f3965f821bd9c822852545486ed27c3bbd14a421221d0f1d6c170439478e5059ab60260311f15914d504117768654cfe0f45d868a85944c33ec23aa9d9c1ea84c03403085e6b7699c0c5034bdf4baf7ffa3b85dbe3bbfef0755631b76ff6341c14bd539bfae50bc064a80725e5a441e8f8bcedb73f631ac0a7421bb1d2ffe82fac01e50e9909a6c485b605b155f20840ba056f4f2e5bfcbc6afe20427ceb9b7598", 0xca}, {&(0x7f0000001600)="dbe6f9493574d23bd1e6ab32e110eef4d4de1a7832bc725ad6452045c1d55357883ac6e5c188e81c4b867e41330ac7807dacd7713862c95bcc412c131903b91fa6caf278bc72523f3b5ecbfb4b445b9e7df577adb756559f5a3b3977336b3f0ebf956aaf8faebe8d49cc926d7f024bff6ba084233188aff339caef44ef6f28914fe5a2b3b74800442f27c64d4904e6432e5180f125d698e8463ad9c7099bb7df29636132859d8f33618ef3467f4b6a559ecb99011bd5ba4d52a80571089a2ac72b54a936c6", 0xc5}], 0x9, 0x0) 19:09:53 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000740)) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/route\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f00000000c0)={0x0, 0x3, {0x31, 0x3a, 0x1, 0x19, 0x2, 0x7ff, 0x1, 0x6b, 0x1}}) preadv(r2, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 19:09:53 executing program 7: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x100000000000000) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RLERRORu(r0, &(0x7f0000000100)={0x13, 0x7, 0x1, {{0x6, 'access'}, 0x1f}}, 0x13) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) 19:09:53 executing program 6: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x3, 0x86, 0x2}) modify_ldt$write(0x1, &(0x7f0000000340)={0x1f, 0x20000800, 0x6000, 0x0, 0x0, 0x5d0733b2, 0xffffffff, 0x1}, 0x10) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000580)) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:09:53 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/urandom\x00', 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") socketpair$packet(0x11, 0x0, 0x300, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={'syzkaller0\x00', {0x2, 0x4, @multicast2}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fsetxattr(r2, &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000240)="707070311b656d3176626f786e657430", 0x10, 0x0) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000100), 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, &(0x7f0000d83ff8), 0x8000fffffffe) setxattr(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32]], &(0x7f0000000040)='grpquota', 0x8, 0x0) 19:09:53 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) sched_setattr(r1, &(0x7f0000000180)={0x30, 0x0, 0x1, 0x100000000, 0x7, 0x1, 0x8, 0x3f}, 0x0) chdir(&(0x7f0000000300)='./file0\x00') ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000140)) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f0000000000)={0x7, 0x8000}) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000280)={'icmp6\x00'}, &(0x7f00000002c0)=0x1e) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)="932a61c76cdcec62181ff9f24846af53e1266be6525168183743185f9662cb10e78c47600364bff0f69dd66d99ec1428b4201814373433600590dc9a1ef1bacafe450eb53dd8f4530439b5f230f94abb20f9e428dcc14b562286dd9f06bb7ba7d877a45571fd6eb5d06b49ce22e58c037a8ce6bb50030ad97f3c35167fb07e6160a78014804f847c", 0xfbf}], 0x1, 0x0) write$FUSE_ENTRY(r0, &(0x7f00000001c0)={0x90, 0xfffffffffffffff5, 0x3, {0x2, 0x0, 0x3, 0x0, 0x2, 0x2, {0x1, 0xd, 0x6, 0x4, 0x0, 0x2, 0xaf, 0x8c15, 0xba2d, 0x2, 0x6298, r2, r3, 0x5d35c028, 0x3f}}}, 0x90) 19:09:53 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x0, 0x7f, 0x5edf, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) [ 358.782312] attempt to access beyond end of device [ 358.787389] loop0: rw=536870912, want=114, limit=112 [ 358.806641] buffer_io_error: 111 callbacks suppressed [ 358.806647] Buffer I/O error on dev loop0, logical block 113, lost async page write 19:09:53 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x16f1, 0x10000) syncfs(r0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x2000, 0x0) renameat2(r1, &(0x7f0000000180)='.\x00', r2, &(0x7f0000000200)='./file0\x00', 0x4) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x8800, 0x0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f000082ef0a)=""/246) ioctl$BLKROGET(r3, 0x125e, &(0x7f0000000080)) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x20000, 0x0) 19:09:53 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) read(r0, &(0x7f0000000180)=""/4096, 0x1000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000000)={0x80000001}) ioctl$KDADDIO(r0, 0x4b34, 0x4) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f00000000c0)={0x1, 0x1, 0x9, 0x8de, 0xff, 0xfff}) 19:09:53 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rtc0\x00', 0x4840, 0x0) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f0000000380)=0x2) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0xb, 0x29, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) [ 358.847908] attempt to access beyond end of device [ 358.871586] loop0: rw=536870912, want=115, limit=112 [ 358.884377] Buffer I/O error on dev loop0, logical block 114, lost async page write 19:09:53 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000740)) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/route\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f00000000c0)={0x0, 0x3, {0x31, 0x3a, 0x1, 0x19, 0x2, 0x7ff, 0x1, 0x6b, 0x1}}) preadv(r2, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 19:09:53 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x0, 0x7f, 0x5edf, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) [ 358.920541] attempt to access beyond end of device 19:09:53 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x1000200, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000000000)={0x2, 0x7, 0x7, 0x7fffffff, 0x3, 0x1}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)=0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x1f, &(0x7f0000000180)=""/247) [ 358.946527] loop0: rw=536870912, want=116, limit=112 [ 358.968136] Buffer I/O error on dev loop0, logical block 115, lost async page write [ 358.986698] attempt to access beyond end of device [ 358.999948] loop0: rw=536870912, want=117, limit=112 [ 359.029632] Buffer I/O error on dev loop0, logical block 116, lost async page write [ 359.050136] attempt to access beyond end of device [ 359.073172] loop0: rw=536870912, want=130, limit=112 [ 359.087622] Buffer I/O error on dev loop0, logical block 129, lost async page write [ 359.099554] attempt to access beyond end of device [ 359.109472] loop0: rw=536870912, want=131, limit=112 [ 359.121915] Buffer I/O error on dev loop0, logical block 130, lost async page write [ 359.130510] attempt to access beyond end of device [ 359.135824] loop0: rw=536870912, want=132, limit=112 [ 359.141060] Buffer I/O error on dev loop0, logical block 131, lost async page write [ 359.149275] attempt to access beyond end of device [ 359.154239] loop0: rw=536870912, want=133, limit=112 [ 359.159482] Buffer I/O error on dev loop0, logical block 132, lost async page write [ 359.172744] attempt to access beyond end of device [ 359.177900] loop0: rw=536870912, want=2189, limit=112 [ 359.194258] attempt to access beyond end of device [ 359.207224] loop0: rw=536870912, want=4237, limit=112 [ 359.220480] attempt to access beyond end of device [ 359.225675] loop0: rw=536870912, want=6285, limit=112 [ 359.232508] attempt to access beyond end of device [ 359.237775] loop0: rw=536870912, want=8333, limit=112 [ 359.244270] attempt to access beyond end of device [ 359.249288] loop0: rw=536870912, want=9301, limit=112 [ 359.254932] attempt to access beyond end of device [ 359.260188] loop0: rw=536870912, want=9302, limit=112 [ 359.265507] Buffer I/O error on dev loop0, logical block 9301, lost async page write [ 359.273649] attempt to access beyond end of device [ 359.278838] loop0: rw=536870912, want=9303, limit=112 [ 359.284177] Buffer I/O error on dev loop0, logical block 9302, lost async page write [ 359.292305] attempt to access beyond end of device [ 359.297598] loop0: rw=536870912, want=9304, limit=112 [ 359.302926] attempt to access beyond end of device [ 359.308072] loop0: rw=536870912, want=9305, limit=112 [ 359.313487] attempt to access beyond end of device [ 359.318575] loop0: rw=536870912, want=9334, limit=112 [ 359.336412] attempt to access beyond end of device [ 359.344804] loop0: rw=536870912, want=9335, limit=112 [ 359.356457] attempt to access beyond end of device [ 359.362658] loop0: rw=536870912, want=9336, limit=112 [ 359.368409] attempt to access beyond end of device [ 359.373589] loop0: rw=536870912, want=9337, limit=112 [ 359.379011] attempt to access beyond end of device [ 359.384007] loop0: rw=536870912, want=9358, limit=112 [ 359.392369] attempt to access beyond end of device [ 359.397525] loop0: rw=536870912, want=9359, limit=112 [ 359.403198] attempt to access beyond end of device [ 359.408461] loop0: rw=536870912, want=9360, limit=112 [ 359.413707] attempt to access beyond end of device [ 359.419133] loop0: rw=536870912, want=9361, limit=112 [ 359.424518] attempt to access beyond end of device [ 359.429534] loop0: rw=536870912, want=9410, limit=112 [ 359.434725] attempt to access beyond end of device [ 359.439791] loop0: rw=536870912, want=9411, limit=112 [ 359.445000] attempt to access beyond end of device [ 359.449969] loop0: rw=536870912, want=9412, limit=112 [ 359.455239] attempt to access beyond end of device [ 359.460206] loop0: rw=536870912, want=9413, limit=112 [ 359.466086] attempt to access beyond end of device [ 359.471072] loop0: rw=536870912, want=11469, limit=112 [ 359.477349] attempt to access beyond end of device [ 359.482360] loop0: rw=536870912, want=13517, limit=112 [ 359.488605] attempt to access beyond end of device [ 359.493553] loop0: rw=536870912, want=15565, limit=112 [ 359.498335] attempt to access beyond end of device [ 359.498341] loop6: rw=536870912, want=130, limit=112 [ 359.498352] attempt to access beyond end of device [ 359.498356] loop6: rw=536870912, want=131, limit=112 [ 359.498365] attempt to access beyond end of device [ 359.498369] loop6: rw=536870912, want=132, limit=112 [ 359.498379] attempt to access beyond end of device [ 359.498383] loop6: rw=536870912, want=133, limit=112 [ 359.498392] attempt to access beyond end of device [ 359.498396] loop6: rw=536870912, want=142, limit=112 [ 359.498405] attempt to access beyond end of device [ 359.498409] loop6: rw=536870912, want=143, limit=112 [ 359.498418] attempt to access beyond end of device [ 359.498422] loop6: rw=536870912, want=144, limit=112 [ 359.498431] attempt to access beyond end of device [ 359.498435] loop6: rw=536870912, want=145, limit=112 [ 359.498880] attempt to access beyond end of device [ 359.498888] loop6: rw=536870912, want=1113, limit=112 [ 359.499062] attempt to access beyond end of device [ 359.499066] loop6: rw=536870912, want=1142, limit=112 [ 359.499076] attempt to access beyond end of device [ 359.499080] loop6: rw=536870912, want=1143, limit=112 [ 359.499090] attempt to access beyond end of device [ 359.499094] loop6: rw=536870912, want=1144, limit=112 [ 359.499103] attempt to access beyond end of device [ 359.499107] loop6: rw=536870912, want=1145, limit=112 [ 359.499116] attempt to access beyond end of device [ 359.499120] loop6: rw=536870912, want=1166, limit=112 [ 359.499129] attempt to access beyond end of device [ 359.499133] loop6: rw=536870912, want=1167, limit=112 [ 359.499142] attempt to access beyond end of device [ 359.499146] loop6: rw=536870912, want=1168, limit=112 [ 359.499155] attempt to access beyond end of device [ 359.499159] loop6: rw=536870912, want=1169, limit=112 [ 359.499174] attempt to access beyond end of device [ 359.499178] loop6: rw=536870912, want=1218, limit=112 [ 359.499187] attempt to access beyond end of device [ 359.499191] loop6: rw=536870912, want=1219, limit=112 [ 359.499200] attempt to access beyond end of device [ 359.499204] loop6: rw=536870912, want=1220, limit=112 [ 359.499213] attempt to access beyond end of device [ 359.499217] loop6: rw=536870912, want=1221, limit=112 [ 359.499228] attempt to access beyond end of device [ 359.499232] loop6: rw=536870912, want=1230, limit=112 [ 359.499241] attempt to access beyond end of device [ 359.499245] loop6: rw=536870912, want=1231, limit=112 [ 359.499254] attempt to access beyond end of device [ 359.499258] loop6: rw=536870912, want=1232, limit=112 [ 359.499267] attempt to access beyond end of device [ 359.499271] loop6: rw=536870912, want=1233, limit=112 [ 359.500564] attempt to access beyond end of device [ 359.500569] loop6: rw=536870912, want=3281, limit=112 [ 359.501823] attempt to access beyond end of device [ 359.501828] loop6: rw=536870912, want=5329, limit=112 [ 359.503058] attempt to access beyond end of device [ 359.503062] loop6: rw=536870912, want=7377, limit=112 [ 359.504476] attempt to access beyond end of device [ 359.504481] loop6: rw=536870912, want=9425, limit=112 [ 359.505875] attempt to access beyond end of device [ 359.505881] loop6: rw=536870912, want=11473, limit=112 [ 359.507135] attempt to access beyond end of device [ 359.507140] loop6: rw=536870912, want=13521, limit=112 [ 359.508527] attempt to access beyond end of device [ 359.508532] loop6: rw=536870912, want=15569, limit=112 [ 359.509965] attempt to access beyond end of device [ 359.509970] loop6: rw=536870912, want=17617, limit=112 [ 359.511192] attempt to access beyond end of device [ 359.511197] loop6: rw=536870912, want=19665, limit=112 [ 359.512408] attempt to access beyond end of device [ 359.512413] loop6: rw=536870912, want=21713, limit=112 [ 359.513634] attempt to access beyond end of device [ 359.513639] loop6: rw=536870912, want=23761, limit=112 [ 359.515078] attempt to access beyond end of device [ 359.515083] loop6: rw=536870912, want=25809, limit=112 [ 359.516381] attempt to access beyond end of device [ 359.516386] loop6: rw=536870912, want=27857, limit=112 [ 359.517644] attempt to access beyond end of device [ 359.517649] loop6: rw=536870912, want=29905, limit=112 [ 359.518914] attempt to access beyond end of device [ 359.518919] loop6: rw=536870912, want=31953, limit=112 [ 359.519976] attempt to access beyond end of device [ 359.519982] loop6: rw=536870912, want=32993, limit=112 [ 359.916277] attempt to access beyond end of device [ 359.921254] loop0: rw=536870912, want=17613, limit=112 [ 359.927464] attempt to access beyond end of device [ 359.932450] loop0: rw=536870912, want=19661, limit=112 [ 359.938620] attempt to access beyond end of device [ 359.943580] loop0: rw=536870912, want=21709, limit=112 [ 359.949790] attempt to access beyond end of device [ 359.954754] loop0: rw=536870912, want=23757, limit=112 [ 359.960826] attempt to access beyond end of device [ 359.965884] loop0: rw=536870912, want=25805, limit=112 [ 359.972585] attempt to access beyond end of device [ 359.977539] loop0: rw=536870912, want=27853, limit=112 [ 359.983668] attempt to access beyond end of device [ 359.988607] loop0: rw=536870912, want=29901, limit=112 [ 359.994825] attempt to access beyond end of device [ 359.999775] loop0: rw=536870912, want=31949, limit=112 [ 360.005617] attempt to access beyond end of device [ 360.010561] loop0: rw=536870912, want=32989, limit=112 19:09:54 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x3, 0x86, 0x2}) modify_ldt$write(0x1, &(0x7f0000000340)={0x1f, 0x20000800, 0x6000, 0x0, 0x0, 0x5d0733b2, 0xffffffff, 0x1}, 0x10) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000580)) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:09:54 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f0000000000)) ioctl$int_out(r0, 0x2, &(0x7f0000000080)) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) 19:09:54 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000010000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000300)={0x3d, 0x6f, 0x1, {0x4, [{0x1, 0x2, 0x3}, {0x60, 0x4}, {0xa0, 0x0, 0x7142}, {0x80, 0x3, 0x3}]}}, 0x3d) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) 19:09:54 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000740)) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/route\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f00000000c0)={0x0, 0x3, {0x31, 0x3a, 0x1, 0x19, 0x2, 0x7ff, 0x1, 0x6b, 0x1}}) preadv(r2, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 19:09:54 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x14, 0x4) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000180)={0x1, 0x6, 0xf68d, 0x8, "6a5bbc5b78dfab164309da6348bb9416b94dc22c231fda96c53633bc672dc649"}) ptrace$getsig(0x4202, r1, 0x10, &(0x7f0000000100)) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f00000002c0)) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000001c0)=""/246) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x7ff) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) 19:09:54 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x0, 0x7f, 0x5edf, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:09:54 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x0, 0x7f, 0x5edf, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:09:54 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast2}, 0x10) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) sched_setaffinity(0x0, 0x1c6, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x5, 0x0, "1ab7670182978f0300000000000004bf764095d43a5094f4b23c1c29b51dda91c51e08a14591eacd58d1107eb341398d6cef6fcdd1579b31460082f27dabdcdbeae7f5d8e8f9706468579ae10010a75b"}, 0xd8) r1 = getpgid(0xffffffffffffffff) ptrace$cont(0x29, r1, 0x3, 0x6) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) 19:09:54 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) sysfs$1(0x1, &(0x7f0000000000)='+*procsystem\x00') 19:09:54 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000740)) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/route\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f00000000c0)={0x0, 0x3, {0x31, 0x3a, 0x1, 0x19, 0x2, 0x7ff, 0x1, 0x6b, 0x1}}) preadv(r2, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) [ 360.385681] attempt to access beyond end of device [ 360.390643] loop0: rw=536870912, want=114, limit=112 19:09:54 executing program 7: pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000e914000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) 19:09:54 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x0, 0x5edf, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:09:54 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000180)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) 19:09:54 executing program 4: r0 = socket$unix(0x1, 0x7, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000180)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x10003, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000580)=""/246) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) 19:09:54 executing program 2: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x3, 0x86, 0x2}) modify_ldt$write(0x1, &(0x7f0000000340)={0x1f, 0x20000800, 0x6000, 0x0, 0x0, 0x5d0733b2, 0xffffffff, 0x1}, 0x10) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000580)) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) [ 360.426873] attempt to access beyond end of device [ 360.436423] loop0: rw=536870912, want=115, limit=112 [ 360.466600] attempt to access beyond end of device [ 360.495522] loop0: rw=536870912, want=116, limit=112 [ 360.517523] attempt to access beyond end of device 19:09:55 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000180)={0x3, 0x2, {0x2, 0x1, 0x8, 0x1, 0x1}}) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) [ 360.540224] loop0: rw=536870912, want=117, limit=112 [ 360.561874] attempt to access beyond end of device [ 360.576774] loop0: rw=536870912, want=130, limit=112 [ 360.584854] attempt to access beyond end of device [ 360.598388] loop0: rw=536870912, want=131, limit=112 [ 360.619944] attempt to access beyond end of device [ 360.663261] loop0: rw=536870912, want=132, limit=112 [ 360.682282] attempt to access beyond end of device [ 360.689782] loop0: rw=536870912, want=133, limit=112 [ 360.701792] attempt to access beyond end of device [ 360.709487] loop0: rw=536870912, want=2189, limit=112 [ 360.726400] attempt to access beyond end of device [ 360.732858] loop0: rw=536870912, want=4237, limit=112 [ 360.743437] attempt to access beyond end of device [ 360.760368] loop0: rw=536870912, want=6285, limit=112 [ 360.775445] attempt to access beyond end of device [ 360.787737] loop0: rw=536870912, want=8333, limit=112 [ 360.793601] attempt to access beyond end of device [ 360.798637] loop0: rw=536870912, want=9237, limit=112 [ 360.804019] attempt to access beyond end of device [ 360.809047] loop0: rw=536870912, want=9238, limit=112 [ 360.814289] attempt to access beyond end of device [ 360.819472] loop0: rw=536870912, want=9239, limit=112 [ 360.824719] attempt to access beyond end of device [ 360.829689] loop0: rw=536870912, want=9240, limit=112 [ 360.835258] attempt to access beyond end of device [ 360.840262] loop0: rw=536870912, want=9241, limit=112 [ 360.845542] attempt to access beyond end of device [ 360.850533] loop0: rw=536870912, want=9270, limit=112 [ 360.857157] attempt to access beyond end of device [ 360.862674] loop0: rw=536870912, want=9271, limit=112 [ 360.869294] attempt to access beyond end of device [ 360.874257] loop0: rw=536870912, want=9272, limit=112 [ 360.879520] attempt to access beyond end of device [ 360.884479] loop0: rw=536870912, want=9273, limit=112 [ 360.889780] attempt to access beyond end of device [ 360.894726] loop0: rw=536870912, want=9294, limit=112 [ 360.899967] attempt to access beyond end of device [ 360.904945] loop0: rw=536870912, want=9295, limit=112 [ 360.910210] attempt to access beyond end of device [ 360.915179] loop0: rw=536870912, want=9296, limit=112 [ 360.920482] attempt to access beyond end of device [ 360.925432] loop0: rw=536870912, want=9297, limit=112 [ 360.930689] attempt to access beyond end of device [ 360.935651] loop0: rw=536870912, want=9330, limit=112 [ 360.940913] attempt to access beyond end of device [ 360.945861] loop0: rw=536870912, want=9331, limit=112 [ 360.951093] attempt to access beyond end of device [ 360.956069] loop0: rw=536870912, want=9332, limit=112 [ 360.961323] attempt to access beyond end of device [ 360.966295] loop0: rw=536870912, want=9333, limit=112 [ 360.971541] attempt to access beyond end of device [ 360.976467] loop0: rw=536870912, want=9346, limit=112 [ 360.981807] attempt to access beyond end of device [ 360.987337] loop0: rw=536870912, want=9347, limit=112 [ 360.992578] attempt to access beyond end of device [ 360.997492] loop0: rw=536870912, want=9348, limit=112 [ 361.002689] attempt to access beyond end of device [ 361.007934] loop0: rw=536870912, want=9349, limit=112 [ 361.013150] attempt to access beyond end of device [ 361.018067] loop0: rw=536870912, want=9358, limit=112 [ 361.023281] attempt to access beyond end of device [ 361.028523] loop0: rw=536870912, want=9359, limit=112 [ 361.033779] attempt to access beyond end of device [ 361.038710] loop0: rw=536870912, want=9360, limit=112 [ 361.043921] attempt to access beyond end of device [ 361.048846] loop0: rw=536870912, want=9361, limit=112 [ 361.054966] attempt to access beyond end of device [ 361.059913] loop0: rw=536870912, want=11409, limit=112 [ 361.066033] attempt to access beyond end of device [ 361.071259] loop0: rw=536870912, want=13457, limit=112 [ 361.077329] attempt to access beyond end of device [ 361.082293] loop0: rw=536870912, want=15505, limit=112 [ 361.088401] attempt to access beyond end of device [ 361.093724] loop0: rw=536870912, want=17553, limit=112 [ 361.099803] attempt to access beyond end of device [ 361.105063] loop0: rw=536870912, want=19601, limit=112 [ 361.111215] attempt to access beyond end of device [ 361.116167] loop0: rw=536870912, want=21649, limit=112 [ 361.122532] attempt to access beyond end of device [ 361.127498] loop0: rw=536870912, want=23697, limit=112 [ 361.133789] attempt to access beyond end of device [ 361.138753] loop0: rw=536870912, want=25745, limit=112 [ 361.145529] attempt to access beyond end of device [ 361.150516] loop0: rw=536870912, want=27793, limit=112 [ 361.157132] attempt to access beyond end of device [ 361.162111] loop0: rw=536870912, want=29841, limit=112 [ 361.168295] attempt to access beyond end of device [ 361.173265] loop0: rw=536870912, want=31889, limit=112 [ 361.179073] attempt to access beyond end of device [ 361.184033] loop0: rw=536870912, want=32985, limit=112 19:09:56 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x3, 0x86, 0x2}) modify_ldt$write(0x1, &(0x7f0000000340)={0x1f, 0x20000800, 0x6000, 0x0, 0x0, 0x5d0733b2, 0xffffffff, 0x1}, 0x10) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:09:56 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x0, 0x5edf, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:09:56 executing program 3: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0xfff, 0x0, 0x1, 0xffffffffffffffff}) ftruncate(r0, 0x9) r1 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100), 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) 19:09:56 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000740)) syz_open_procfs(0x0, &(0x7f0000000180)='net/route\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 19:09:56 executing program 7: pipe2$9p(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x200000004000) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0xff86) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) mkdir(&(0x7f0000000380)='./file0\x00', 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) r2 = memfd_create(&(0x7f0000000100)=',bdev\x00', 0x2) getsockopt$inet_mreqsrc(r2, 0x0, 0x25, &(0x7f00000003c0)={@remote, @dev, @broadcast}, &(0x7f0000000400)=0xc) 19:09:56 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000180)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) 19:09:56 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast2}, 0x10) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) sched_setaffinity(0x0, 0x1c6, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x5, 0x0, "1ab7670182978f0300000000000004bf764095d43a5094f4b23c1c29b51dda91c51e08a14591eacd58d1107eb341398d6cef6fcdd1579b31460082f27dabdcdbeae7f5d8e8f9706468579ae10010a75b"}, 0xd8) r1 = getpgid(0xffffffffffffffff) ptrace$cont(0x29, r1, 0x3, 0x6) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) 19:09:56 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x0, 0x5edf, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:09:56 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x0, 0x5edf, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:09:56 executing program 2: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x3, 0x86, 0x2}) modify_ldt$write(0x1, &(0x7f0000000340)={0x1f, 0x20000800, 0x6000, 0x0, 0x0, 0x5d0733b2, 0xffffffff, 0x1}, 0x10) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000580)) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:09:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000)) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) writev(r1, &(0x7f00000016c0)=[{&(0x7f0000000180)="51afcf85c2347ece90fbd284ac49684e0bdf46c06b56dcabb67c75bfdb118dfac8302d0e173e3c856ed98c0d1327c86a476b63f6a1304c8a98da360a3edf641c6dfe9f6c39c7c87136a684da8816622447ade4c908237517df3a88828fdc0372ba2f8abee306542e857fa90d3a35b7712049014911d765a1b4b523cd9edef383abde81af72c940a2cab877411f3511b2258c76822975d1142771af80d784b4006f49aa0ba96776e4dbd38658a15f46fe4bad470562cd674d9ff7d20faccd884e9421324abf3043", 0xc7}, {&(0x7f0000000280)="6f247de48776f6c3ff5c5dfd55b6598813537454a01af6b1f8a45880262442cb744e318c14fc11a0888f9e582f5651e94e39d58e52797722997b85bdf9969976faa9b30f8773f366b477320e4a999cd9957fa0356dcc1c284814edab02054215f340afe29e7f73978c1c77985d64cd1cb370f669d083404af281a7007c9495452cf0f057000b873c479464a36c83309ffdef6b5e5120cd6a7f76fa99cf764b3ae638807677d30158104582cdc4339b87f24b3a39c2bb083a6b00fa77f54f88c721d89b12cd", 0xc5}, {&(0x7f0000000380)="aa94fe40890684e16273318d31029e1309a8d98167fdff31744ce446b2d11fecded4dfae7a46eb06e9209e56b83c7e1fb5b9beceb3c3674c603f9d28176826a9dc79e8cf300355e7fa07a18f62aec3a175890867e7c790e8a437f6cdce11cac0581802cd4c14fb04ee1680c755c721931db3aabd05bb0b67194761341aef0790892eedfdc9ceedd0c2c5e5604755a74fd03e621e9ed774cd80ceac324be1386a17ed940eb15802bd9ba0ea41aaec78a561130bec14dd9ffe067eb1f083ef96e0709ed3318f744e94ee4228099003c85d370ccc5698213a142b71819cb4c69f2badb040e251757b2dc7b0a6149104729c32851f5cc1094a", 0xf7}, {&(0x7f0000000480)="13005f62012c03749e62a12bc37fe762fe2c167a76e917f6490137075277ba88e64db9a49327e6c1ed72e2a5dc15df6cfcce7423b644da1b6893c3b4ce747185932dd88c70ad9f68b602cfa518641c02830d3c060aebd1875d285b9971a61f9f7149c0c47461e82eeb0c31dcb8dcb85954b8ce5183", 0x75}, {&(0x7f0000000100)="0a0323ab34c2f8d7d7756f21279cc66c4165b90c8b6c08aa5feb560e02a33d9bb2bc78ad2d0da9b23fe742c9e8bd4b6a4f2c9b60735530fce0", 0x39}, {&(0x7f0000000500)="01d266d8ea62bb451535d59bcd32e9d27656a7fe192df1b2631b6a2e884c40544043fd67b87aec23912a250ec48e97f5389004f62f12ae3edba132bd14aaab12b60980e2c773c19eece457b89020086088b210780a294ffdb7ba25d66656e5096a2fe64277f5f545621ebf59c51353ef831786fe265f8aaea5a38a8216b77751ab0bc561916537e80bb11c2850c6a47c44ebf7b89cea60eb6087e86afb63d1cd679b4779e80a69b179c5f5a02c3eda1f1f09b0029566869db2611d520892d0ff7ac263876a90076c732fdce950043e9b6ba0706ff00ee9b19df120c8e2f776cb275da5bb7b26ff336cd0f2b969eafd146d76284c1a159b8ba9b183f4a4bae177a578ab5fc0f358948227043ed534d7a111139c2631026489912930da89e3b2b1273d783a1bcdd7aeb81e26d247d0ae746f2f4b8df1e667eaed6018f5d18974f73d8d3754c66d74ccdcb215ff3ee256dd5e9842eaf9b508d05044e61554300b4a0b752ab5da1e343b11945a23dde507d68d5ac5c6b315c926d4d76c5447073b5c7f86dfe435322be146c7de9fae8838130671aaf00e41a51939812c49f0016cb80d485e93ea2209bdac6ad28ae00f64312f68c84aed866c0bdd3d44dc022a6af19a96f3c7f8de67bea504d9d7daefe08aa40eea49495803e9125045bb564cd2b2be21e44a8a58a1ac666c66914e76254f58980a45243228cfd985350ebbedf7391a7861f9d3773ef6241a57a3931604a13c19d9938dacff89713b04bd972aeca6f39425d630342510bd542207b2fe52d3d9c304e57c8186e4392527d1313326bc77126de740ad5f1418fa0acb35b9cc3ee0fad9a2a3f308d54032e312e0122458afc5712c4db5fa1d0526dfb3473e0281a1b27344e3cbd097567bc3e2701d3a48198ac17e40a0385b51f9e530e3defd73ed837d0ef6e37007827984f249599bef1d87547264d0e091fd9139bc6af861f56a1ec168bd391fc178d14138e1c518cf6015ab3f40e3cbcf299d9609f05519ed0820941926828c0c623087f08f52408c95696f7bae81400f9b2e789581fac8179eb5d98135eb4302344ed761f51f448ceaa012f24f8ee4a194cf25614d960c1743cb7af6605a15f057426d603664157e649fa14424951873b94d2554c2d6c55746640315e41ae5c302de1d05ff28ca7a317f7f800b7cb5f3b42cde91bc2e4794329f5e87fcdb3909c59ceeae86173072b68c599a95fb878bfd4570b946b8b4366b4ceca22fb13e8c4736006897f9f029bf19ed8f11ba7a88b67d4d0ab21f92a9776418b365a88b25bb69efb7ba57d63a0125d8447b6baf4dba9879c3d5a036fa885f724d276da030d6e4a68eed75436c6b95d49b86f1743056d2f51f1ee99ca62926dc5e540a09a0a795f1dd112bb29974e704ca4b5263d3d340cf3578c86647fe405a7ebd549a7a90c7776896eeb3d660fc49c4a33fa9f06c06d9b7705a5074f5b2eb0079bc9ac2ded9ab288cb787a6ae369272d5c718baf53019474f16eeb98d4ee8eb9c287e2ac3fe097ba0948984792aae8d6e85c74c30686f6b7c247722133cc4a4b3334b8f78e93a997eb367620c949932ff3ad15e231d3f82c48ab86c8c9020e7469585f9c6010208e4335ea7ca90221cd654c2fce16a3db367eacdc9edc3fe6a11989fb3aedd4f7f3ed9db09bbe54b5861c4bda320c63525708695b634dbc77b378440ef7f9eab59d5f9f8e6bff98cbf03228ba656b598edcceff7e41fdedab7675788cbac19b5663d5831b531eba51cff8d655b9a8dc6d5bc0e9f9f1df1f6fbadbc59e64c5833188e14b783ce52b2bf4f9de6980bca84e261f8e41ef4216506fec30021c1ad3fba7d8929b18aa0f12be3448cc36075e39c7ea5a58fc7424fb9f561d47aea7c20a99990a28423fdca976cdc3719593b948b7569ac273953ace479b187fc9a07ca658bc0b062c2262f143297d5e05e9e4a882f8acbaa2d878af98c152b28a0907e75e7da091d0c2ed4447c5f083f46eb55c4dea98aa40bcda60737bc18c4dafe703cdb3165ff486c4309e6c68b53df8c6e0bad866e0ea91a6c48339acd833f0f75bb3ca0f84c428e755d77bf103d34f057f112892f6432ab9bbb7142afd2dc571e2fe7bc19b7fd0c6eec72e1e03f49fa246885cf01a91a4a9e0ac58ab321c48944802c9249a0c4f53572665d09137fc51c08b8c40e40e341a0da2cefcebc7db1587157a4654fb4c8bdebf872f456f4b7cc5da3193052d866ff4635ede533595253f4c7313f1977cc0d9b0c5935a8babab1997100d8a0c47d7b87ec0756c8e1d1a32b7a283f0c2483174f2322a2f40273bf3bbfdc34a514ad26a8d1cc5ab3b90ac7d63fb73079e1c0f95fc1a4cf2059bad8ce8cd594966bf419716dfb8acb3d5066f659672d03cfba5b148cff08482d4a6aec615353793b0d10f63d3255043c1a26edbf15e97aa2424c6c8304f9f1a17f913945f50d85dc6276bcf2fcb8d63f37f83b247131faf455c87210333e903d1a0a861ab585077bfc767f8411958e1d9879634261d9bd8e66a2ffce822ed3e7faafb407c2497d7c8c706df6a74d89b12a1ff202b1abce397000a3fdb8962572159f24614f89842e8e802442813ea070a91e09b6d5cf623d7e83fed49b487fc020270f0367d15c0b6dc7ba57653f8101eed23fae2984a7f3773cca25d2a0619366b305235e47332e898a1513244463a2422e3dc4e88ebe4605d90aed5d90ba299ca6467ce546f7bc3179efc1951eba9c7a63725f2e5ab793358c864ea414e306d2dbdc5f058f67567b9ed5c614fba350f7aff5ac11b5169f6b22438e1212b3a387a256778ac016012d3bd981ae2d99821ff478144e1219b3b1a7f21bfb3cffc294fbd6e5af163cc79b5cff2f28f8198fad57e6b77fb4ce74bf055d451065751a8ba327e9b07083d7faafd69a9c056ee25cb5ec55000e8c0cf1e9e82d07e5827a091b317b3215dd79d52b71e5ac8b727d914587e17b0687919c7af20622c0879b9412a3d9b77eeaacdc88488887bc0d0905a153a24c08965141e02e186179be471df68b04bd6967e8935169baf48f1d13ebd80ba988aefbfceb748288077b381b6ea0d256f53a6724454c0ef7d291ea0c7c916d78bbfebec3c9cc8648f73ed9744e14d47237cf1e350ebd798da56df6b5aafd55059e12b3eb6ecbc2f76808fd170f326ed2e0b7cac3c613f310e9c6ccbd6b5ee20da803a1d7fb8dfc7d51ce87535aee804ea8e47d0ecc2215eda6c67a4f298a553e13b2e5f623afe9ff38712563f999b83a0bf8f0db85b6428f9a15a28f4079623cd22a12c5246732db938da6ed7496fae16385eaef82aedce5e6dd24b9724540a3ad2c0a3342483ca5243dc88c88175f3c66828183081bff049bb0dd2014f75405b3750c504edb57cbb65ba407b8baa815ecca8422c2afd7d565eb2be9670ff93caf8ba3d8e8374f22501a0132b210395a330ddc897c10b703c7a8ebe13a7856a7265778e5a84420a93f52520b338c94d549180a2c8b8424eb887840c7478ec2fef7dec39572d9e24b2e06005c68af20b44cd2403c7584dfe63bccaa40454cf757609ffecf9cd00151a1a3ef6863b2dbc754a0bfd251ea4e929c0c6b01b7cd4dafa96077b39b5371b9028acd4c2b06ea5bcd7a096194f876fdfadbc11d13ef46caf021985bfdc84455a14eb9293296f0ecfce92c4000fde8e0092c10c6e1edaa49f47d399c9775cad721e6a0b9b5492befb9e9f4a58f4278659d3dcc75e46ecfdff135f6408965610f6911cb69c33be10475364c07002575f3d0243e00bca510a92479d6750baadddebae7653505998b2b518d0579045a1dfbadc397937739f1b561ba9f79046e16dac34e4380f3de520d251003546ef0cda8664c5b57ac872fe0dddf694c0cb99c866547c05ebed2927f675fc657e7dc93d6db4b1aec347459a96248ce2bb1f70ce76273e819e017a3ed92c8c3431cabc8d4e38bb06cf9d12a96c61264899fd73346d17581b9158b40857fc795867014e01627f83f7849810b896d8065782c57f0df06f7f3d15082c12682bae55f6ff1d82e1b6d0b248815a498f09ec127cdfd7b3aaf90806ab4623c532d718b06bfac63709e9b36c9440b873ea29edf18557841b0d6c2a1c50f9ca9dad8e1117bf6ccf4fc240ba10be22678b42f88fb716e320009817712b397b786732f0e685924e88fc3bbdea1d87a453c38585bc047c140ff413875501fabd7765838e23da7950372b28aa06f587848e3068331615230c5bc83030a541312559d1caa61012bfbe38f01729030276eb70f420b0b37af8e36fee4f1dc7eccfc6ece8cb73fd24a3b69fbd38f4e55229236bec9440aae6c883c5507263596e4f88da673aed13eef0dc4c3bcbe113dc847d8893763425c075f53600e1d2754a8286a35585badbddbfc0c3d2babb138381d48d922c5808a812f714379d10ad66fd763ddf839af7112121c8f17461a9237380112e5b3a5252759306665fa6ce761cf2e6655b8ac007410cc763b8c98e0b5b4556799fc703d0f443b21964add35d3a2d212759e5bc8fc6f57130935913df4a042007af068abffcfeebfb1a95c985621a635f5224c01508a39a59c7f05eb348e7ab6678d2f23c60df612dcc3550a3294594c583cd0396177a5b98ca8420b10b822ffc19581d70dd6d8c149e9d8c535c0fae360cf10843b09ab32aba78870f606ee242f4756b8d6b95143bf22d3ce4900e544e4da485f1c5d55e5bc54818d436c276e8453181d4aa9a94a28037f6ffb9bda57f1962a9a43e3f32a3b5a3713891c821498a02ad86fd309f3a09f93cb1850c1356bea89c4a62df84526058276cf4101faa40b9d3810ea4662608dc7d4a8c3788791ad492c963b39468d5d39e531e2dbb7d3d61e252dcb00ab7d337f693037757ce953e1cfac001d693c045602bde9466b03135f8395f9ea91c29ab6fcf156dd952eec7c6e6aac325f5e4ce025dc61a8e4d794016457c8cbea7c5f20cafbd138558e499fab199302f237e76461ec580c0d7be13841a79478ae3b03bbf5a2c73f952ed0fddbfbf6669c7d288ab0407bfc333bbc9058457b08ed6a20f7a81bcd7c475c1284fe4dd92c04ce5f922c4691e3ebc7153b9b8fe219d9e8c6a8959f98094419e55544192d38aabdb934a6deb3aa1d63fccdd9287ae1d71b18d80410f7ea0fccd7727414d8cedd82eef4b65e4e0f8b7a7699f54ce383ff6c5b9c666f5de875a975498c46d5ad022172ca901c814dafebd409518ce99b4863b4b2e10d9c1834128093f92139092c562f6bb8877811984269de63ff1e43973b47dac6da20c63fa4b3857196b18902d7dd2ded34f368c349d412a3c79b129759ca3441f50ac7fd9d84947675233f0677143fd57e5038d151ff86aeef55b4983d151c3804bf6b81abd7a935b0fea782e4cc41af96e5c8ba86967bfdabeab51746d9c0e1d1e6b0f15588bee0e27f21a56c6f0c2b379583e4d58b354b0b44ec08c7246ac4c09fde3c27974e9d13359ba5822bd2b94ec197cbd99bbc631bf2ee8193957f6967d8970bed738008e3d4ac8d7ea488ce0aff1c1a562290492e661c8d0056bd3eb64392f365c2d6b552a1c83f54ede9dfd397cc6cc9c1939435ef1fd505a0e2c62bf7d93e45156e4d357f14d7a39bc83cfe8fb0b1d53c5903cc2b2ca9cbeafa830948ae7d83cc2d8490f763699dbdbeaa07db1a6b4a41ec955bdc13ea8f9fb1d6b1ad7afa709300a8df01e19ff593b06524d1c19bd3bba9c14176cebd3af67e700df4cd212532ce33ae0dbff19c9418da214a2a6e950a5a3e", 0x1000}, {&(0x7f0000001500)="90691c9bc93305737bf6a70204e6a9dd49146426ff9c427acb888557ed15a9ae6a9d048d3a07fc6feb122d74374fde0e3724f02b86561dcdad591d60d9f6318be4d6a93d2074818e57c69cd776b859818e6caa1e45bfe5640bd3c87dccc684ebc117ad764ca39c8746782ddb21de235a6aeaed928203d09a2e5a09a15e66976b7ab105fd838978dcdbe5511e06acc16d9add8e3a47c079d6143c3b", 0x9b}, {&(0x7f00000015c0)="97c717562fef7b9fd834e99e7c8848b16ddb9b08af98c0a058d218d428f41cc17a6713f7d0c539242d08ef51c3e093ce326a09de345c592fce57fe5c66cf79e48c927a4a4554a875bd023d05d41b67b5cbfa4ba324eca5af06e91e8d0f8b0395ce51f2a4fa38775af2fae88acf221a7cf0f0b89d68464989fe266e36c4cab9a6cc82bb75a2de9868f4a70a78680d1acd6338e9b4e1b24463b95735413c11b42227a593a6743a0d648a15894f5830c69589f5d80dc9a3eaecb6594948de5c17d421a20f99d4456bff17a69555615b865daf46a5912e86b9a283391f6c1b0463262d220f63310e575642a3aed756f158", 0xef}], 0x8) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000018c0)='/dev/ppp\x00', 0x8400, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) write$P9_RREMOVE(r2, &(0x7f0000001740)={0x7, 0x7b, 0x2}, 0x7) read$eventfd(r2, &(0x7f0000000000), 0x8) [ 361.596926] attempt to access beyond end of device [ 361.602190] loop0: rw=536870912, want=130, limit=112 19:09:56 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000740)) syz_open_procfs(0x0, &(0x7f0000000180)='net/route\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 19:09:56 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x0, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:09:56 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) process_vm_readv(r1, &(0x7f0000001500)=[{&(0x7f0000000180)=""/82, 0x52}, {&(0x7f0000000200)=""/224, 0xe0}, {&(0x7f0000000300)=""/228, 0xe4}, {&(0x7f0000000400)=""/77, 0x4d}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000000080)=""/17, 0x11}, {&(0x7f0000001480)=""/106, 0x6a}], 0x7, &(0x7f0000000100), 0x0, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) [ 361.646104] attempt to access beyond end of device [ 361.658522] loop0: rw=536870912, want=131, limit=112 [ 361.677435] attempt to access beyond end of device [ 361.683527] loop0: rw=536870912, want=132, limit=112 19:09:56 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) r1 = pkey_alloc(0x0, 0x2) pkey_free(r1) 19:09:56 executing program 2: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x3, 0x86, 0x2}) modify_ldt$write(0x1, &(0x7f0000000340)={0x1f, 0x20000800, 0x6000, 0x0, 0x0, 0x5d0733b2, 0xffffffff, 0x1}, 0x10) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000580)) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) [ 361.691738] attempt to access beyond end of device [ 361.698495] loop0: rw=536870912, want=133, limit=112 [ 361.721672] attempt to access beyond end of device [ 361.758623] loop0: rw=536870912, want=142, limit=112 [ 361.763758] attempt to access beyond end of device [ 361.772715] loop0: rw=536870912, want=143, limit=112 [ 361.777986] attempt to access beyond end of device [ 361.783180] loop0: rw=536870912, want=144, limit=112 [ 361.792824] attempt to access beyond end of device [ 361.800269] loop0: rw=536870912, want=145, limit=112 [ 361.806830] attempt to access beyond end of device [ 361.812055] loop0: rw=536870912, want=2193, limit=112 [ 361.819058] attempt to access beyond end of device [ 361.827022] loop0: rw=536870912, want=4241, limit=112 [ 361.835550] attempt to access beyond end of device [ 361.840791] loop0: rw=536870912, want=6289, limit=112 [ 361.847958] attempt to access beyond end of device [ 361.858051] loop0: rw=536870912, want=8337, limit=112 [ 361.869816] attempt to access beyond end of device [ 361.874842] loop0: rw=536870912, want=10329, limit=112 [ 361.880772] attempt to access beyond end of device [ 361.885867] loop0: rw=536870912, want=10358, limit=112 [ 361.891328] attempt to access beyond end of device [ 361.896434] loop0: rw=536870912, want=10359, limit=112 [ 361.901934] attempt to access beyond end of device [ 361.906930] loop0: rw=536870912, want=10360, limit=112 [ 361.912521] attempt to access beyond end of device [ 361.917497] loop0: rw=536870912, want=10361, limit=112 [ 361.922962] attempt to access beyond end of device [ 361.928078] loop0: rw=536870912, want=10382, limit=112 [ 361.933430] attempt to access beyond end of device [ 361.938430] loop0: rw=536870912, want=10383, limit=112 [ 361.943696] attempt to access beyond end of device [ 361.948674] loop0: rw=536870912, want=10384, limit=112 [ 361.953971] attempt to access beyond end of device [ 361.958992] loop0: rw=536870912, want=10385, limit=112 [ 361.964294] attempt to access beyond end of device [ 361.969248] loop0: rw=536870912, want=10434, limit=112 [ 361.974521] attempt to access beyond end of device [ 361.979743] loop0: rw=536870912, want=10435, limit=112 [ 361.985091] attempt to access beyond end of device [ 361.990068] loop0: rw=536870912, want=10436, limit=112 [ 362.001529] attempt to access beyond end of device [ 362.006614] loop0: rw=536870912, want=10437, limit=112 [ 362.011953] attempt to access beyond end of device [ 362.016942] loop0: rw=536870912, want=10446, limit=112 [ 362.022301] attempt to access beyond end of device [ 362.027256] loop0: rw=536870912, want=10447, limit=112 [ 362.032614] attempt to access beyond end of device [ 362.037575] loop0: rw=536870912, want=10448, limit=112 [ 362.046891] attempt to access beyond end of device [ 362.051957] loop0: rw=536870912, want=10449, limit=112 [ 362.058259] attempt to access beyond end of device [ 362.063242] loop0: rw=536870912, want=12497, limit=112 [ 362.070015] attempt to access beyond end of device [ 362.074945] loop0: rw=536870912, want=14545, limit=112 [ 362.081708] attempt to access beyond end of device [ 362.086669] loop0: rw=536870912, want=16593, limit=112 [ 362.093664] attempt to access beyond end of device [ 362.098624] loop0: rw=536870912, want=18641, limit=112 [ 362.105224] attempt to access beyond end of device [ 362.110226] loop0: rw=536870912, want=20689, limit=112 [ 362.116850] attempt to access beyond end of device [ 362.121817] loop0: rw=536870912, want=22737, limit=112 [ 362.128353] attempt to access beyond end of device [ 362.133342] loop0: rw=536870912, want=24785, limit=112 [ 362.140064] attempt to access beyond end of device [ 362.145020] loop0: rw=536870912, want=26833, limit=112 [ 362.151675] attempt to access beyond end of device [ 362.156648] loop0: rw=536870912, want=28881, limit=112 [ 362.163188] attempt to access beyond end of device [ 362.168138] loop0: rw=536870912, want=30929, limit=112 [ 362.174848] attempt to access beyond end of device [ 362.179850] loop0: rw=536870912, want=32977, limit=112 [ 362.185543] attempt to access beyond end of device [ 362.190524] loop0: rw=536870912, want=32993, limit=112 19:09:57 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x3, 0x86, 0x2}) modify_ldt$write(0x1, &(0x7f0000000340)={0x1f, 0x20000800, 0x6000, 0x0, 0x0, 0x5d0733b2, 0xffffffff, 0x1}, 0x10) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:09:57 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000740)) syz_open_procfs(0x0, &(0x7f0000000180)='net/route\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 19:09:57 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x40081, 0x0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000000)) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) 19:09:57 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x0, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:09:57 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000380)=""/246) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000080)) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x800, 0x0) 19:09:57 executing program 6: prctl$intptr(0x2f, 0x2) prctl$intptr(0x1, 0x4) 19:09:57 executing program 2: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x3, 0x86, 0x2}) modify_ldt$write(0x1, &(0x7f0000000340)={0x1f, 0x20000800, 0x6000, 0x0, 0x0, 0x5d0733b2, 0xffffffff, 0x1}, 0x10) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000580)) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:09:57 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c04cba95c6f1d", @ANYRESHEX=r1, @ANYBLOB=',\x00']) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="160000006f0100010008000000000000000000000000e445ceedce2bb7"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x3, 0x4, &(0x7f00000004c0)=[{&(0x7f0000000600)="4fe522846c62be5a984c4018bc7c0dd13a253fe75126dee0caec501483a929c6d5c76f47e4ac8bd172d04173e2728d081557deabe69332a30d6f33bc7c5361fbbdd7fe0c2713d955edb90459516d75ba5d8b76f715a1e2f415c9316a951420575ff250baf8fb4cd40a174003d39e6ef6cdd6eddaa25b3e571401668cbea83a0b64c4b2770ea501434f09c4d454906411e28d09375d964a42b421655800ef8d6b3cfe424bfc3b7d9bfe1add938c73208935495ede29c1609f171be0f886ba8d0e09b8a2f6964f85a46320", 0xca, 0x6}, {&(0x7f00000003c0)="44ff3e40", 0x4, 0x8}, {&(0x7f0000000400)="4f92d0609d3581e4f644972c61ac12dcb501606b563d237bc2dfa65612673ccd52ae73016b73c79cdc7fe8b576dca3327203bcff800b4ee2bbe54b6607493c5ca2c2385e3d20ccc9df678113adf0295d3696c7b6d64073b8c2cb5fbe8a9e9b882687157b4889e9a0a3392a07ec", 0x6d, 0xef8}, {&(0x7f0000000700)="703b75a81719f900973646cbcac700b6becbf0a5660d9eec3138ba6c01ed4c4e489df93c2debd73929d5bd011f17529c9e651ab2b8ee101d55e034227d8547e05db58160cc934b7d49661ccce656f503320941c22014bf0c738007dc509ad88dd009d7aa3dace01666ebf24bb69b74799c28584047e8fcea8d17b6426a8553bfcfdf59ffb9278ef0961218301705e18bfdbe057e9c1357762eef286d0ff4d5601a07b958cee7af6bfea5052a26177912f6c6636c089f467d6b27fd6c0d87592e3ca8", 0xc2}], 0x1000400, &(0x7f0000000940)={[{@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@utf8='utf8=1'}, {@uni_xlate='uni_xlate=1'}, {@shortname_winnt='shortname=winnt'}, {@numtail='nonumtail=0'}, {@nonumtail='nnonumtail=1'}]}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) r2 = syz_open_procfs(0x0, &(0x7f0000000800)='attr\x00') ioctl$TIOCMSET(r2, 0x5418, &(0x7f00000008c0)=0x4fa) 19:09:57 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x0, 0x0, 0x8, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:09:57 executing program 6: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x3, 0x86, 0x2}) modify_ldt$write(0x1, &(0x7f0000000340)={0x1f, 0x20000800, 0x6000, 0x0, 0x0, 0x5d0733b2, 0xffffffff, 0x1}, 0x10) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:09:57 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ppp\x00', 0xfffffffffffffffc, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000080)) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) 19:09:57 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000740)) syz_open_procfs(0x0, &(0x7f0000000180)='net/route\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 19:09:57 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x14, 0x5, 0x8, 0x8, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_spirange={0x2, 0x10, 0x4d4, 0x4d6}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd25, 0x34ff}, @sadb_sa={0x2, 0x1, 0x4d4, 0x3, 0x6, 0xba, 0x4}]}, 0x40}}, 0x20040011) [ 362.757706] 9pnet: Insufficient options for proto=fd [ 362.773940] FAT-fs (loop7): Unrecognized mount option "nnonumtail=1" or missing value [ 362.782544] attempt to access beyond end of device [ 362.787648] loop0: rw=536870912, want=114, limit=112 [ 362.801420] attempt to access beyond end of device 19:09:57 executing program 7: pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,r]dio=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RREADDIR(r1, &(0x7f0000000600)={0x141, 0x29, 0x1, {0x1ff, [{{0x10, 0x1, 0x1}, 0x4, 0x3, 0x7, './file0'}, {{0x82, 0x0, 0x5}, 0x80, 0xbc, 0x7, './file0'}, {{0xbf, 0x0, 0x7}, 0x9, 0x0, 0x7, './file0'}, {{0x17, 0x4, 0x8}, 0x6, 0x7, 0x7, './file0'}, {{0x0, 0x4, 0x5}, 0x800, 0x100, 0x7, './file0'}, {{0x0, 0x4, 0x6}, 0x9f8f, 0xfffffffffffffeff, 0x7, './file0'}, {{0x4, 0x4, 0x8}, 0x2b, 0x1000, 0x7, './file0'}, {{0x4, 0x2, 0x3}, 0x7, 0x9, 0x7, './file0'}, {{0x2, 0x1, 0x6}, 0x60, 0x6, 0x7, './file0'}, {{0x0, 0x0, 0x5}, 0x8000, 0xfefd, 0x7, './file0'}]}}, 0x141) write$P9_RGETATTR(r1, &(0x7f0000000380)={0xa0, 0x19, 0x2, {0x0, {0x0, 0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xffffffffffffffe7) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) r2 = getuid() r3 = getegid() r4 = geteuid() write$P9_RSTATu(r1, &(0x7f0000000200)={0x65, 0x7d, 0x1, {{0x0, 0x4b, 0x3, 0x100000000, {0x0, 0x2, 0x5}, 0x82000000, 0x100000001, 0x4, 0x6, 0x2, '}\'', 0x5, 'wfdno', 0x3, '9p\x00', 0xe, 'keyringtrusted'}, 0x5, 'wfdno', r2, r3, r4}}, 0x65) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) [ 362.807233] 9pnet: Insufficient options for proto=fd 19:09:57 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) getpid() getresgid(&(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000240)) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)) r1 = gettid() r2 = getpgrp(r1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000180)={[], 0x2, 0x6, 0xf758, 0x0, 0x8000, r2}) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) [ 362.876041] loop0: rw=536870912, want=115, limit=112 19:09:57 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000740)) syz_open_procfs(0x0, &(0x7f0000000180)='net/route\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) [ 362.897190] attempt to access beyond end of device [ 362.912149] loop0: rw=536870912, want=116, limit=112 [ 362.918198] attempt to access beyond end of device [ 362.923263] loop0: rw=536870912, want=117, limit=112 [ 362.930354] attempt to access beyond end of device [ 362.938130] loop0: rw=536870912, want=130, limit=112 [ 362.943275] attempt to access beyond end of device [ 362.953582] loop0: rw=536870912, want=131, limit=112 [ 362.962854] 9pnet: Insufficient options for proto=fd [ 362.975866] 9pnet: Insufficient options for proto=fd [ 363.028707] attempt to access beyond end of device [ 363.039593] loop0: rw=536870912, want=132, limit=112 [ 363.053830] attempt to access beyond end of device [ 363.065872] loop0: rw=536870912, want=133, limit=112 [ 363.080413] attempt to access beyond end of device [ 363.094582] loop0: rw=536870912, want=2189, limit=112 [ 363.111749] attempt to access beyond end of device [ 363.118779] loop0: rw=536870912, want=4237, limit=112 [ 363.133870] attempt to access beyond end of device [ 363.139099] loop0: rw=536870912, want=6285, limit=112 [ 363.145020] attempt to access beyond end of device [ 363.150378] loop0: rw=536870912, want=6805, limit=112 [ 363.155949] attempt to access beyond end of device [ 363.161046] loop0: rw=536870912, want=6806, limit=112 [ 363.166378] attempt to access beyond end of device [ 363.171761] loop0: rw=536870912, want=6807, limit=112 [ 363.177111] attempt to access beyond end of device [ 363.182596] loop0: rw=536870912, want=6808, limit=112 [ 363.188027] attempt to access beyond end of device [ 363.193015] loop0: rw=536870912, want=6809, limit=112 [ 363.198317] attempt to access beyond end of device [ 363.203880] loop0: rw=536870912, want=6838, limit=112 [ 363.209261] attempt to access beyond end of device [ 363.214213] loop0: rw=536870912, want=6839, limit=112 [ 363.219496] attempt to access beyond end of device [ 363.224844] loop0: rw=536870912, want=6840, limit=112 [ 363.230268] attempt to access beyond end of device [ 363.235388] loop0: rw=536870912, want=6841, limit=112 [ 363.245748] attempt to access beyond end of device [ 363.255223] loop0: rw=536870912, want=6862, limit=112 [ 363.262866] attempt to access beyond end of device [ 363.268053] loop0: rw=536870912, want=6863, limit=112 [ 363.273489] attempt to access beyond end of device [ 363.278439] loop0: rw=536870912, want=6864, limit=112 [ 363.283897] attempt to access beyond end of device [ 363.288891] loop0: rw=536870912, want=6865, limit=112 [ 363.294332] attempt to access beyond end of device [ 363.299510] loop0: rw=536870912, want=6898, limit=112 [ 363.304892] attempt to access beyond end of device [ 363.310034] loop0: rw=536870912, want=6899, limit=112 [ 363.315255] attempt to access beyond end of device [ 363.320469] loop0: rw=536870912, want=6900, limit=112 [ 363.325827] attempt to access beyond end of device [ 363.330944] loop0: rw=536870912, want=6901, limit=112 [ 363.336220] attempt to access beyond end of device [ 363.341512] loop0: rw=536870912, want=6914, limit=112 [ 363.346896] attempt to access beyond end of device [ 363.352023] loop0: rw=536870912, want=6915, limit=112 [ 363.357670] attempt to access beyond end of device [ 363.363865] loop0: rw=536870912, want=6916, limit=112 [ 363.369226] attempt to access beyond end of device [ 363.374224] loop0: rw=536870912, want=6917, limit=112 [ 363.379643] attempt to access beyond end of device [ 363.384672] loop0: rw=536870912, want=6926, limit=112 [ 363.390066] attempt to access beyond end of device [ 363.395174] loop0: rw=536870912, want=6927, limit=112 [ 363.400625] attempt to access beyond end of device [ 363.405581] loop0: rw=536870912, want=6928, limit=112 [ 363.410936] attempt to access beyond end of device [ 363.415891] loop0: rw=536870912, want=6929, limit=112 [ 363.422272] attempt to access beyond end of device [ 363.427272] loop0: rw=536870912, want=8977, limit=112 [ 363.434310] attempt to access beyond end of device [ 363.439448] loop0: rw=536870912, want=11025, limit=112 [ 363.446377] attempt to access beyond end of device [ 363.451866] loop0: rw=536870912, want=13073, limit=112 [ 363.458756] attempt to access beyond end of device [ 363.464722] loop0: rw=536870912, want=15121, limit=112 [ 363.478348] attempt to access beyond end of device [ 363.489806] loop0: rw=536870912, want=17169, limit=112 [ 363.503720] attempt to access beyond end of device [ 363.508823] loop0: rw=536870912, want=19217, limit=112 [ 363.515783] attempt to access beyond end of device [ 363.520876] loop0: rw=536870912, want=21265, limit=112 [ 363.527710] attempt to access beyond end of device [ 363.532737] loop0: rw=536870912, want=23313, limit=112 [ 363.545078] attempt to access beyond end of device [ 363.550200] loop0: rw=536870912, want=25361, limit=112 [ 363.557366] attempt to access beyond end of device [ 363.562694] loop0: rw=536870912, want=27409, limit=112 [ 363.569555] attempt to access beyond end of device [ 363.574572] loop0: rw=536870912, want=29457, limit=112 [ 363.581036] attempt to access beyond end of device [ 363.586049] loop0: rw=536870912, want=31505, limit=112 [ 363.592522] attempt to access beyond end of device [ 363.592867] attempt to access beyond end of device [ 363.592873] loop2: rw=536870912, want=130, limit=112 [ 363.592885] attempt to access beyond end of device [ 363.592889] loop2: rw=536870912, want=131, limit=112 [ 363.592899] attempt to access beyond end of device [ 363.592903] loop2: rw=536870912, want=132, limit=112 [ 363.592913] attempt to access beyond end of device [ 363.592917] loop2: rw=536870912, want=133, limit=112 [ 363.592926] attempt to access beyond end of device [ 363.592930] loop2: rw=536870912, want=142, limit=112 [ 363.592939] attempt to access beyond end of device [ 363.592943] loop2: rw=536870912, want=143, limit=112 [ 363.592952] attempt to access beyond end of device [ 363.592957] loop2: rw=536870912, want=144, limit=112 [ 363.592966] attempt to access beyond end of device [ 363.592970] loop2: rw=536870912, want=145, limit=112 [ 363.593841] attempt to access beyond end of device [ 363.593846] loop2: rw=536870912, want=2193, limit=112 [ 363.594655] attempt to access beyond end of device [ 363.594659] loop2: rw=536870912, want=3289, limit=112 [ 363.594850] attempt to access beyond end of device [ 363.594854] loop2: rw=536870912, want=3318, limit=112 [ 363.594863] attempt to access beyond end of device [ 363.594868] loop2: rw=536870912, want=3319, limit=112 [ 363.594877] attempt to access beyond end of device [ 363.594881] loop2: rw=536870912, want=3320, limit=112 [ 363.594890] attempt to access beyond end of device [ 363.594894] loop2: rw=536870912, want=3321, limit=112 [ 363.594903] attempt to access beyond end of device [ 363.594907] loop2: rw=536870912, want=3342, limit=112 [ 363.594916] attempt to access beyond end of device [ 363.594920] loop2: rw=536870912, want=3343, limit=112 [ 363.594929] attempt to access beyond end of device [ 363.594934] loop2: rw=536870912, want=3344, limit=112 [ 363.594943] attempt to access beyond end of device [ 363.594947] loop2: rw=536870912, want=3345, limit=112 [ 363.594961] attempt to access beyond end of device [ 363.594965] loop2: rw=536870912, want=3394, limit=112 [ 363.594974] attempt to access beyond end of device [ 363.594978] loop2: rw=536870912, want=3395, limit=112 [ 363.594990] attempt to access beyond end of device [ 363.594994] loop2: rw=536870912, want=3396, limit=112 [ 363.595003] attempt to access beyond end of device [ 363.595007] loop2: rw=536870912, want=3397, limit=112 [ 363.595016] attempt to access beyond end of device [ 363.595020] loop2: rw=536870912, want=3406, limit=112 [ 363.595030] attempt to access beyond end of device [ 363.595034] loop2: rw=536870912, want=3407, limit=112 [ 363.595043] attempt to access beyond end of device [ 363.595047] loop2: rw=536870912, want=3408, limit=112 [ 363.595056] attempt to access beyond end of device [ 363.595060] loop2: rw=536870912, want=3409, limit=112 [ 363.596030] attempt to access beyond end of device [ 363.596035] loop2: rw=536870912, want=5457, limit=112 [ 363.597301] attempt to access beyond end of device [ 363.597306] loop2: rw=536870912, want=7505, limit=112 [ 363.598813] attempt to access beyond end of device [ 363.598819] loop2: rw=536870912, want=9553, limit=112 [ 363.601147] attempt to access beyond end of device [ 363.601153] loop2: rw=536870912, want=11601, limit=112 [ 363.603760] attempt to access beyond end of device [ 363.603766] loop2: rw=536870912, want=13649, limit=112 [ 363.606128] attempt to access beyond end of device [ 363.606134] loop2: rw=536870912, want=15697, limit=112 [ 363.608261] attempt to access beyond end of device [ 363.608266] loop2: rw=536870912, want=17745, limit=112 [ 363.609697] attempt to access beyond end of device [ 363.609703] loop2: rw=536870912, want=19793, limit=112 [ 363.610942] attempt to access beyond end of device [ 363.610948] loop2: rw=536870912, want=21841, limit=112 [ 363.612538] attempt to access beyond end of device [ 363.612544] loop2: rw=536870912, want=23889, limit=112 [ 363.613797] attempt to access beyond end of device [ 363.613802] loop2: rw=536870912, want=25937, limit=112 [ 363.615039] attempt to access beyond end of device [ 363.615044] loop2: rw=536870912, want=27985, limit=112 [ 363.616325] attempt to access beyond end of device [ 363.616330] loop2: rw=536870912, want=30033, limit=112 [ 363.617717] attempt to access beyond end of device [ 363.617723] loop2: rw=536870912, want=32081, limit=112 [ 363.618490] attempt to access beyond end of device [ 363.618495] loop2: rw=536870912, want=32993, limit=112 [ 363.673056] attempt to access beyond end of device [ 363.673063] loop6: rw=536870912, want=130, limit=112 [ 363.673075] attempt to access beyond end of device [ 363.673079] loop6: rw=536870912, want=131, limit=112 [ 363.673089] attempt to access beyond end of device [ 363.673093] loop6: rw=536870912, want=132, limit=112 [ 363.673102] attempt to access beyond end of device [ 363.673106] loop6: rw=536870912, want=133, limit=112 [ 363.673116] attempt to access beyond end of device [ 363.673120] loop6: rw=536870912, want=142, limit=112 [ 363.673129] attempt to access beyond end of device [ 363.673133] loop6: rw=536870912, want=143, limit=112 [ 363.673142] attempt to access beyond end of device [ 363.673146] loop6: rw=536870912, want=144, limit=112 [ 363.673158] attempt to access beyond end of device [ 363.673162] loop6: rw=536870912, want=145, limit=112 [ 363.673453] attempt to access beyond end of device [ 363.673457] loop6: rw=536870912, want=729, limit=112 [ 363.673568] attempt to access beyond end of device [ 363.673572] loop6: rw=536870912, want=758, limit=112 [ 363.673582] attempt to access beyond end of device [ 363.673586] loop6: rw=536870912, want=759, limit=112 [ 363.673596] attempt to access beyond end of device [ 363.673600] loop6: rw=536870912, want=760, limit=112 [ 363.673610] attempt to access beyond end of device [ 363.673614] loop6: rw=536870912, want=761, limit=112 [ 363.673624] attempt to access beyond end of device [ 363.673628] loop6: rw=536870912, want=782, limit=112 [ 363.673638] attempt to access beyond end of device [ 363.673643] loop6: rw=536870912, want=783, limit=112 [ 363.673652] attempt to access beyond end of device [ 363.673656] loop6: rw=536870912, want=784, limit=112 [ 363.673666] attempt to access beyond end of device [ 363.673670] loop6: rw=536870912, want=785, limit=112 [ 363.673684] attempt to access beyond end of device [ 363.673688] loop6: rw=536870912, want=834, limit=112 [ 363.673698] attempt to access beyond end of device [ 363.673702] loop6: rw=536870912, want=835, limit=112 [ 363.673711] attempt to access beyond end of device [ 363.673715] loop6: rw=536870912, want=836, limit=112 [ 363.673724] attempt to access beyond end of device [ 363.673728] loop6: rw=536870912, want=837, limit=112 [ 363.673737] attempt to access beyond end of device [ 363.673741] loop6: rw=536870912, want=846, limit=112 [ 363.673750] attempt to access beyond end of device [ 363.673755] loop6: rw=536870912, want=847, limit=112 [ 363.673763] attempt to access beyond end of device [ 363.673767] loop6: rw=536870912, want=848, limit=112 [ 363.673777] attempt to access beyond end of device [ 363.673781] loop6: rw=536870912, want=849, limit=112 [ 363.674651] attempt to access beyond end of device [ 363.674655] loop6: rw=536870912, want=2897, limit=112 [ 363.675861] attempt to access beyond end of device [ 363.675866] loop6: rw=536870912, want=4945, limit=112 [ 363.677071] attempt to access beyond end of device [ 363.677075] loop6: rw=536870912, want=6993, limit=112 [ 363.678273] attempt to access beyond end of device [ 363.678277] loop6: rw=536870912, want=9041, limit=112 [ 363.679472] attempt to access beyond end of device [ 363.679476] loop6: rw=536870912, want=11089, limit=112 [ 363.680679] attempt to access beyond end of device [ 363.680683] loop6: rw=536870912, want=13137, limit=112 [ 363.681885] attempt to access beyond end of device [ 363.681890] loop6: rw=536870912, want=15185, limit=112 [ 363.693240] attempt to access beyond end of device [ 363.693246] loop6: rw=536870912, want=17233, limit=112 [ 363.694468] attempt to access beyond end of device [ 363.694473] loop6: rw=536870912, want=19281, limit=112 [ 363.695686] attempt to access beyond end of device [ 363.695691] loop6: rw=536870912, want=21329, limit=112 [ 363.696889] attempt to access beyond end of device [ 363.696893] loop6: rw=536870912, want=23377, limit=112 [ 363.698085] attempt to access beyond end of device [ 363.698090] loop6: rw=536870912, want=25425, limit=112 [ 363.699308] attempt to access beyond end of device [ 363.699312] loop6: rw=536870912, want=27473, limit=112 [ 363.700504] attempt to access beyond end of device [ 363.700508] loop6: rw=536870912, want=29521, limit=112 [ 363.701689] attempt to access beyond end of device [ 363.701693] loop6: rw=536870912, want=31569, limit=112 [ 363.712781] attempt to access beyond end of device [ 363.712786] loop6: rw=536870912, want=32993, limit=112 [ 364.435022] loop0: rw=536870912, want=32985, limit=112 19:09:59 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x3, 0x86, 0x2}) modify_ldt$write(0x1, &(0x7f0000000340)={0x1f, 0x20000800, 0x6000, 0x0, 0x0, 0x5d0733b2, 0xffffffff, 0x1}, 0x10) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:09:59 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x0, 0x42, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:09:59 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000380)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000180)={0x400, 0xff, 0x6, {r1, r2+10000000}, 0x1, 0x2}) fcntl$getown(r0, 0x9) 19:09:59 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x10000000000001b9, 0x0) 19:09:59 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect(r2, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x1, 0x4}, 0x80) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$EVIOCGABS2F(r4, 0x8018456f, &(0x7f0000000600)=""/254) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RREADDIR(r3, &(0x7f0000000700)={0xa6, 0x29, 0x1, {0xea, [{{0x20, 0x4, 0x2}, 0x100, 0x7, 0x7, './file0'}, {{0x20, 0x1, 0x1}, 0x3, 0x6, 0x7, './file0'}, {{0x4a, 0x0, 0x5}, 0x20, 0x0, 0x7, './file0'}, {{0x2, 0x3, 0x7}, 0x7, 0x2, 0x7, './file1'}, {{0x8, 0x2, 0x3}, 0xfffffffffffffffb, 0x0, 0x7, './file0'}]}}, 0xa6) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/status\x00', 0x0, 0x0) ioctl$KDGETKEYCODE(r5, 0x4b4c, &(0x7f0000000400)={0x5, 0x3}) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) 19:09:59 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000740)) syz_open_procfs(0x0, &(0x7f0000000180)='net/route\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 19:09:59 executing program 2: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) ioctl$TIOCSSOFTCAR(r0, 0x5412, &(0x7f0000000340)) r1 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pktcdvd/control\x00', 0x84000, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') accept$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0}, &(0x7f0000000300)=0x14) accept4$packet(0xffffffffffffff9c, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000440)=0x14, 0x800) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x14, &(0x7f0000000480)={@mcast1, 0x0}, &(0x7f00000004c0)=0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000007980)=[{{&(0x7f0000000680)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000000700)=""/116, 0x74}, {&(0x7f0000000780)=""/121, 0x79}, {&(0x7f0000000800)=""/229, 0xe5}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/173, 0xad}, {&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/105, 0x69}, {&(0x7f0000003000)=""/4096, 0x1000}], 0x8, &(0x7f0000001ac0)=""/134, 0x86, 0x5}, 0xffffffffffffffdd}, {{&(0x7f0000001b80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001c00)=""/147, 0x93}, {&(0x7f0000004000)=""/4096, 0x1000}, {&(0x7f0000001cc0)=""/146, 0x92}, {&(0x7f0000001d80)=""/137, 0x89}], 0x4, &(0x7f0000005000)=""/4096, 0x1000, 0x4df4}, 0x1}, {{&(0x7f0000001e80)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000006540)=[{&(0x7f0000001f00)=""/158, 0x9e}, {&(0x7f0000006000)=""/218, 0xda}, {&(0x7f0000006100)=""/59, 0x3b}, {&(0x7f0000006140)=""/54, 0x36}, {&(0x7f0000006180)=""/190, 0xbe}, {&(0x7f0000006240)=""/101, 0x65}, {&(0x7f00000062c0)=""/46, 0x2e}, {&(0x7f0000006300)=""/74, 0x4a}, {&(0x7f0000006380)=""/242, 0xf2}, {&(0x7f0000006480)=""/188, 0xbc}], 0xa, &(0x7f0000006600)=""/78, 0x4e, 0x3f}, 0x40}, {{0x0, 0x0, &(0x7f0000006700)=[{&(0x7f0000006680)=""/72, 0x48}], 0x1, &(0x7f0000006740)=""/4096, 0x1000, 0x11e}, 0x1}, {{&(0x7f0000007740)=@hci, 0x80, &(0x7f00000078c0)=[{&(0x7f00000077c0)=""/187, 0xbb}, {&(0x7f0000007880)=""/8, 0x8}], 0x2, &(0x7f0000007900)=""/106, 0x6a, 0x2}, 0x1}], 0x5, 0x40000000, &(0x7f0000007ac0)={0x77359400}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000007c80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000007c40)={&(0x7f0000007b00)={0x118, r2, 0xf12, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x7c, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x10000}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x78, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x48}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}]}}]}, 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 19:09:59 executing program 6: r0 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140)) poll(&(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind(r0, &(0x7f0000000200)=@llc={0x1a, 0x33b, 0x1, 0x4, 0x8000, 0x1c, @local}, 0xffffff4b) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xa4, 0x0, &(0x7f0000e68000)={0x2, 0x0, @dev}, 0x10) write$FUSE_POLL(0xffffffffffffffff, &(0x7f00000005c0)={0x18, 0x0, 0x0, {0x3}}, 0xbf) r1 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x800) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000068f50)={{}, "706f72ff0700000000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", 0xc3, 0x80003}) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000180)) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000500)) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000085dff0)='/dev/sequencer2\x00', 0x10000080002, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000540)=@req) r3 = dup2(r1, r2) read(r3, &(0x7f00000000c0)=""/85, 0x321) 19:09:59 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) r1 = gettid() sched_rr_get_interval(r1, &(0x7f0000000080)) ptrace$peek(0x3, r1, &(0x7f0000000000)) 19:09:59 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x800006, 0x0, 0x0, 0x3}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000240)={@remote, 0x4c, r3}) sendto$inet6(r2, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x12040, 0x102) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0x40a85323, &(0x7f0000000380)={{0xc2, 0x15}, 'port0\x00', 0x9, 0x1010, 0x0, 0x400, 0x1ff, 0x3, 0xab8, 0x0, 0x3, 0x80000001}) [ 364.842724] attempt to access beyond end of device [ 364.847686] loop0: rw=536870912, want=130, limit=112 [ 364.873409] buffer_io_error: 174 callbacks suppressed 19:09:59 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x0, 0x0, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:09:59 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0xec7, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) fcntl$setflags(r0, 0x2, 0x1) 19:09:59 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000380)=0xc) getgroups(0x2, &(0x7f00000003c0)=[0xffffffffffffffff, 0xee01]) write$P9_RGETATTR(r1, &(0x7f0000000600)={0xa0, 0x19, 0x1, {0x2, {0x2, 0x0, 0x1}, 0x2, r2, r3, 0x7, 0x2, 0x0, 0x2, 0xffffffffffffffff, 0x80000000, 0x7, 0x0, 0x40, 0x81, 0x7, 0xfc00, 0x8001, 0x8, 0x27f}}, 0xa0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mremap(&(0x7f00003d9000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r4 = getpgrp(0x0) r5 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r4, r5, 0x0, &(0x7f00003efff0)) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) 19:09:59 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000740)) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) [ 364.873416] Buffer I/O error on dev loop0, logical block 129, lost async page write [ 364.906884] attempt to access beyond end of device [ 364.912007] loop0: rw=536870912, want=131, limit=112 [ 364.917963] Buffer I/O error on dev loop0, logical block 130, lost async page write [ 364.928457] attempt to access beyond end of device [ 364.934005] loop0: rw=536870912, want=132, limit=112 19:09:59 executing program 6: r0 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140)) poll(&(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind(r0, &(0x7f0000000200)=@llc={0x1a, 0x33b, 0x1, 0x4, 0x8000, 0x1c, @local}, 0xffffff4b) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xa4, 0x0, &(0x7f0000e68000)={0x2, 0x0, @dev}, 0x10) write$FUSE_POLL(0xffffffffffffffff, &(0x7f00000005c0)={0x18, 0x0, 0x0, {0x3}}, 0xbf) r1 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x800) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000068f50)={{}, "706f72ff0700000000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", 0xc3, 0x80003}) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000180)) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000500)) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000085dff0)='/dev/sequencer2\x00', 0x10000080002, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000540)=@req) r3 = dup2(r1, r2) read(r3, &(0x7f00000000c0)=""/85, 0x321) 19:09:59 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000180)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) [ 364.939744] Buffer I/O error on dev loop0, logical block 131, lost async page write [ 364.947990] attempt to access beyond end of device [ 364.953199] loop0: rw=536870912, want=133, limit=112 [ 364.958318] Buffer I/O error on dev loop0, logical block 132, lost async page write [ 364.973431] attempt to access beyond end of device [ 364.979966] loop0: rw=536870912, want=142, limit=112 [ 364.985130] Buffer I/O error on dev loop0, logical block 141, lost async page write [ 364.992983] attempt to access beyond end of device [ 365.011283] loop0: rw=536870912, want=143, limit=112 [ 365.025833] Buffer I/O error on dev loop0, logical block 142, lost async page write [ 365.075989] attempt to access beyond end of device [ 365.093694] loop0: rw=536870912, want=144, limit=112 [ 365.113337] Buffer I/O error on dev loop0, logical block 143, lost async page write [ 365.129446] attempt to access beyond end of device [ 365.142142] loop0: rw=536870912, want=145, limit=112 [ 365.147474] Buffer I/O error on dev loop0, logical block 144, lost async page write [ 365.157952] attempt to access beyond end of device [ 365.162962] loop0: rw=536870912, want=2193, limit=112 [ 365.171057] attempt to access beyond end of device [ 365.176078] loop0: rw=536870912, want=4241, limit=112 [ 365.182107] attempt to access beyond end of device [ 365.187187] loop0: rw=536870912, want=6289, limit=112 [ 365.193167] attempt to access beyond end of device [ 365.198181] loop0: rw=536870912, want=7897, limit=112 [ 365.203680] attempt to access beyond end of device [ 365.208634] loop0: rw=536870912, want=7926, limit=112 [ 365.213811] Buffer I/O error on dev loop0, logical block 7925, lost async page write [ 365.221965] attempt to access beyond end of device [ 365.226940] loop0: rw=536870912, want=7927, limit=112 [ 365.232165] Buffer I/O error on dev loop0, logical block 7926, lost async page write [ 365.240072] attempt to access beyond end of device [ 365.245022] loop0: rw=536870912, want=7928, limit=112 [ 365.250237] attempt to access beyond end of device [ 365.255158] loop0: rw=536870912, want=7929, limit=112 [ 365.260368] attempt to access beyond end of device [ 365.265280] loop0: rw=536870912, want=7950, limit=112 [ 365.270534] attempt to access beyond end of device [ 365.275451] loop0: rw=536870912, want=7951, limit=112 [ 365.280690] attempt to access beyond end of device [ 365.285657] loop0: rw=536870912, want=7952, limit=112 [ 365.290838] attempt to access beyond end of device [ 365.296244] loop0: rw=536870912, want=7953, limit=112 [ 365.301454] attempt to access beyond end of device [ 365.306409] loop0: rw=536870912, want=8002, limit=112 [ 365.311595] attempt to access beyond end of device [ 365.316558] loop0: rw=536870912, want=8003, limit=112 [ 365.321769] attempt to access beyond end of device [ 365.326838] loop0: rw=536870912, want=8004, limit=112 [ 365.332049] attempt to access beyond end of device [ 365.337023] loop0: rw=536870912, want=8005, limit=112 [ 365.342224] attempt to access beyond end of device [ 365.347188] loop0: rw=536870912, want=8014, limit=112 [ 365.352395] attempt to access beyond end of device [ 365.357354] loop0: rw=536870912, want=8015, limit=112 [ 365.362561] attempt to access beyond end of device [ 365.367509] loop0: rw=536870912, want=8016, limit=112 [ 365.372685] attempt to access beyond end of device [ 365.377643] loop0: rw=536870912, want=8017, limit=112 [ 365.383527] attempt to access beyond end of device [ 365.388491] loop0: rw=536870912, want=10065, limit=112 [ 365.394559] attempt to access beyond end of device [ 365.399506] loop0: rw=536870912, want=12113, limit=112 [ 365.405786] attempt to access beyond end of device [ 365.410836] loop0: rw=536870912, want=14161, limit=112 [ 365.416982] attempt to access beyond end of device [ 365.421920] loop0: rw=536870912, want=16209, limit=112 [ 365.428520] attempt to access beyond end of device [ 365.433478] loop0: rw=536870912, want=18257, limit=112 [ 365.439695] attempt to access beyond end of device [ 365.444630] loop0: rw=536870912, want=20305, limit=112 [ 365.450771] attempt to access beyond end of device [ 365.455713] loop0: rw=536870912, want=22353, limit=112 [ 365.461832] attempt to access beyond end of device [ 365.466774] loop0: rw=536870912, want=24401, limit=112 [ 365.472928] attempt to access beyond end of device [ 365.477875] loop0: rw=536870912, want=26449, limit=112 [ 365.484023] attempt to access beyond end of device [ 365.488984] loop0: rw=536870912, want=28497, limit=112 [ 365.495110] attempt to access beyond end of device [ 365.500086] loop0: rw=536870912, want=30545, limit=112 [ 365.506264] attempt to access beyond end of device [ 365.511235] loop0: rw=536870912, want=32593, limit=112 [ 365.516845] attempt to access beyond end of device [ 365.521785] loop0: rw=536870912, want=32993, limit=112 19:10:00 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x3, 0x86, 0x2}) modify_ldt$write(0x1, &(0x7f0000000340)={0x1f, 0x20000800, 0x6000, 0x0, 0x0, 0x5d0733b2, 0xffffffff, 0x1}, 0x10) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:10:00 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001380)=[{&(0x7f0000000080)=""/56, 0x38}, {&(0x7f0000000100)=""/7, 0x7}, {&(0x7f0000000240)=""/32, 0x20}, {&(0x7f0000000280)=""/4096, 0xfd1a}, {&(0x7f0000001280)}, {&(0x7f00000012c0)=""/169, 0xa9}], 0x6, 0x4b) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000180)={0x80000001, {{0xa, 0x4e22, 0x0, @remote, 0x1}}}, 0x88) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001400)='/dev/ppp\x00', 0x101005, 0x0) poll(&(0x7f0000001500)=[{r1, 0x4}, {r0, 0x42}], 0x2, 0x2) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/sequencer2\x00', 0x1c0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) accept4$packet(r1, &(0x7f0000001280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001440)=0x14, 0x800) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000001480)=r3) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) getsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000001540), &(0x7f0000001580)=0x4) 19:10:00 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x0, 0x0, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:10:00 executing program 3: r0 = memfd_create(&(0x7f0000000000)='/dev/ppp\x00', 0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x291, 0x0) 19:10:00 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1, {0x0, {0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) 19:10:00 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 19:10:00 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000740)) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 19:10:00 executing program 2: r0 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140)) poll(&(0x7f0000000600), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind(r0, &(0x7f0000000200)=@llc={0x1a, 0x33b, 0x1, 0x4, 0x8000, 0x1c, @local}, 0xffffff4b) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xa4, 0x0, &(0x7f0000e68000)={0x2, 0x0, @dev}, 0x10) write$FUSE_POLL(0xffffffffffffffff, &(0x7f00000005c0)={0x18, 0x0, 0x0, {0x3}}, 0xbf) r1 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x800) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000068f50)={{}, "706f72ff0700000000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", 0xc3, 0x80003}) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000180)) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000500)) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000085dff0)='/dev/sequencer2\x00', 0x10000080002, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000540)=@req) r3 = dup2(r1, r2) read(r3, &(0x7f00000000c0)=""/85, 0x321) 19:10:00 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x0, 0x0, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:10:00 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x40000, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) 19:10:00 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x0, 0x0, 0x1, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:10:00 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffd}}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) 19:10:00 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) 19:10:00 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 19:10:00 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x0, 0x42, 0x0, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) [ 365.973219] attempt to access beyond end of device [ 365.979802] loop0: rw=536870912, want=114, limit=112 [ 366.010267] attempt to access beyond end of device 19:10:00 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) fcntl$setlease(r0, 0x400, 0x3) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) fcntl$getflags(r0, 0x40a) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000000)=""/31) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="80fd02f90803", 0x6}], 0x1, 0x0) [ 366.036591] loop0: rw=536870912, want=115, limit=112 [ 366.041839] attempt to access beyond end of device [ 366.046799] loop0: rw=536870912, want=116, limit=112 [ 366.052011] attempt to access beyond end of device [ 366.057243] loop0: rw=536870912, want=117, limit=112 [ 366.062736] attempt to access beyond end of device [ 366.067707] loop0: rw=536870912, want=130, limit=112 [ 366.072888] attempt to access beyond end of device [ 366.077837] loop0: rw=536870912, want=131, limit=112 [ 366.085964] attempt to access beyond end of device [ 366.090904] loop0: rw=536870912, want=132, limit=112 [ 366.096072] attempt to access beyond end of device [ 366.102924] loop0: rw=536870912, want=133, limit=112 [ 366.126525] attempt to access beyond end of device [ 366.131527] loop0: rw=536870912, want=2189, limit=112 [ 366.146448] attempt to access beyond end of device [ 366.151644] loop0: rw=536870912, want=4237, limit=112 [ 366.159254] attempt to access beyond end of device [ 366.164852] loop0: rw=536870912, want=6229, limit=112 [ 366.177544] attempt to access beyond end of device [ 366.192742] loop0: rw=536870912, want=6230, limit=112 [ 366.198494] attempt to access beyond end of device [ 366.205248] loop0: rw=536870912, want=6231, limit=112 [ 366.210677] attempt to access beyond end of device [ 366.216892] loop0: rw=536870912, want=6232, limit=112 [ 366.222273] attempt to access beyond end of device [ 366.227308] loop0: rw=536870912, want=6233, limit=112 [ 366.232877] attempt to access beyond end of device [ 366.237907] loop0: rw=536870912, want=6262, limit=112 [ 366.243229] attempt to access beyond end of device [ 366.248332] loop0: rw=536870912, want=6263, limit=112 [ 366.253927] attempt to access beyond end of device [ 366.258901] loop0: rw=536870912, want=6264, limit=112 [ 366.264394] attempt to access beyond end of device [ 366.269335] loop0: rw=536870912, want=6265, limit=112 [ 366.274624] attempt to access beyond end of device [ 366.279562] loop0: rw=536870912, want=6286, limit=112 [ 366.284864] attempt to access beyond end of device [ 366.289776] loop0: rw=536870912, want=6287, limit=112 [ 366.294994] attempt to access beyond end of device [ 366.299966] loop0: rw=536870912, want=6288, limit=112 [ 366.305226] attempt to access beyond end of device [ 366.310143] loop0: rw=536870912, want=6289, limit=112 [ 366.315542] attempt to access beyond end of device [ 366.320494] loop0: rw=536870912, want=6322, limit=112 [ 366.325914] attempt to access beyond end of device [ 366.330898] loop0: rw=536870912, want=6323, limit=112 [ 366.336141] attempt to access beyond end of device [ 366.341091] loop0: rw=536870912, want=6324, limit=112 [ 366.346780] attempt to access beyond end of device [ 366.351719] loop0: rw=536870912, want=6325, limit=112 [ 366.357017] attempt to access beyond end of device [ 366.361970] loop0: rw=536870912, want=6338, limit=112 [ 366.367306] attempt to access beyond end of device [ 366.372223] loop0: rw=536870912, want=6339, limit=112 [ 366.377471] attempt to access beyond end of device [ 366.382383] loop0: rw=536870912, want=6340, limit=112 [ 366.387608] attempt to access beyond end of device [ 366.392519] loop0: rw=536870912, want=6341, limit=112 [ 366.397756] attempt to access beyond end of device [ 366.402686] loop0: rw=536870912, want=6350, limit=112 [ 366.407892] attempt to access beyond end of device [ 366.412835] loop0: rw=536870912, want=6351, limit=112 [ 366.418109] attempt to access beyond end of device [ 366.423019] loop0: rw=536870912, want=6352, limit=112 [ 366.428250] attempt to access beyond end of device [ 366.433192] loop0: rw=536870912, want=6353, limit=112 [ 366.439280] attempt to access beyond end of device [ 366.444222] loop0: rw=536870912, want=8401, limit=112 [ 366.450432] attempt to access beyond end of device [ 366.455400] loop0: rw=536870912, want=10449, limit=112 [ 366.461476] attempt to access beyond end of device [ 366.466432] loop0: rw=536870912, want=12497, limit=112 [ 366.472673] attempt to access beyond end of device [ 366.478089] loop0: rw=536870912, want=14545, limit=112 [ 366.485358] attempt to access beyond end of device [ 366.490354] loop0: rw=536870912, want=16593, limit=112 [ 366.496605] attempt to access beyond end of device [ 366.501543] loop0: rw=536870912, want=18641, limit=112 [ 366.507751] attempt to access beyond end of device [ 366.512665] loop0: rw=536870912, want=20689, limit=112 [ 366.518890] attempt to access beyond end of device [ 366.523836] loop0: rw=536870912, want=22737, limit=112 [ 366.530136] attempt to access beyond end of device [ 366.535056] loop0: rw=536870912, want=24785, limit=112 [ 366.541246] attempt to access beyond end of device [ 366.546343] loop0: rw=536870912, want=26833, limit=112 [ 366.552491] attempt to access beyond end of device [ 366.557474] loop0: rw=536870912, want=28881, limit=112 [ 366.563667] attempt to access beyond end of device [ 366.568623] loop0: rw=536870912, want=30929, limit=112 [ 366.574796] attempt to access beyond end of device [ 366.579761] loop0: rw=536870912, want=32977, limit=112 [ 366.585242] attempt to access beyond end of device [ 366.590205] loop0: rw=536870912, want=32985, limit=112 19:10:01 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x3, 0x86, 0x2}) modify_ldt$write(0x1, &(0x7f0000000340)={0x1f, 0x20000800, 0x6000, 0x0, 0x0, 0x5d0733b2, 0xffffffff, 0x1}, 0x10) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:10:01 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 19:10:01 executing program 2: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x3, 0x86, 0x2}) modify_ldt$write(0x1, &(0x7f0000000340)={0x1f, 0x20000800, 0x6000, 0x0, 0x0, 0x5d0733b2, 0xffffffff, 0x1}, 0x10) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:10:01 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x0, 0x42, 0x0, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:10:01 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='projid_map\x00') write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000040)={0x21}, 0x21) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000180)={0x20, 0x7, 0x9, {}, 0xcd, 0xff}) 19:10:01 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x200, 0x8, 0x6, 0x2c, 0x20}, 0x14) pwritev(r0, &(0x7f0000000080), 0x1000000000000010, 0x0) 19:10:01 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 19:10:01 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB="20ff"]) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) 19:10:01 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) 19:10:01 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) 19:10:01 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x0, 0x42, 0x0, 0x3cf, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) [ 367.021498] attempt to access beyond end of device [ 367.026878] loop0: rw=536870912, want=130, limit=112 [ 367.034762] 9p: Unknown access argument 00000000000000000000 ÿ 19:10:01 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) 19:10:01 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) [ 367.064897] 9p: Unknown access argument 00000000000000000000 ÿ [ 367.087055] attempt to access beyond end of device [ 367.100999] loop0: rw=536870912, want=131, limit=112 [ 367.117511] attempt to access beyond end of device 19:10:01 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x882, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000080)={'HL\x00'}, &(0x7f0000000100)=0x1e) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000180)=ANY=[@ANYBLOB="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"]) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30f) 19:10:01 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 19:10:01 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x0, 0x42, 0x1, 0x0, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) [ 367.137274] loop0: rw=536870912, want=132, limit=112 [ 367.149309] attempt to access beyond end of device [ 367.154441] loop0: rw=536870912, want=133, limit=112 [ 367.159686] attempt to access beyond end of device [ 367.164733] loop0: rw=536870912, want=142, limit=112 [ 367.170480] attempt to access beyond end of device [ 367.180723] loop0: rw=536870912, want=143, limit=112 [ 367.195996] attempt to access beyond end of device [ 367.201324] loop0: rw=536870912, want=144, limit=112 [ 367.208450] attempt to access beyond end of device [ 367.220118] loop0: rw=536870912, want=145, limit=112 [ 367.227370] attempt to access beyond end of device [ 367.232786] loop0: rw=536870912, want=2193, limit=112 [ 367.239707] attempt to access beyond end of device [ 367.251095] loop0: rw=536870912, want=4241, limit=112 [ 367.296136] attempt to access beyond end of device [ 367.309906] loop0: rw=536870912, want=6041, limit=112 [ 367.323964] attempt to access beyond end of device [ 367.335301] loop0: rw=536870912, want=6070, limit=112 [ 367.346555] attempt to access beyond end of device [ 367.358483] loop0: rw=536870912, want=6071, limit=112 [ 367.372889] attempt to access beyond end of device [ 367.384131] loop0: rw=536870912, want=6072, limit=112 [ 367.395744] attempt to access beyond end of device [ 367.400945] loop0: rw=536870912, want=6073, limit=112 [ 367.406606] attempt to access beyond end of device [ 367.411718] loop0: rw=536870912, want=6094, limit=112 [ 367.417011] attempt to access beyond end of device [ 367.422229] loop0: rw=536870912, want=6095, limit=112 [ 367.427672] attempt to access beyond end of device [ 367.432775] loop0: rw=536870912, want=6096, limit=112 [ 367.438069] attempt to access beyond end of device [ 367.443184] loop0: rw=536870912, want=6097, limit=112 [ 367.448544] attempt to access beyond end of device [ 367.453820] loop0: rw=536870912, want=6146, limit=112 [ 367.459240] attempt to access beyond end of device [ 367.464485] loop0: rw=536870912, want=6147, limit=112 [ 367.469757] attempt to access beyond end of device [ 367.475019] loop0: rw=536870912, want=6148, limit=112 [ 367.480497] attempt to access beyond end of device [ 367.485526] loop0: rw=536870912, want=6149, limit=112 [ 367.490873] attempt to access beyond end of device [ 367.496055] loop0: rw=536870912, want=6158, limit=112 [ 367.501548] attempt to access beyond end of device [ 367.508751] loop0: rw=536870912, want=6159, limit=112 [ 367.517028] attempt to access beyond end of device [ 367.522205] loop0: rw=536870912, want=6160, limit=112 [ 367.527678] attempt to access beyond end of device [ 367.532867] loop0: rw=536870912, want=6161, limit=112 [ 367.539369] attempt to access beyond end of device [ 367.544322] loop0: rw=536870912, want=8209, limit=112 [ 367.551648] attempt to access beyond end of device [ 367.556801] loop0: rw=536870912, want=10257, limit=112 [ 367.563729] attempt to access beyond end of device [ 367.568963] loop0: rw=536870912, want=12305, limit=112 [ 367.575857] attempt to access beyond end of device [ 367.580918] loop0: rw=536870912, want=14353, limit=112 [ 367.587947] attempt to access beyond end of device [ 367.592914] loop0: rw=536870912, want=16401, limit=112 [ 367.599114] attempt to access beyond end of device [ 367.604057] loop0: rw=536870912, want=18449, limit=112 [ 367.610338] attempt to access beyond end of device [ 367.615322] loop0: rw=536870912, want=20497, limit=112 [ 367.621469] attempt to access beyond end of device [ 367.625664] attempt to access beyond end of device [ 367.625670] loop2: rw=536870912, want=130, limit=112 [ 367.625682] attempt to access beyond end of device [ 367.625687] loop2: rw=536870912, want=131, limit=112 [ 367.625696] attempt to access beyond end of device [ 367.625700] loop2: rw=536870912, want=132, limit=112 [ 367.625710] attempt to access beyond end of device [ 367.625714] loop2: rw=536870912, want=133, limit=112 [ 367.625723] attempt to access beyond end of device [ 367.625727] loop2: rw=536870912, want=142, limit=112 [ 367.625737] attempt to access beyond end of device [ 367.625741] loop2: rw=536870912, want=143, limit=112 [ 367.625750] attempt to access beyond end of device [ 367.625754] loop2: rw=536870912, want=144, limit=112 [ 367.625763] attempt to access beyond end of device [ 367.625767] loop2: rw=536870912, want=145, limit=112 [ 367.626541] attempt to access beyond end of device [ 367.626546] loop2: rw=536870912, want=1817, limit=112 [ 367.626837] attempt to access beyond end of device [ 367.626842] loop2: rw=536870912, want=1846, limit=112 [ 367.626851] attempt to access beyond end of device [ 367.626855] loop2: rw=536870912, want=1847, limit=112 [ 367.626865] attempt to access beyond end of device [ 367.626869] loop2: rw=536870912, want=1848, limit=112 [ 367.626878] attempt to access beyond end of device [ 367.626882] loop2: rw=536870912, want=1849, limit=112 [ 367.626892] attempt to access beyond end of device [ 367.626896] loop2: rw=536870912, want=1870, limit=112 [ 367.626905] attempt to access beyond end of device [ 367.626909] loop2: rw=536870912, want=1871, limit=112 [ 367.626919] attempt to access beyond end of device [ 367.626923] loop2: rw=536870912, want=1872, limit=112 [ 367.626932] attempt to access beyond end of device [ 367.626936] loop2: rw=536870912, want=1873, limit=112 [ 367.626958] attempt to access beyond end of device [ 367.626962] loop2: rw=536870912, want=1922, limit=112 [ 367.626971] attempt to access beyond end of device [ 367.626975] loop2: rw=536870912, want=1923, limit=112 [ 367.626984] attempt to access beyond end of device [ 367.626988] loop2: rw=536870912, want=1924, limit=112 [ 367.626998] attempt to access beyond end of device [ 367.627002] loop2: rw=536870912, want=1925, limit=112 [ 367.627011] attempt to access beyond end of device [ 367.627015] loop2: rw=536870912, want=1934, limit=112 [ 367.627024] attempt to access beyond end of device [ 367.627028] loop2: rw=536870912, want=1935, limit=112 [ 367.627037] attempt to access beyond end of device [ 367.627041] loop2: rw=536870912, want=1936, limit=112 [ 367.627050] attempt to access beyond end of device [ 367.627055] loop2: rw=536870912, want=1937, limit=112 [ 367.628410] attempt to access beyond end of device [ 367.628415] loop2: rw=536870912, want=3985, limit=112 [ 367.629656] attempt to access beyond end of device [ 367.629661] loop2: rw=536870912, want=6033, limit=112 [ 367.630896] attempt to access beyond end of device [ 367.630901] loop2: rw=536870912, want=8081, limit=112 [ 367.632356] attempt to access beyond end of device [ 367.632361] loop2: rw=536870912, want=10129, limit=112 [ 367.633595] attempt to access beyond end of device [ 367.633599] loop2: rw=536870912, want=12177, limit=112 [ 367.634826] attempt to access beyond end of device [ 367.634831] loop2: rw=536870912, want=14225, limit=112 [ 367.636286] attempt to access beyond end of device [ 367.636292] loop2: rw=536870912, want=16273, limit=112 [ 367.637550] attempt to access beyond end of device [ 367.637555] loop2: rw=536870912, want=18321, limit=112 [ 367.638766] attempt to access beyond end of device [ 367.638771] loop2: rw=536870912, want=20369, limit=112 [ 367.639999] attempt to access beyond end of device [ 367.640003] loop2: rw=536870912, want=22417, limit=112 [ 367.641214] attempt to access beyond end of device [ 367.641218] loop2: rw=536870912, want=24465, limit=112 [ 367.642588] attempt to access beyond end of device [ 367.642594] loop2: rw=536870912, want=26513, limit=112 [ 367.643813] attempt to access beyond end of device [ 367.643818] loop2: rw=536870912, want=28561, limit=112 [ 367.645040] attempt to access beyond end of device [ 367.645044] loop2: rw=536870912, want=30609, limit=112 [ 367.646303] attempt to access beyond end of device [ 367.646308] loop2: rw=536870912, want=32657, limit=112 [ 367.647228] attempt to access beyond end of device [ 367.647234] loop2: rw=536870912, want=32993, limit=112 [ 368.044140] loop0: rw=536870912, want=22545, limit=112 [ 368.050523] attempt to access beyond end of device [ 368.055476] loop0: rw=536870912, want=24593, limit=112 [ 368.061637] attempt to access beyond end of device [ 368.066573] loop0: rw=536870912, want=26641, limit=112 [ 368.072734] attempt to access beyond end of device [ 368.077681] loop0: rw=536870912, want=28689, limit=112 [ 368.085158] attempt to access beyond end of device [ 368.090143] loop0: rw=536870912, want=30737, limit=112 [ 368.096199] attempt to access beyond end of device [ 368.101183] loop0: rw=536870912, want=32785, limit=112 [ 368.106862] attempt to access beyond end of device [ 368.111799] loop0: rw=536870912, want=32993, limit=112 19:10:02 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x3, 0x86, 0x2}) modify_ldt$write(0x1, &(0x7f0000000340)={0x1f, 0x20000800, 0x6000, 0x0, 0x0, 0x5d0733b2, 0xffffffff, 0x1}, 0x10) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:10:02 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x2000, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000000, 0x4010, r0, 0x0) 19:10:02 executing program 5: syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 19:10:02 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$l2tp(0x18, 0x1, 0x1) recvmmsg(r2, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)=""/177, 0xb1}, {&(0x7f0000000300)=""/34, 0x22}, {&(0x7f00000004c0)=""/77, 0x4d}], 0x3, &(0x7f0000000940)=""/4096, 0x1000, 0x800}, 0x2}], 0x1, 0x40, 0x0) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) 19:10:02 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/84, 0x54}, {&(0x7f0000000000)=""/9, 0x9}, {&(0x7f0000000200)=""/170, 0xaa}, {&(0x7f00000002c0)=""/186, 0xba}, {&(0x7f0000000380)=""/117, 0x75}, {&(0x7f0000000400)=""/200, 0xc8}], 0x6) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) 19:10:02 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x0, 0x42, 0x1, 0x0, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:10:02 executing program 6: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x3, 0x86, 0x2}) modify_ldt$write(0x1, &(0x7f0000000340)={0x1f, 0x20000800, 0x6000, 0x0, 0x0, 0x5d0733b2, 0xffffffff, 0x1}, 0x10) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:10:02 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffd}}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) 19:10:02 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000000), 0x0, 0x1f6) 19:10:02 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) [ 368.533295] attempt to access beyond end of device 19:10:02 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x80000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'team_slave_1\x00'}) rt_sigaction(0x2e, &(0x7f0000000000)={0x800, {0x8}, 0x8000000, 0x708}, &(0x7f0000000080), 0xb0, &(0x7f0000000100)) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) write$FUSE_WRITE(r0, &(0x7f0000000180)={0x18, 0xfffffffffffffff5, 0x4, {0x7ff}}, 0x18) llistxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=""/21, 0x15) 19:10:02 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2cca7165a3e7d4", @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) 19:10:02 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x0, 0x42, 0x1, 0x0, 0xdf, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:10:02 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 19:10:02 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000000), 0x0, 0x1f6) [ 368.559116] loop0: rw=536870912, want=114, limit=112 [ 368.570957] attempt to access beyond end of device [ 368.582503] loop0: rw=536870912, want=115, limit=112 [ 368.602318] attempt to access beyond end of device 19:10:03 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000480)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) [ 368.607379] loop0: rw=536870912, want=116, limit=112 [ 368.624987] attempt to access beyond end of device [ 368.633334] loop0: rw=536870912, want=117, limit=112 [ 368.638839] attempt to access beyond end of device [ 368.643855] loop0: rw=536870912, want=130, limit=112 [ 368.656338] attempt to access beyond end of device [ 368.663609] loop0: rw=536870912, want=131, limit=112 [ 368.675742] attempt to access beyond end of device [ 368.697292] loop0: rw=536870912, want=132, limit=112 [ 368.712362] attempt to access beyond end of device [ 368.721461] loop0: rw=536870912, want=133, limit=112 [ 368.729866] attempt to access beyond end of device [ 368.737527] loop0: rw=536870912, want=2189, limit=112 [ 368.745814] attempt to access beyond end of device [ 368.751310] loop0: rw=536870912, want=4237, limit=112 [ 368.764642] attempt to access beyond end of device [ 368.769971] loop0: rw=536870912, want=6285, limit=112 [ 368.780474] 9pnet: Insufficient options for proto=fd [ 368.791632] 9pnet: Insufficient options for proto=fd [ 368.823029] attempt to access beyond end of device [ 368.828240] loop0: rw=536870912, want=8333, limit=112 [ 368.837095] attempt to access beyond end of device [ 368.842094] loop0: rw=536870912, want=8981, limit=112 [ 368.848879] attempt to access beyond end of device [ 368.854066] loop0: rw=536870912, want=8982, limit=112 [ 368.860004] attempt to access beyond end of device [ 368.864993] loop0: rw=536870912, want=8983, limit=112 [ 368.870543] attempt to access beyond end of device [ 368.875752] loop0: rw=536870912, want=8984, limit=112 [ 368.881050] attempt to access beyond end of device [ 368.891542] loop0: rw=536870912, want=8985, limit=112 [ 368.896999] attempt to access beyond end of device [ 368.902581] loop0: rw=536870912, want=9014, limit=112 [ 368.909710] attempt to access beyond end of device [ 368.914749] loop0: rw=536870912, want=9015, limit=112 [ 368.925190] attempt to access beyond end of device [ 368.930493] loop0: rw=536870912, want=9016, limit=112 [ 368.935814] attempt to access beyond end of device [ 368.942675] loop0: rw=536870912, want=9017, limit=112 [ 368.948130] attempt to access beyond end of device [ 368.953117] loop0: rw=536870912, want=9038, limit=112 [ 368.958565] attempt to access beyond end of device [ 368.963721] loop0: rw=536870912, want=9039, limit=112 [ 368.969171] attempt to access beyond end of device [ 368.974224] loop0: rw=536870912, want=9040, limit=112 [ 368.980326] attempt to access beyond end of device [ 368.985306] loop0: rw=536870912, want=9041, limit=112 [ 368.990689] attempt to access beyond end of device [ 368.995666] loop0: rw=536870912, want=9074, limit=112 [ 369.001190] attempt to access beyond end of device [ 369.006303] loop0: rw=536870912, want=9075, limit=112 [ 369.011716] attempt to access beyond end of device [ 369.016822] loop0: rw=536870912, want=9076, limit=112 [ 369.022175] attempt to access beyond end of device [ 369.027296] loop0: rw=536870912, want=9077, limit=112 [ 369.032601] attempt to access beyond end of device [ 369.037628] loop0: rw=536870912, want=9090, limit=112 [ 369.043171] attempt to access beyond end of device [ 369.048171] loop0: rw=536870912, want=9091, limit=112 [ 369.053382] attempt to access beyond end of device [ 369.058343] loop0: rw=536870912, want=9092, limit=112 [ 369.063576] attempt to access beyond end of device [ 369.068570] loop0: rw=536870912, want=9093, limit=112 [ 369.073792] attempt to access beyond end of device [ 369.078769] loop0: rw=536870912, want=9102, limit=112 [ 369.084035] attempt to access beyond end of device [ 369.089000] loop0: rw=536870912, want=9103, limit=112 [ 369.094220] attempt to access beyond end of device [ 369.099204] loop0: rw=536870912, want=9104, limit=112 [ 369.104407] attempt to access beyond end of device [ 369.109846] loop0: rw=536870912, want=9105, limit=112 [ 369.115841] attempt to access beyond end of device [ 369.120814] loop0: rw=536870912, want=11153, limit=112 [ 369.126926] attempt to access beyond end of device [ 369.128258] attempt to access beyond end of device [ 369.128264] loop6: rw=536870912, want=114, limit=112 [ 369.128275] attempt to access beyond end of device [ 369.128279] loop6: rw=536870912, want=115, limit=112 [ 369.128288] attempt to access beyond end of device [ 369.128292] loop6: rw=536870912, want=116, limit=112 [ 369.128302] attempt to access beyond end of device [ 369.128306] loop6: rw=536870912, want=117, limit=112 [ 369.128315] attempt to access beyond end of device [ 369.128330] loop6: rw=536870912, want=130, limit=112 [ 369.128339] attempt to access beyond end of device [ 369.128344] loop6: rw=536870912, want=131, limit=112 [ 369.128353] attempt to access beyond end of device [ 369.128357] loop6: rw=536870912, want=132, limit=112 [ 369.128368] attempt to access beyond end of device [ 369.128372] loop6: rw=536870912, want=133, limit=112 [ 369.129284] attempt to access beyond end of device [ 369.129289] loop6: rw=536870912, want=2189, limit=112 [ 369.130525] attempt to access beyond end of device [ 369.130529] loop6: rw=536870912, want=4237, limit=112 [ 369.130990] attempt to access beyond end of device [ 369.130995] loop6: rw=536870912, want=4501, limit=112 [ 369.131052] attempt to access beyond end of device [ 369.131056] loop6: rw=536870912, want=4502, limit=112 [ 369.131065] attempt to access beyond end of device [ 369.131070] loop6: rw=536870912, want=4503, limit=112 [ 369.131079] attempt to access beyond end of device [ 369.131083] loop6: rw=536870912, want=4504, limit=112 [ 369.131092] attempt to access beyond end of device [ 369.131096] loop6: rw=536870912, want=4505, limit=112 [ 369.131105] attempt to access beyond end of device [ 369.131109] loop6: rw=536870912, want=4534, limit=112 [ 369.131120] attempt to access beyond end of device [ 369.131124] loop6: rw=536870912, want=4535, limit=112 [ 369.131134] attempt to access beyond end of device [ 369.131138] loop6: rw=536870912, want=4536, limit=112 [ 369.131147] attempt to access beyond end of device [ 369.131151] loop6: rw=536870912, want=4537, limit=112 [ 369.131165] attempt to access beyond end of device [ 369.131169] loop6: rw=536870912, want=4558, limit=112 [ 369.131178] attempt to access beyond end of device [ 369.131182] loop6: rw=536870912, want=4559, limit=112 [ 369.131192] attempt to access beyond end of device [ 369.131196] loop6: rw=536870912, want=4560, limit=112 [ 369.131205] attempt to access beyond end of device [ 369.131210] loop6: rw=536870912, want=4561, limit=112 [ 369.131219] attempt to access beyond end of device [ 369.131223] loop6: rw=536870912, want=4594, limit=112 [ 369.131232] attempt to access beyond end of device [ 369.131236] loop6: rw=536870912, want=4595, limit=112 [ 369.131245] attempt to access beyond end of device [ 369.131249] loop6: rw=536870912, want=4596, limit=112 [ 369.131259] attempt to access beyond end of device [ 369.131263] loop6: rw=536870912, want=4597, limit=112 [ 369.131277] attempt to access beyond end of device [ 369.131281] loop6: rw=536870912, want=4610, limit=112 [ 369.131290] attempt to access beyond end of device [ 369.131294] loop6: rw=536870912, want=4611, limit=112 [ 369.131303] attempt to access beyond end of device [ 369.131307] loop6: rw=536870912, want=4612, limit=112 [ 369.131317] attempt to access beyond end of device [ 369.131325] loop6: rw=536870912, want=4613, limit=112 [ 369.131336] attempt to access beyond end of device [ 369.131340] loop6: rw=536870912, want=4622, limit=112 [ 369.131349] attempt to access beyond end of device [ 369.131353] loop6: rw=536870912, want=4623, limit=112 [ 369.131362] attempt to access beyond end of device [ 369.131367] loop6: rw=536870912, want=4624, limit=112 [ 369.131376] attempt to access beyond end of device [ 369.131380] loop6: rw=536870912, want=4625, limit=112 [ 369.132957] attempt to access beyond end of device [ 369.132963] loop6: rw=536870912, want=6673, limit=112 [ 369.134212] attempt to access beyond end of device [ 369.134217] loop6: rw=536870912, want=8721, limit=112 [ 369.135638] attempt to access beyond end of device [ 369.135644] loop6: rw=536870912, want=10769, limit=112 [ 369.136875] attempt to access beyond end of device [ 369.136880] loop6: rw=536870912, want=12817, limit=112 [ 369.138182] attempt to access beyond end of device [ 369.138187] loop6: rw=536870912, want=14865, limit=112 [ 369.139423] attempt to access beyond end of device [ 369.139427] loop6: rw=536870912, want=16913, limit=112 [ 369.140629] attempt to access beyond end of device [ 369.140634] loop6: rw=536870912, want=18961, limit=112 [ 369.141835] attempt to access beyond end of device [ 369.141840] loop6: rw=536870912, want=21009, limit=112 [ 369.143216] attempt to access beyond end of device [ 369.143221] loop6: rw=536870912, want=23057, limit=112 [ 369.144456] attempt to access beyond end of device [ 369.144461] loop6: rw=536870912, want=25105, limit=112 [ 369.145674] attempt to access beyond end of device [ 369.145678] loop6: rw=536870912, want=27153, limit=112 [ 369.146892] attempt to access beyond end of device [ 369.146897] loop6: rw=536870912, want=29201, limit=112 [ 369.148581] attempt to access beyond end of device [ 369.148586] loop6: rw=536870912, want=31249, limit=112 [ 369.149683] attempt to access beyond end of device [ 369.149688] loop6: rw=536870912, want=32985, limit=112 [ 369.631972] loop0: rw=536870912, want=13201, limit=112 [ 369.638149] attempt to access beyond end of device [ 369.643193] loop0: rw=536870912, want=15249, limit=112 [ 369.649261] attempt to access beyond end of device [ 369.654235] loop0: rw=536870912, want=17297, limit=112 [ 369.660325] attempt to access beyond end of device [ 369.665256] loop0: rw=536870912, want=19345, limit=112 [ 369.671449] attempt to access beyond end of device [ 369.676408] loop0: rw=536870912, want=21393, limit=112 [ 369.682764] attempt to access beyond end of device [ 369.687676] loop0: rw=536870912, want=23441, limit=112 [ 369.693868] attempt to access beyond end of device [ 369.698777] loop0: rw=536870912, want=25489, limit=112 [ 369.704915] attempt to access beyond end of device [ 369.709824] loop0: rw=536870912, want=27537, limit=112 [ 369.716077] attempt to access beyond end of device [ 369.720993] loop0: rw=536870912, want=29585, limit=112 [ 369.727173] attempt to access beyond end of device [ 369.732125] loop0: rw=536870912, want=31633, limit=112 [ 369.738103] attempt to access beyond end of device [ 369.743064] loop0: rw=536870912, want=32985, limit=112 19:10:04 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x3, 0x86, 0x2}) modify_ldt$write(0x1, &(0x7f0000000340)={0x1f, 0x20000800, 0x6000, 0x0, 0x0, 0x5d0733b2, 0xffffffff, 0x1}, 0x10) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:10:04 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000000), 0x0, 0x1f6) 19:10:04 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x0, 0x42, 0x1, 0x3cf, 0x0, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:10:04 executing program 4: openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x480000, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) 19:10:04 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) r1 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x4010, r0, 0x52) r2 = mmap$binder(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0xc, 0x4010, r0, 0x0) r3 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x154910, r0, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x40010, r0, 0x1a) r5 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x4013, r0, 0x0) r6 = mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x10010, r0, 0x0) r7 = mmap$binder(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x3000008, 0x8010, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x110, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000180)=[@flat={0x77622a85, 0x0, r1, 0x1}, @fd={0x66642a85, 0x0, r0}, @flat={0x73682a85, 0x101, r2, 0x1}], &(0x7f0000000000)=[0x28, 0x78, 0x18, 0x38, 0x38, 0x18, 0x30]}, 0x80}}, @reply_sg={0x40486312, {{0x3, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x30, 0x40, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r0}, @flat={0x77682a85, 0x10b, r3, 0x4}], &(0x7f0000000100)=[0x38, 0x28, 0x30, 0x38, 0x70, 0x20, 0x30, 0x20]}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1, 0x4}, @acquire_done={0x40106309, r4, 0x2}, @increfs_done={0x40106308, r5, 0x2}, @release={0x40046306, 0x3}, @increfs_done={0x40106308, r6, 0x3}, @increfs_done={0x40106308, r7, 0x4}], 0xa8, 0x0, &(0x7f0000000340)="ae57f026fc628531479b37bc01f444d2ff0fa71985c439869b197aae6995df7eb93ab3cbb58a0de1a328aac250e45c6c02a64855d7ade97cd6e011ec0926bd72a9ea3989a95a1fc63acd68d9fb890fe23827f6bb149c0d5eeec910b30d642626fa65dfa2862ecb0ae0b2ad649b6342e9930a9e7d3c8cb96cb9e452a2a536040c98e988bf11576dfe39667a4e1871e92284821e94cfcc973214313d5ba4de928cd001e2247a59f8f5"}) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) 19:10:04 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) epoll_create1(0x80000) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) write$P9_RGETATTR(r1, &(0x7f0000000600)={0xa0, 0x19, 0x2, {0x208, {0x4, 0x1}, 0x100, r2, r3, 0x7fff, 0x0, 0x5, 0x7, 0x5, 0x3, 0x1ff, 0xfff, 0x8b, 0x0, 0x8000, 0x8000, 0x0, 0x2a2, 0xa618}}, 0xa0) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) 19:10:04 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 19:10:04 executing program 6: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x3, 0x86, 0x2}) modify_ldt$write(0x1, &(0x7f0000000340)={0x1f, 0x20000800, 0x6000, 0x0, 0x0, 0x5d0733b2, 0xffffffff, 0x1}, 0x10) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:10:04 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) 19:10:04 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000180)=""/149) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) 19:10:04 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x0, 0x42, 0x1, 0x3cf, 0x0, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) [ 370.146583] attempt to access beyond end of device [ 370.151626] loop0: rw=536870912, want=114, limit=112 [ 370.170699] buffer_io_error: 158 callbacks suppressed [ 370.170705] Buffer I/O error on dev loop0, logical block 113, lost async page write 19:10:04 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) listxattr(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)=""/57, 0xffffffffffffff92) 19:10:04 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000740)) syz_open_procfs(0x0, &(0x7f0000000180)='net/route\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 19:10:04 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) write$binfmt_aout(r0, &(0x7f0000000180)={{0xcc, 0x7, 0x8001, 0x286, 0x81, 0x81, 0x1f4, 0x6}, "5f5c8a31ebfad407ccf0a8d3c43630561637a8de3387f1facedb6098f2130617aede91e63365cfc515a898fa3f43d1143fcb5a2f2d55e4978c1148211ae282dd2c27dabd68a2c58551676f72874515e66c92035aad4c5b861679233d6ca3312bc7828a5711a01b030412a7db5679ea0787f68ae06641c145808b", [[], [], [], []]}, 0x49a) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) 19:10:04 executing program 2: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)) r0 = socket$l2tp(0x18, 0x1, 0x1) write$binfmt_aout(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1b5) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000180)) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@ipv4={[], [], @multicast2}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000200)=0x8) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000780)={{0x10000, 0x5}, 'port0\x00', 0xf, 0x80048, 0xfffffffffffff001, 0x49, 0x8001, 0x87, 0x7, 0x0, 0x0, 0x3}) sendto$inet(r2, &(0x7f0000000240)="4c2f5427b6496fb6c2c977aa76e7127bb2692adfdf7a607d772b8e68", 0x290, 0x20040844, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0xd) fchown(r2, r3, 0x0) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0)='fou\x00') sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000740)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r4, 0x404, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200480c4}, 0x40000) unshare(0x40000000) r5 = syz_open_procfs(r1, &(0x7f00000001c0)='net/sockstat6\x00') preadv(r5, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000080)={0x5, 0x4, 0x1}) fchown(r5, r3, 0x0) [ 370.210491] attempt to access beyond end of device [ 370.225083] loop0: rw=536870912, want=115, limit=112 [ 370.236391] Buffer I/O error on dev loop0, logical block 114, lost async page write 19:10:04 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x2, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000040)={@loopback, @multicast2, @rand_addr=0x7ff}, 0xc) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) fcntl$setpipe(r0, 0x407, 0x20) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) [ 370.258769] attempt to access beyond end of device [ 370.263872] loop0: rw=536870912, want=116, limit=112 [ 370.269265] Buffer I/O error on dev loop0, logical block 115, lost async page write [ 370.280388] attempt to access beyond end of device [ 370.287626] loop0: rw=536870912, want=117, limit=112 [ 370.295939] Buffer I/O error on dev loop0, logical block 116, lost async page write [ 370.303806] attempt to access beyond end of device [ 370.309276] loop0: rw=536870912, want=130, limit=112 [ 370.322533] Buffer I/O error on dev loop0, logical block 129, lost async page write [ 370.340979] attempt to access beyond end of device [ 370.353656] loop0: rw=536870912, want=131, limit=112 [ 370.373825] Buffer I/O error on dev loop0, logical block 130, lost async page write [ 370.400609] attempt to access beyond end of device [ 370.406560] IPVS: Creating netns size=2536 id=40 [ 370.444059] loop0: rw=536870912, want=132, limit=112 [ 370.454772] Buffer I/O error on dev loop0, logical block 131, lost async page write [ 370.462898] attempt to access beyond end of device [ 370.467922] loop0: rw=536870912, want=133, limit=112 [ 370.473541] Buffer I/O error on dev loop0, logical block 132, lost async page write [ 370.482488] attempt to access beyond end of device [ 370.485421] IPVS: Creating netns size=2536 id=41 [ 370.514658] loop0: rw=536870912, want=2189, limit=112 [ 370.527330] attempt to access beyond end of device [ 370.532583] loop0: rw=536870912, want=4237, limit=112 [ 370.540779] attempt to access beyond end of device [ 370.545949] loop0: rw=536870912, want=6285, limit=112 [ 370.554429] attempt to access beyond end of device [ 370.560263] loop0: rw=536870912, want=8333, limit=112 [ 370.566512] attempt to access beyond end of device [ 370.571810] loop0: rw=536870912, want=9045, limit=112 [ 370.580267] attempt to access beyond end of device [ 370.585351] loop0: rw=536870912, want=9046, limit=112 [ 370.592407] Buffer I/O error on dev loop0, logical block 9045, lost async page write [ 370.600864] attempt to access beyond end of device [ 370.606114] loop0: rw=536870912, want=9047, limit=112 [ 370.611819] Buffer I/O error on dev loop0, logical block 9046, lost async page write [ 370.620545] attempt to access beyond end of device [ 370.625768] loop0: rw=536870912, want=9048, limit=112 [ 370.631152] attempt to access beyond end of device [ 370.636271] loop0: rw=536870912, want=9049, limit=112 [ 370.642083] attempt to access beyond end of device [ 370.647080] loop0: rw=536870912, want=9078, limit=112 [ 370.652444] attempt to access beyond end of device [ 370.657434] loop0: rw=536870912, want=9079, limit=112 [ 370.663273] attempt to access beyond end of device [ 370.668743] loop0: rw=536870912, want=9080, limit=112 [ 370.674509] attempt to access beyond end of device [ 370.681742] loop0: rw=536870912, want=9081, limit=112 [ 370.687073] attempt to access beyond end of device [ 370.692988] loop0: rw=536870912, want=9102, limit=112 [ 370.699719] attempt to access beyond end of device [ 370.705000] loop0: rw=536870912, want=9103, limit=112 [ 370.710526] attempt to access beyond end of device [ 370.715637] loop0: rw=536870912, want=9104, limit=112 [ 370.721221] attempt to access beyond end of device [ 370.726316] loop0: rw=536870912, want=9105, limit=112 [ 370.731614] attempt to access beyond end of device [ 370.736623] loop0: rw=536870912, want=9138, limit=112 [ 370.742142] attempt to access beyond end of device [ 370.747115] loop0: rw=536870912, want=9139, limit=112 [ 370.752528] attempt to access beyond end of device [ 370.757527] loop0: rw=536870912, want=9140, limit=112 [ 370.762813] attempt to access beyond end of device [ 370.768029] loop0: rw=536870912, want=9141, limit=112 [ 370.773444] attempt to access beyond end of device [ 370.778395] loop0: rw=536870912, want=9154, limit=112 [ 370.783829] attempt to access beyond end of device [ 370.788781] loop0: rw=536870912, want=9155, limit=112 [ 370.794033] attempt to access beyond end of device [ 370.798968] loop0: rw=536870912, want=9156, limit=112 [ 370.804237] attempt to access beyond end of device [ 370.809174] loop0: rw=536870912, want=9157, limit=112 [ 370.812229] attempt to access beyond end of device [ 370.812235] loop6: rw=536870912, want=114, limit=112 [ 370.812246] attempt to access beyond end of device [ 370.812250] loop6: rw=536870912, want=115, limit=112 [ 370.812260] attempt to access beyond end of device [ 370.812264] loop6: rw=536870912, want=116, limit=112 [ 370.812273] attempt to access beyond end of device [ 370.812277] loop6: rw=536870912, want=117, limit=112 [ 370.812288] attempt to access beyond end of device [ 370.812292] loop6: rw=536870912, want=130, limit=112 [ 370.812302] attempt to access beyond end of device [ 370.812307] loop6: rw=536870912, want=131, limit=112 [ 370.812316] attempt to access beyond end of device [ 370.812320] loop6: rw=536870912, want=132, limit=112 [ 370.812330] attempt to access beyond end of device [ 370.812334] loop6: rw=536870912, want=133, limit=112 [ 370.812681] attempt to access beyond end of device [ 370.812686] loop6: rw=536870912, want=853, limit=112 [ 370.812818] attempt to access beyond end of device [ 370.812822] loop6: rw=536870912, want=854, limit=112 [ 370.812832] attempt to access beyond end of device [ 370.812836] loop6: rw=536870912, want=855, limit=112 [ 370.812846] attempt to access beyond end of device [ 370.812850] loop6: rw=536870912, want=856, limit=112 [ 370.812860] attempt to access beyond end of device [ 370.812864] loop6: rw=536870912, want=857, limit=112 [ 370.812873] attempt to access beyond end of device [ 370.812877] loop6: rw=536870912, want=886, limit=112 [ 370.812886] attempt to access beyond end of device [ 370.812890] loop6: rw=536870912, want=887, limit=112 [ 370.812899] attempt to access beyond end of device [ 370.812904] loop6: rw=536870912, want=888, limit=112 [ 370.812913] attempt to access beyond end of device [ 370.812917] loop6: rw=536870912, want=889, limit=112 [ 370.812932] attempt to access beyond end of device [ 370.812936] loop6: rw=536870912, want=910, limit=112 [ 370.812945] attempt to access beyond end of device [ 370.812950] loop6: rw=536870912, want=911, limit=112 [ 370.812959] attempt to access beyond end of device [ 370.812963] loop6: rw=536870912, want=912, limit=112 [ 370.812972] attempt to access beyond end of device [ 370.812976] loop6: rw=536870912, want=913, limit=112 [ 370.812985] attempt to access beyond end of device [ 370.812990] loop6: rw=536870912, want=946, limit=112 [ 370.812999] attempt to access beyond end of device [ 370.813003] loop6: rw=536870912, want=947, limit=112 [ 370.813012] attempt to access beyond end of device [ 370.813016] loop6: rw=536870912, want=948, limit=112 [ 370.813025] attempt to access beyond end of device [ 370.813029] loop6: rw=536870912, want=949, limit=112 [ 370.813044] attempt to access beyond end of device [ 370.813048] loop6: rw=536870912, want=962, limit=112 [ 370.813057] attempt to access beyond end of device [ 370.813061] loop6: rw=536870912, want=963, limit=112 [ 370.813072] attempt to access beyond end of device [ 370.813076] loop6: rw=536870912, want=964, limit=112 [ 370.813085] attempt to access beyond end of device [ 370.813090] loop6: rw=536870912, want=965, limit=112 [ 370.813099] attempt to access beyond end of device [ 370.813103] loop6: rw=536870912, want=974, limit=112 [ 370.813112] attempt to access beyond end of device [ 370.813116] loop6: rw=536870912, want=975, limit=112 [ 370.813125] attempt to access beyond end of device [ 370.813130] loop6: rw=536870912, want=976, limit=112 [ 370.813139] attempt to access beyond end of device [ 370.813143] loop6: rw=536870912, want=977, limit=112 [ 370.814085] attempt to access beyond end of device [ 370.814089] loop6: rw=536870912, want=3025, limit=112 [ 370.815767] attempt to access beyond end of device [ 370.815772] loop6: rw=536870912, want=5073, limit=112 [ 370.817013] attempt to access beyond end of device [ 370.817018] loop6: rw=536870912, want=7121, limit=112 [ 370.818257] attempt to access beyond end of device [ 370.818262] loop6: rw=536870912, want=9169, limit=112 [ 370.819492] attempt to access beyond end of device [ 370.819496] loop6: rw=536870912, want=11217, limit=112 [ 370.820719] attempt to access beyond end of device [ 370.820724] loop6: rw=536870912, want=13265, limit=112 [ 370.822307] attempt to access beyond end of device [ 370.822313] loop6: rw=536870912, want=15313, limit=112 [ 370.823544] attempt to access beyond end of device [ 370.823548] loop6: rw=536870912, want=17361, limit=112 [ 370.825124] attempt to access beyond end of device [ 370.825129] loop6: rw=536870912, want=19409, limit=112 [ 370.826366] attempt to access beyond end of device [ 370.826371] loop6: rw=536870912, want=21457, limit=112 [ 370.827604] attempt to access beyond end of device [ 370.827609] loop6: rw=536870912, want=23505, limit=112 [ 370.828826] attempt to access beyond end of device [ 370.828830] loop6: rw=536870912, want=25553, limit=112 [ 370.830198] attempt to access beyond end of device [ 370.830204] loop6: rw=536870912, want=27601, limit=112 [ 370.831433] attempt to access beyond end of device [ 370.831437] loop6: rw=536870912, want=29649, limit=112 [ 370.832711] attempt to access beyond end of device [ 370.832716] loop6: rw=536870912, want=31697, limit=112 [ 370.833761] attempt to access beyond end of device [ 370.833765] loop6: rw=536870912, want=32985, limit=112 [ 371.312924] attempt to access beyond end of device [ 371.317908] loop0: rw=536870912, want=9166, limit=112 [ 371.323127] attempt to access beyond end of device [ 371.328091] loop0: rw=536870912, want=9167, limit=112 [ 371.333324] attempt to access beyond end of device [ 371.338437] loop0: rw=536870912, want=9168, limit=112 [ 371.343675] attempt to access beyond end of device [ 371.349265] loop0: rw=536870912, want=9169, limit=112 [ 371.355249] attempt to access beyond end of device [ 371.360261] loop0: rw=536870912, want=11217, limit=112 [ 371.366548] attempt to access beyond end of device [ 371.371491] loop0: rw=536870912, want=13265, limit=112 [ 371.378165] attempt to access beyond end of device [ 371.383129] loop0: rw=536870912, want=15313, limit=112 [ 371.389338] attempt to access beyond end of device [ 371.394275] loop0: rw=536870912, want=17361, limit=112 [ 371.400461] attempt to access beyond end of device [ 371.405401] loop0: rw=536870912, want=19409, limit=112 [ 371.411495] attempt to access beyond end of device [ 371.416459] loop0: rw=536870912, want=21457, limit=112 [ 371.423117] attempt to access beyond end of device [ 371.428107] loop0: rw=536870912, want=23505, limit=112 [ 371.434255] attempt to access beyond end of device [ 371.439219] loop0: rw=536870912, want=25553, limit=112 [ 371.445401] attempt to access beyond end of device [ 371.450504] loop0: rw=536870912, want=27601, limit=112 [ 371.456559] attempt to access beyond end of device [ 371.461516] loop0: rw=536870912, want=29649, limit=112 [ 371.467830] attempt to access beyond end of device [ 371.472793] loop0: rw=536870912, want=31697, limit=112 [ 371.479469] attempt to access beyond end of device [ 371.484443] loop0: rw=536870912, want=32985, limit=112 19:10:06 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x3, 0x86, 0x2}) modify_ldt$write(0x1, &(0x7f0000000340)={0x1f, 0x20000800, 0x6000, 0x0, 0x0, 0x5d0733b2, 0xffffffff, 0x1}, 0x10) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:10:06 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x0, 0x42, 0x1, 0x3cf, 0x0, 0x7, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:10:06 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000000)) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) 19:10:06 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x4000000000101001, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) 19:10:06 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000740)) syz_open_procfs(0x0, &(0x7f0000000180)='net/route\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 19:10:06 executing program 7: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000240)={"766574000dcf2c0000001200bd6800", 0x43732e5398416f16}) r3 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x8000, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x8000, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00') ioctl$LOOP_SET_FD(r0, 0x4c00, r4) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000000500)={0x2, 0x0, &(0x7f0000000400)}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r6, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) write$P9_RREADDIR(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="2a00000029010000008a820000000000000000ffffff7f000000001c15ebd74469f3ac2e2f0000000030c4f0f70128bde57962529c1b98f0e2bf14c937a5e0b53fc4280bcffdbc7679a570cef986c804d3be560263948962f84d69d04e15a5eb4695f083d27c898eb347b29d4f624cbb8bd4a10364f2c1d0cfaa4e82edc00468375056fa6eb17b0b8da8aa94b02b4322a5d703a6583d48dab6e0a695964edca6585e1dda02e6f9"], 0x2a) write$P9_RGETATTR(r6, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r4, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0xefef4efc8b2b44f5, [{}]}}, 0x16) write$P9_RGETATTR(r6, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x2, 0x0) ioctl$RTC_WIE_OFF(r7, 0x7010) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000300)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@access_uid={'access'}}]}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) 19:10:06 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) write$selinux_user(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="73797374656d5f753a6f626a06000000000000007670745f4aa90d733020757365725f7500"], 0x25) 19:10:06 executing program 6: mq_open(&(0x7f00000001c0)='-$\x00', 0x0, 0x0, &(0x7f0000664fc0)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f00000004c0)=""/4096) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000180)=0x40000000000074, 0x315) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10) socket$netlink(0x10, 0x3, 0x1f) openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x80000, 0x0) set_tid_address(&(0x7f00000000c0)) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0)) sendto$inet(r1, &(0x7f0000a88f88), 0x2f0c, 0x20008001, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) getsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000340)={@local, @multicast2, @rand_addr}, &(0x7f0000000380)=0xc) 19:10:06 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000180)=""/246) pwritev(r0, &(0x7f00000000c0), 0x1000000000000127, 0x0) 19:10:06 executing program 2: r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_open_procfs(r0, &(0x7f0000000140)="3c1c052ca6a966b600") fcntl$getown(r1, 0x9) preadv(r1, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) 19:10:06 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x0, 0x42, 0x1, 0x3cf, 0xdf, 0x0, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) [ 371.912639] attempt to access beyond end of device [ 371.919032] loop0: rw=536870912, want=114, limit=112 [ 371.944288] attempt to access beyond end of device 19:10:06 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000740)) syz_open_procfs(0x0, &(0x7f0000000180)='net/route\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 19:10:06 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="c39cef444607a34ef6c0c0af6ba6a2624fe0d3cdc2c14a0cd9bc7c6a9b77a551c676238c65aca0bd02025bb4321b279cd798e45b7d07823a354ace5d", 0x3c}, {&(0x7f0000000180)="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", 0x1000}], 0x2, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) [ 371.961907] loop0: rw=536870912, want=115, limit=112 [ 371.979121] attempt to access beyond end of device 19:10:06 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x18000, 0x0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) fcntl$setflags(r0, 0x2, 0x100001) r3 = dup(r1) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000000440)=""/5) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') getpgid(0x0) capget(&(0x7f0000000380)={0x20080522, r2}, &(0x7f00000003c0)={0x7, 0xfffffbfffffffffb, 0x3fe00000, 0x4, 0x8, 0x8}) preadv(r4, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) r5 = inotify_init() r6 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x8, 0x12040) dup2(r5, r6) [ 372.003454] loop0: rw=536870912, want=116, limit=112 [ 372.015567] IPv6: ADDRCONF(NETDEV_UP): bond_slave_0: link is not ready [ 372.028097] IPv6: ADDRCONF(NETDEV_UP): bond_slave_1: link is not ready [ 372.031571] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 372.034218] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready 19:10:06 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) write$FUSE_POLL(r0, &(0x7f0000000000)={0x18, 0x0, 0x6, {0xffffffffffffffff}}, 0x18) [ 372.051364] attempt to access beyond end of device [ 372.069823] loop0: rw=536870912, want=117, limit=112 [ 372.085330] attempt to access beyond end of device 19:10:06 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x0, 0x42, 0x1, 0x3cf, 0xdf, 0x0, 0x0, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) [ 372.092584] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 372.092836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 372.093042] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 372.093250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 372.093441] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 372.093646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 372.093839] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 372.094041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 372.237973] loop0: rw=536870912, want=130, limit=112 [ 372.243250] attempt to access beyond end of device [ 372.248896] loop0: rw=536870912, want=131, limit=112 [ 372.254183] attempt to access beyond end of device [ 372.262196] loop0: rw=536870912, want=132, limit=112 [ 372.271711] attempt to access beyond end of device [ 372.277272] loop0: rw=536870912, want=133, limit=112 [ 372.283825] attempt to access beyond end of device [ 372.289337] loop0: rw=536870912, want=2189, limit=112 [ 372.296169] attempt to access beyond end of device [ 372.301190] loop0: rw=536870912, want=4237, limit=112 [ 372.311075] attempt to access beyond end of device [ 372.317690] loop0: rw=536870912, want=6285, limit=112 [ 372.327847] attempt to access beyond end of device [ 372.332930] loop0: rw=536870912, want=8333, limit=112 [ 372.339069] attempt to access beyond end of device [ 372.344167] loop0: rw=536870912, want=8789, limit=112 [ 372.349774] attempt to access beyond end of device [ 372.355050] loop0: rw=536870912, want=8790, limit=112 [ 372.360271] attempt to access beyond end of device [ 372.365212] loop0: rw=536870912, want=8791, limit=112 [ 372.370441] attempt to access beyond end of device [ 372.375613] loop0: rw=536870912, want=8792, limit=112 [ 372.380804] attempt to access beyond end of device [ 372.385878] loop0: rw=536870912, want=8793, limit=112 [ 372.391090] attempt to access beyond end of device [ 372.396030] loop0: rw=536870912, want=8822, limit=112 [ 372.401249] attempt to access beyond end of device [ 372.406244] loop0: rw=536870912, want=8823, limit=112 [ 372.411455] attempt to access beyond end of device [ 372.416504] loop0: rw=536870912, want=8824, limit=112 [ 372.421735] attempt to access beyond end of device [ 372.426751] loop0: rw=536870912, want=8825, limit=112 [ 372.431943] attempt to access beyond end of device [ 372.436886] loop0: rw=536870912, want=8846, limit=112 [ 372.442121] attempt to access beyond end of device [ 372.447103] loop0: rw=536870912, want=8847, limit=112 [ 372.452317] attempt to access beyond end of device [ 372.457250] loop0: rw=536870912, want=8848, limit=112 [ 372.462432] attempt to access beyond end of device [ 372.467407] loop0: rw=536870912, want=8849, limit=112 [ 372.472611] attempt to access beyond end of device [ 372.477614] loop0: rw=536870912, want=8882, limit=112 [ 372.482829] attempt to access beyond end of device [ 372.487867] loop0: rw=536870912, want=8883, limit=112 [ 372.493057] attempt to access beyond end of device [ 372.498206] loop0: rw=536870912, want=8884, limit=112 [ 372.503446] attempt to access beyond end of device [ 372.508458] loop0: rw=536870912, want=8885, limit=112 [ 372.513710] attempt to access beyond end of device [ 372.518739] loop0: rw=536870912, want=8898, limit=112 [ 372.523992] attempt to access beyond end of device [ 372.529050] loop0: rw=536870912, want=8899, limit=112 [ 372.534268] attempt to access beyond end of device [ 372.539214] loop0: rw=536870912, want=8900, limit=112 [ 372.544443] attempt to access beyond end of device [ 372.549452] loop0: rw=536870912, want=8901, limit=112 [ 372.554702] attempt to access beyond end of device [ 372.559871] loop0: rw=536870912, want=8910, limit=112 [ 372.565104] attempt to access beyond end of device [ 372.570121] loop0: rw=536870912, want=8911, limit=112 [ 372.575333] attempt to access beyond end of device [ 372.580469] loop0: rw=536870912, want=8912, limit=112 [ 372.585682] attempt to access beyond end of device [ 372.590685] loop0: rw=536870912, want=8913, limit=112 [ 372.596991] attempt to access beyond end of device [ 372.601954] loop0: rw=536870912, want=10961, limit=112 [ 372.608269] attempt to access beyond end of device [ 372.613212] loop0: rw=536870912, want=13009, limit=112 [ 372.619365] attempt to access beyond end of device [ 372.624300] loop0: rw=536870912, want=15057, limit=112 [ 372.630759] attempt to access beyond end of device [ 372.635726] loop0: rw=536870912, want=17105, limit=112 [ 372.641905] attempt to access beyond end of device [ 372.646869] loop0: rw=536870912, want=19153, limit=112 [ 372.653265] attempt to access beyond end of device [ 372.658254] loop0: rw=536870912, want=21201, limit=112 [ 372.664417] attempt to access beyond end of device [ 372.669535] loop0: rw=536870912, want=23249, limit=112 [ 372.675694] attempt to access beyond end of device [ 372.680666] loop0: rw=536870912, want=25297, limit=112 [ 372.686941] attempt to access beyond end of device [ 372.692071] loop0: rw=536870912, want=27345, limit=112 [ 372.698356] attempt to access beyond end of device [ 372.703295] loop0: rw=536870912, want=29393, limit=112 [ 372.709556] attempt to access beyond end of device [ 372.714504] loop0: rw=536870912, want=31441, limit=112 [ 372.720577] attempt to access beyond end of device [ 372.725514] loop0: rw=536870912, want=32985, limit=112 19:10:07 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x3, 0x86, 0x2}) modify_ldt$write(0x1, &(0x7f0000000340)={0x1f, 0x20000800, 0x6000, 0x0, 0x0, 0x5d0733b2, 0xffffffff, 0x1}, 0x10) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:10:07 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000180)=""/129) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={0x0}, &(0x7f00000004c0)=0xc) prctl$setptracer(0x59616d61, r1) getresgid(&(0x7f0000000080)=0x0, &(0x7f0000000440), &(0x7f0000000240)) getgroups(0x7, &(0x7f0000000280)=[0xee01, 0x0, 0xffffffffffffffff, 0xee01, 0xee01, 0xee00, 0x0]) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x4, &(0x7f0000000400)=[r2, r3, r4, r5]) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) sysfs$1(0x1, &(0x7f0000000000)='/dev/ppp\x00') ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x8, &(0x7f0000000500)=""/170) open(&(0x7f0000000100)='./file0\x00', 0x80800, 0x2) 19:10:07 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000001640)=[{&(0x7f0000000180)=""/155, 0x9b}, {&(0x7f0000000000)=""/249, 0xf9}, {&(0x7f0000000100)=""/41, 0x29}, {&(0x7f0000000480)=""/241, 0xf1}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f0000000240)=""/82, 0x52}, {&(0x7f00000026c0)=""/120, 0x78}, {&(0x7f00000002c0)=""/49, 0x31}], 0x8, 0x0) ioctl$KDENABIO(r0, 0x4b36) 19:10:07 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000740)) syz_open_procfs(0x0, &(0x7f0000000180)='net/route\x00') preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 19:10:07 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x0, 0x42, 0x1, 0x3cf, 0xdf, 0x0, 0x0, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:10:07 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) 19:10:07 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) write$P9_RWRITE(r1, &(0x7f0000000300)={0xb, 0x77, 0x1, 0xfffffffffffffffe}, 0xb) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) 19:10:07 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000240)={"766574000dcf2c0000001200bd6800", 0x43732e5398416f16}) r3 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x8000, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x8000, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00') ioctl$LOOP_SET_FD(r0, 0x4c00, r4) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000000500)={0x2, 0x0, &(0x7f0000000400)}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r6, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) write$P9_RREADDIR(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="2a00000029010000008a820000000000000000ffffff7f000000001c15ebd74469f3ac2e2f0000000030c4f0f70128bde57962529c1b98f0e2bf14c937a5e0b53fc4280bcffdbc7679a570cef986c804d3be560263948962f84d69d04e15a5eb4695f083d27c898eb347b29d4f624cbb8bd4a10364f2c1d0cfaa4e82edc00468375056fa6eb17b0b8da8aa94b02b4322a5d703a6583d48dab6e0a695964edca6585e1dda02e6f9"], 0x2a) write$P9_RGETATTR(r6, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r4, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0xefef4efc8b2b44f5, [{}]}}, 0x16) write$P9_RGETATTR(r6, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x2, 0x0) ioctl$RTC_WIE_OFF(r7, 0x7010) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000300)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@access_uid={'access'}}]}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) 19:10:07 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000740)) syz_open_procfs(0x0, &(0x7f0000000180)='net/route\x00') preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 19:10:07 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) 19:10:07 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000040)) 19:10:07 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x0, 0x42, 0x1, 0x3cf, 0xdf, 0x0, 0x0, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) [ 373.143771] device lo left promiscuous mode [ 373.153175] attempt to access beyond end of device [ 373.162320] loop0: rw=536870912, want=130, limit=112 19:10:07 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000740)) syz_open_procfs(0x0, &(0x7f0000000180)='net/route\x00') preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 19:10:07 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006fdf0001000000e7ffffff00060000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) exit(0x5) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) 19:10:07 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000001, 0x10, r0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd02090003", 0x6}], 0x1, 0x0) 19:10:07 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0x43d}], 0x1, 0x0) [ 373.178362] IPv6: ADDRCONF(NETDEV_UP): bond_slave_0: link is not ready [ 373.182475] IPv6: ADDRCONF(NETDEV_UP): bond_slave_1: link is not ready [ 373.189035] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 373.218113] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 373.250051] attempt to access beyond end of device [ 373.256597] loop0: rw=536870912, want=131, limit=112 [ 373.261745] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 373.262040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 373.262212] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 373.262380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 373.262549] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 373.262722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 373.262888] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 373.263058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 373.329700] attempt to access beyond end of device [ 373.335285] loop0: rw=536870912, want=132, limit=112 [ 373.340430] attempt to access beyond end of device [ 373.353470] loop0: rw=536870912, want=133, limit=112 [ 373.359238] attempt to access beyond end of device [ 373.369592] loop0: rw=536870912, want=142, limit=112 [ 373.379377] attempt to access beyond end of device [ 373.385069] loop0: rw=536870912, want=143, limit=112 [ 373.390397] attempt to access beyond end of device [ 373.396138] loop0: rw=536870912, want=144, limit=112 [ 373.401309] attempt to access beyond end of device [ 373.407005] loop0: rw=536870912, want=145, limit=112 [ 373.413609] attempt to access beyond end of device [ 373.418592] loop0: rw=536870912, want=2193, limit=112 [ 373.436093] attempt to access beyond end of device [ 373.441117] loop0: rw=536870912, want=4241, limit=112 [ 373.448741] attempt to access beyond end of device [ 373.454049] loop0: rw=536870912, want=5465, limit=112 [ 373.459455] attempt to access beyond end of device [ 373.464553] loop0: rw=536870912, want=5494, limit=112 [ 373.469796] attempt to access beyond end of device [ 373.481394] loop0: rw=536870912, want=5495, limit=112 [ 373.486629] attempt to access beyond end of device [ 373.491616] loop0: rw=536870912, want=5496, limit=112 [ 373.496956] attempt to access beyond end of device [ 373.501949] loop0: rw=536870912, want=5497, limit=112 [ 373.507177] attempt to access beyond end of device [ 373.512133] loop0: rw=536870912, want=5518, limit=112 [ 373.517395] attempt to access beyond end of device [ 373.522469] loop0: rw=536870912, want=5519, limit=112 [ 373.527921] attempt to access beyond end of device [ 373.532870] loop0: rw=536870912, want=5520, limit=112 [ 373.538125] attempt to access beyond end of device [ 373.543067] loop0: rw=536870912, want=5521, limit=112 [ 373.548362] attempt to access beyond end of device [ 373.553312] loop0: rw=536870912, want=5570, limit=112 [ 373.558561] attempt to access beyond end of device [ 373.563549] loop0: rw=536870912, want=5571, limit=112 [ 373.568798] attempt to access beyond end of device [ 373.573828] loop0: rw=536870912, want=5572, limit=112 [ 373.579077] attempt to access beyond end of device [ 373.584124] loop0: rw=536870912, want=5573, limit=112 [ 373.589371] attempt to access beyond end of device [ 373.594367] loop0: rw=536870912, want=5582, limit=112 [ 373.599695] attempt to access beyond end of device [ 373.604801] loop0: rw=536870912, want=5583, limit=112 [ 373.610039] attempt to access beyond end of device [ 373.615008] loop0: rw=536870912, want=5584, limit=112 [ 373.620216] attempt to access beyond end of device [ 373.625321] loop0: rw=536870912, want=5585, limit=112 [ 373.631203] attempt to access beyond end of device [ 373.636236] loop0: rw=536870912, want=7633, limit=112 [ 373.642333] attempt to access beyond end of device [ 373.647827] loop0: rw=536870912, want=9681, limit=112 [ 373.654058] attempt to access beyond end of device [ 373.659031] loop0: rw=536870912, want=11729, limit=112 [ 373.666091] attempt to access beyond end of device [ 373.671043] loop0: rw=536870912, want=13777, limit=112 [ 373.677282] attempt to access beyond end of device [ 373.682231] loop0: rw=536870912, want=15825, limit=112 [ 373.688514] attempt to access beyond end of device [ 373.693485] loop0: rw=536870912, want=17873, limit=112 [ 373.699748] attempt to access beyond end of device [ 373.704689] loop0: rw=536870912, want=19921, limit=112 [ 373.711069] attempt to access beyond end of device [ 373.716152] loop0: rw=536870912, want=21969, limit=112 [ 373.722279] attempt to access beyond end of device [ 373.727637] loop0: rw=536870912, want=24017, limit=112 [ 373.733853] attempt to access beyond end of device [ 373.738832] loop0: rw=536870912, want=26065, limit=112 [ 373.744997] attempt to access beyond end of device [ 373.750024] loop0: rw=536870912, want=28113, limit=112 [ 373.756468] attempt to access beyond end of device [ 373.761415] loop0: rw=536870912, want=30161, limit=112 [ 373.767647] attempt to access beyond end of device [ 373.772597] loop0: rw=536870912, want=32209, limit=112 [ 373.778406] attempt to access beyond end of device [ 373.783339] loop0: rw=536870912, want=32993, limit=112 19:10:08 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x3, 0x86, 0x2}) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:10:08 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x0, 0x42, 0x1, 0x3cf, 0xdf, 0x0, 0x1, 0x0, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:10:08 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000740)) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 19:10:08 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x3, 0x86, 0x2}) modify_ldt$write(0x1, &(0x7f0000000340)={0x1f, 0x20000800, 0x6000, 0x0, 0x0, 0x5d0733b2, 0xffffffff, 0x1}, 0x10) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:10:08 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000040)="71fdf371fc2c83f3b3f0b20c3eb43efd28f22746c5dc73e4c30233e923d135a9de4e7f8915b9558d965c98f0a5a9beeba7955d8cb0a4bddea728ded99359e9e4cf02dc647173367ebd355e0bce9fb1e32908e5cf7274bc0a7a8d3f4c18117f4d5af12c845639ec1a7c8f65f3adabf8f5b156f84dfb7c03fcda8ecf6d4a6938eff5e0815e3e9ce037014863a7718c687e50ff1b45ab6b848082f669b7c4b4cd5a4ee7a6b976ffd05b78318637bb07ca7a9d33f3b05334aac9ead8eaa6408902c1698a5942bcc7e41ef575db") 19:10:08 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x14, 0x4) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) 19:10:08 executing program 6: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x3, 0x86, 0x2}) modify_ldt$write(0x1, &(0x7f0000000340)={0x1f, 0x20000800, 0x6000, 0x0, 0x0, 0x5d0733b2, 0xffffffff, 0x1}, 0x10) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:10:08 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x3, 0x86, 0x2}) modify_ldt$write(0x1, &(0x7f0000000340)={0x1f, 0x20000800, 0x6000, 0x0, 0x0, 0x5d0733b2, 0xffffffff, 0x1}, 0x10) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:10:08 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) preadv(r0, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/64, 0x40}, {&(0x7f0000000380)=""/229, 0xe5}, {&(0x7f0000000100)=""/62, 0x3e}, {&(0x7f0000000480)=""/205, 0xcd}, {&(0x7f0000000580)=""/115, 0x73}, {&(0x7f0000000280)=""/45, 0x2d}, {&(0x7f0000000600)=""/89, 0x59}], 0x7, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) ptrace$setregset(0x4205, r1, 0x3, &(0x7f0000000080)={&(0x7f0000000180)="8887eb0eef342561fc5e8f539b7270f4df5ed8c1f9ba70fb089d0cfe73cae6d53da8c2497c6223dc088dea7171346117410d1e2b361cdd7525f02083dcf19a78073db2c52e1bc4aeac3ea86a46be42e2ea807e74feb09d9bdaedf9524ea9b6e94d4fbf0a3dd8f0f7e3cc8ca95ec82405bd682bc4e36681eb64adc2f0a133e3e9d1385d2627067aba6244b7503787bf500fd682c57d05c45ef81d77f980d5e4240963c67a5065d3b84909ff7441fc7fc59d54983cb216ff43d61c0e85fb1797eae4229bf8", 0xc4}) preadv(r0, &(0x7f0000001ac0)=[{&(0x7f0000000700)=""/225, 0xe1}, {&(0x7f0000000800)=""/74, 0x4a}, {&(0x7f0000000880)=""/128, 0x80}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/197, 0xc5}, {&(0x7f0000001a00)=""/188, 0xbc}], 0x6, 0x0) 19:10:08 executing program 7: r0 = getpgrp(0x0) sched_setscheduler(r0, 0x3, &(0x7f0000000300)) pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/rtc0\x00', 0x200000, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}}) syz_open_dev$binder(&(0x7f0000000800)='/dev/binder#\x00', 0x0, 0x800) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0xc00, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f00000003c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f0000000400)={0x0}) r7 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x12, 0xffffffffffffffff, 0x0) r8 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x10, 0xffffffffffffff9c, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f0000000440)={0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000780)={0x80, 0x0, &(0x7f0000000640)=[@free_buffer={0x40086303, r5}, @acquire_done={0x40106309, r6, 0x4}, @release={0x40046306, 0x1}, @register_looper, @decrefs, @reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x8, &(0x7f00000004c0)=[@flat={0x776a2a85, 0x100, r7, 0x3}, @flat={0x776a2a85, 0x100, r8}, @flat={0x736a2a85, 0xb, r9, 0x4}], &(0x7f0000000600)=[0x0]}, 0x5}}], 0x9a, 0x0, &(0x7f00000006c0)="cacc4cf395efdf0a28ba88d6e51cfdc603d6cbc54c6e8b654b4b48c539a89d0181557ff7499aeae048e090faaf256b5c835fc2f5fa11438c7da676183bb87a59b28244cab8914d3134cfe30fc695946435d39efc133840a4ea4d5a9d7243c89691cd17e8438e9dae001ed7ba2bc0c4453fac7363d6e4cb125096fca0f14ed45bc73e79b105117cace43498df011ed3d977cbf45607b1ff7c1ec6"}) 19:10:08 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x0, 0x42, 0x1, 0x3cf, 0xdf, 0x0, 0x1, 0x0, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) [ 374.190436] attempt to access beyond end of device [ 374.203986] loop0: rw=536870912, want=114, limit=112 [ 374.225837] attempt to access beyond end of device 19:10:08 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x2, 0x4000) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) [ 374.240202] loop0: rw=536870912, want=115, limit=112 19:10:08 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x3, 0x86, 0x2}) modify_ldt$write(0x1, &(0x7f0000000340)={0x1f, 0x20000800, 0x6000, 0x0, 0x0, 0x5d0733b2, 0xffffffff, 0x1}, 0x10) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:10:08 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x40040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000440)={"753e1e06ce1c9c5a00", 0xfff}) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000480)=""/117, 0x75}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x31, 0xffffffffffffffff, 0x0) tkill(r2, 0x2001000000000016) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0xc) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) [ 374.266557] attempt to access beyond end of device 19:10:08 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 19:10:08 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x0, 0x42, 0x1, 0x3cf, 0xdf, 0x0, 0x1, 0x0, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) [ 374.287680] loop0: rw=536870912, want=116, limit=112 [ 374.304290] attempt to access beyond end of device [ 374.318148] loop0: rw=536870912, want=117, limit=112 [ 374.325779] attempt to access beyond end of device [ 374.331157] loop0: rw=536870912, want=130, limit=112 [ 374.341534] attempt to access beyond end of device [ 374.346610] loop0: rw=536870912, want=131, limit=112 [ 374.352767] attempt to access beyond end of device [ 374.357871] loop0: rw=536870912, want=132, limit=112 [ 374.409943] attempt to access beyond end of device [ 374.425001] loop0: rw=536870912, want=133, limit=112 [ 374.440010] attempt to access beyond end of device [ 374.451520] loop0: rw=536870912, want=2189, limit=112 [ 374.474989] attempt to access beyond end of device [ 374.480180] loop0: rw=536870912, want=4237, limit=112 [ 374.492733] attempt to access beyond end of device [ 374.498585] loop0: rw=536870912, want=5589, limit=112 [ 374.510089] attempt to access beyond end of device [ 374.516731] loop0: rw=536870912, want=5590, limit=112 [ 374.522234] attempt to access beyond end of device [ 374.527488] loop0: rw=536870912, want=5591, limit=112 [ 374.538741] attempt to access beyond end of device [ 374.543783] loop0: rw=536870912, want=5592, limit=112 [ 374.550843] attempt to access beyond end of device [ 374.555893] loop0: rw=536870912, want=5593, limit=112 [ 374.561227] attempt to access beyond end of device [ 374.566283] loop0: rw=536870912, want=5622, limit=112 [ 374.572157] attempt to access beyond end of device [ 374.577439] loop0: rw=536870912, want=5623, limit=112 [ 374.582631] attempt to access beyond end of device [ 374.587948] loop0: rw=536870912, want=5624, limit=112 [ 374.593630] attempt to access beyond end of device [ 374.598606] loop0: rw=536870912, want=5625, limit=112 [ 374.607814] attempt to access beyond end of device [ 374.618040] loop0: rw=536870912, want=5646, limit=112 [ 374.627738] attempt to access beyond end of device [ 374.635243] loop0: rw=536870912, want=5647, limit=112 [ 374.640829] attempt to access beyond end of device [ 374.646069] loop0: rw=536870912, want=5648, limit=112 [ 374.651722] attempt to access beyond end of device [ 374.656875] loop0: rw=536870912, want=5649, limit=112 [ 374.662118] attempt to access beyond end of device [ 374.667458] loop0: rw=536870912, want=5682, limit=112 [ 374.672723] attempt to access beyond end of device [ 374.677944] loop0: rw=536870912, want=5683, limit=112 [ 374.683158] attempt to access beyond end of device [ 374.688294] loop0: rw=536870912, want=5684, limit=112 [ 374.693584] attempt to access beyond end of device [ 374.698654] loop0: rw=536870912, want=5685, limit=112 [ 374.703952] attempt to access beyond end of device [ 374.709089] loop0: rw=536870912, want=5698, limit=112 [ 374.714389] attempt to access beyond end of device [ 374.719363] loop0: rw=536870912, want=5699, limit=112 [ 374.724911] attempt to access beyond end of device [ 374.729842] loop0: rw=536870912, want=5700, limit=112 [ 374.735082] attempt to access beyond end of device [ 374.740053] loop0: rw=536870912, want=5701, limit=112 [ 374.745294] attempt to access beyond end of device [ 374.750223] loop0: rw=536870912, want=5710, limit=112 [ 374.755511] attempt to access beyond end of device [ 374.760456] loop0: rw=536870912, want=5711, limit=112 [ 374.765699] attempt to access beyond end of device [ 374.770655] loop0: rw=536870912, want=5712, limit=112 [ 374.775905] attempt to access beyond end of device [ 374.780849] loop0: rw=536870912, want=5713, limit=112 [ 374.786728] attempt to access beyond end of device [ 374.791672] loop0: rw=536870912, want=7761, limit=112 [ 374.797767] attempt to access beyond end of device [ 374.802706] loop0: rw=536870912, want=9809, limit=112 [ 374.808871] attempt to access beyond end of device [ 374.813814] loop0: rw=536870912, want=11857, limit=112 [ 374.815519] attempt to access beyond end of device [ 374.815525] loop6: rw=536870912, want=114, limit=112 [ 374.815536] attempt to access beyond end of device [ 374.815540] loop6: rw=536870912, want=115, limit=112 [ 374.815549] attempt to access beyond end of device [ 374.815553] loop6: rw=536870912, want=116, limit=112 [ 374.815562] attempt to access beyond end of device [ 374.815567] loop6: rw=536870912, want=117, limit=112 [ 374.815576] attempt to access beyond end of device [ 374.815580] loop6: rw=536870912, want=130, limit=112 [ 374.815590] attempt to access beyond end of device [ 374.815594] loop6: rw=536870912, want=131, limit=112 [ 374.815603] attempt to access beyond end of device [ 374.815608] loop6: rw=536870912, want=132, limit=112 [ 374.815616] attempt to access beyond end of device [ 374.815621] loop6: rw=536870912, want=133, limit=112 [ 374.816493] attempt to access beyond end of device [ 374.816498] loop6: rw=536870912, want=2069, limit=112 [ 374.816825] attempt to access beyond end of device [ 374.816829] loop6: rw=536870912, want=2070, limit=112 [ 374.816839] attempt to access beyond end of device [ 374.816843] loop6: rw=536870912, want=2071, limit=112 [ 374.816852] attempt to access beyond end of device [ 374.816856] loop6: rw=536870912, want=2072, limit=112 [ 374.816865] attempt to access beyond end of device [ 374.816869] loop6: rw=536870912, want=2073, limit=112 [ 374.816878] attempt to access beyond end of device [ 374.816882] loop6: rw=536870912, want=2102, limit=112 [ 374.816891] attempt to access beyond end of device [ 374.816895] loop6: rw=536870912, want=2103, limit=112 [ 374.816906] attempt to access beyond end of device [ 374.816910] loop6: rw=536870912, want=2104, limit=112 [ 374.816919] attempt to access beyond end of device [ 374.816923] loop6: rw=536870912, want=2105, limit=112 [ 374.816937] attempt to access beyond end of device [ 374.816941] loop6: rw=536870912, want=2126, limit=112 [ 374.816950] attempt to access beyond end of device [ 374.816954] loop6: rw=536870912, want=2127, limit=112 [ 374.816963] attempt to access beyond end of device [ 374.816967] loop6: rw=536870912, want=2128, limit=112 [ 374.816977] attempt to access beyond end of device [ 374.816981] loop6: rw=536870912, want=2129, limit=112 [ 374.816990] attempt to access beyond end of device [ 374.816994] loop6: rw=536870912, want=2162, limit=112 [ 374.817004] attempt to access beyond end of device [ 374.817008] loop6: rw=536870912, want=2163, limit=112 [ 374.817018] attempt to access beyond end of device [ 374.817022] loop6: rw=536870912, want=2164, limit=112 [ 374.817031] attempt to access beyond end of device [ 374.817035] loop6: rw=536870912, want=2165, limit=112 [ 374.817050] attempt to access beyond end of device [ 374.817054] loop6: rw=536870912, want=2178, limit=112 [ 374.817063] attempt to access beyond end of device [ 374.817067] loop6: rw=536870912, want=2179, limit=112 [ 374.817076] attempt to access beyond end of device [ 374.817080] loop6: rw=536870912, want=2180, limit=112 [ 374.817089] attempt to access beyond end of device [ 374.817094] loop6: rw=536870912, want=2181, limit=112 [ 374.817103] attempt to access beyond end of device [ 374.817107] loop6: rw=536870912, want=2190, limit=112 [ 374.817116] attempt to access beyond end of device [ 374.817120] loop6: rw=536870912, want=2191, limit=112 [ 374.817129] attempt to access beyond end of device [ 374.817133] loop6: rw=536870912, want=2192, limit=112 [ 374.817143] attempt to access beyond end of device [ 374.817147] loop6: rw=536870912, want=2193, limit=112 [ 374.818036] attempt to access beyond end of device [ 374.818040] loop6: rw=536870912, want=4241, limit=112 [ 374.819804] attempt to access beyond end of device [ 374.819810] loop6: rw=536870912, want=6289, limit=112 [ 374.821046] attempt to access beyond end of device [ 374.821050] loop6: rw=536870912, want=8337, limit=112 [ 374.822276] attempt to access beyond end of device [ 374.822280] loop6: rw=536870912, want=10385, limit=112 [ 374.823493] attempt to access beyond end of device [ 374.823498] loop6: rw=536870912, want=12433, limit=112 [ 374.824727] attempt to access beyond end of device [ 374.824732] loop6: rw=536870912, want=14481, limit=112 [ 374.826073] attempt to access beyond end of device [ 374.826078] loop6: rw=536870912, want=16529, limit=112 [ 374.827289] attempt to access beyond end of device [ 374.827293] loop6: rw=536870912, want=18577, limit=112 [ 374.828517] attempt to access beyond end of device [ 374.828521] loop6: rw=536870912, want=20625, limit=112 [ 374.829968] attempt to access beyond end of device [ 374.829973] loop6: rw=536870912, want=22673, limit=112 [ 374.831351] attempt to access beyond end of device [ 374.831361] loop6: rw=536870912, want=24721, limit=112 [ 374.832593] attempt to access beyond end of device [ 374.832598] loop6: rw=536870912, want=26769, limit=112 [ 374.833808] attempt to access beyond end of device [ 374.833813] loop6: rw=536870912, want=28817, limit=112 [ 374.835222] attempt to access beyond end of device [ 374.835227] loop6: rw=536870912, want=30865, limit=112 [ 374.836459] attempt to access beyond end of device [ 374.836463] loop6: rw=536870912, want=32913, limit=112 [ 374.836844] attempt to access beyond end of device [ 374.836848] loop6: rw=536870912, want=32985, limit=112 [ 375.321050] attempt to access beyond end of device [ 375.325960] loop0: rw=536870912, want=13905, limit=112 [ 375.332241] attempt to access beyond end of device [ 375.337199] loop0: rw=536870912, want=15953, limit=112 [ 375.343354] attempt to access beyond end of device [ 375.348290] loop0: rw=536870912, want=18001, limit=112 [ 375.354480] attempt to access beyond end of device [ 375.359445] loop0: rw=536870912, want=20049, limit=112 [ 375.365580] attempt to access beyond end of device [ 375.370551] loop0: rw=536870912, want=22097, limit=112 [ 375.376704] attempt to access beyond end of device [ 375.381662] loop0: rw=536870912, want=24145, limit=112 [ 375.387918] attempt to access beyond end of device [ 375.392991] loop0: rw=536870912, want=26193, limit=112 [ 375.399181] attempt to access beyond end of device [ 375.404137] loop0: rw=536870912, want=28241, limit=112 [ 375.410398] attempt to access beyond end of device [ 375.415340] loop0: rw=536870912, want=30289, limit=112 [ 375.421499] attempt to access beyond end of device [ 375.426432] loop0: rw=536870912, want=32337, limit=112 [ 375.432242] attempt to access beyond end of device [ 375.437183] loop0: rw=536870912, want=32985, limit=112 19:10:10 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x3, 0x86, 0x2}) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:10:10 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000180)=""/4096) 19:10:10 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000740)) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 19:10:10 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x0, 0x42, 0x1, 0x3cf, 0xdf, 0x0, 0x1, 0x1, 0x0, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:10:10 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2d8b7677664bc1696e646e6f3d", @ANYRESHEX=r1, @ANYBLOB=',\x00']) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) listxattr(&(0x7f0000000300)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) 19:10:10 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 19:10:10 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x40000, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000380)=""/169, 0xa9}], 0x1, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3e, 0xa01, 0x70bd2d, 0x25dfdbfd, {0x1a}, [@typed={0x14, 0x5e, @ipv6=@ipv4={[], [], @loopback}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) 19:10:10 executing program 6: r0 = getpgrp(0x0) sched_setscheduler(r0, 0x3, &(0x7f0000000300)) pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/rtc0\x00', 0x200000, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}}) syz_open_dev$binder(&(0x7f0000000800)='/dev/binder#\x00', 0x0, 0x800) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0xc00, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f00000003c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f0000000400)={0x0}) r7 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x12, 0xffffffffffffffff, 0x0) r8 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x10, 0xffffffffffffff9c, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f0000000440)={0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000780)={0x80, 0x0, &(0x7f0000000640)=[@free_buffer={0x40086303, r5}, @acquire_done={0x40106309, r6, 0x4}, @release={0x40046306, 0x1}, @register_looper, @decrefs, @reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x8, &(0x7f00000004c0)=[@flat={0x776a2a85, 0x100, r7, 0x3}, @flat={0x776a2a85, 0x100, r8}, @flat={0x736a2a85, 0xb, r9, 0x4}], &(0x7f0000000600)=[0x0]}, 0x5}}], 0x9a, 0x0, &(0x7f00000006c0)="cacc4cf395efdf0a28ba88d6e51cfdc603d6cbc54c6e8b654b4b48c539a89d0181557ff7499aeae048e090faaf256b5c835fc2f5fa11438c7da676183bb87a59b28244cab8914d3134cfe30fc695946435d39efc133840a4ea4d5a9d7243c89691cd17e8438e9dae001ed7ba2bc0c4453fac7363d6e4cb125096fca0f14ed45bc73e79b105117cace43498df011ed3d977cbf45607b1ff7c1ec6"}) 19:10:10 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000740)) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 19:10:10 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0x85}], 0x17a4b90f1c9d19c, 0x0) 19:10:10 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x40000, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000380)=""/169, 0xa9}], 0x1, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3e, 0xa01, 0x70bd2d, 0x25dfdbfd, {0x1a}, [@typed={0x14, 0x5e, @ipv6=@ipv4={[], [], @loopback}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) 19:10:10 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x0, 0x42, 0x1, 0x3cf, 0xdf, 0x0, 0x1, 0x1, 0x0, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) [ 375.833786] 9pnet: Insufficient options for proto=fd [ 375.839370] attempt to access beyond end of device 19:10:10 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 19:10:10 executing program 3: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000080)={0x0, 0xfffffffeffffffff}) write$P9_RWALK(r0, &(0x7f0000000200)={0x7e, 0x6f, 0x2, {0x9, [{0x40000000000000, 0x3, 0x6}, {0x2, 0x3, 0x3}, {0x40, 0x2, 0x2000006}, {0xc1, 0x0, 0x4}, {0x1, 0x2, 0x4}, {0x1a, 0x1, 0x40000003}, {0x1000000000080, 0x2, 0x6}, {0x70, 0x2}, {0x0, 0x2, 0x2}]}}, 0x7e) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000100)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) 19:10:10 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000740)) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) [ 375.839377] loop0: rw=536870912, want=130, limit=112 [ 375.839383] buffer_io_error: 174 callbacks suppressed [ 375.839389] Buffer I/O error on dev loop0, logical block 129, lost async page write [ 375.839400] attempt to access beyond end of device 19:10:10 executing program 2: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000140)='net/tcp6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) [ 375.839404] loop0: rw=536870912, want=131, limit=112 [ 375.839409] Buffer I/O error on dev loop0, logical block 130, lost async page write [ 375.839419] attempt to access beyond end of device [ 375.839424] loop0: rw=536870912, want=132, limit=112 [ 375.839428] Buffer I/O error on dev loop0, logical block 131, lost async page write [ 375.839438] attempt to access beyond end of device [ 375.839443] loop0: rw=536870912, want=133, limit=112 [ 375.839447] Buffer I/O error on dev loop0, logical block 132, lost async page write [ 375.839457] attempt to access beyond end of device [ 375.839462] loop0: rw=536870912, want=142, limit=112 [ 375.839466] Buffer I/O error on dev loop0, logical block 141, lost async page write [ 375.839475] attempt to access beyond end of device [ 375.839480] loop0: rw=536870912, want=143, limit=112 [ 375.839484] Buffer I/O error on dev loop0, logical block 142, lost async page write [ 375.839493] attempt to access beyond end of device [ 375.839498] loop0: rw=536870912, want=144, limit=112 [ 375.839503] Buffer I/O error on dev loop0, logical block 143, lost async page write [ 375.839512] attempt to access beyond end of device [ 375.839516] loop0: rw=536870912, want=145, limit=112 [ 375.839521] Buffer I/O error on dev loop0, logical block 144, lost async page write [ 375.840559] attempt to access beyond end of device [ 375.840565] loop0: rw=536870912, want=2193, limit=112 [ 375.841898] attempt to access beyond end of device [ 375.841904] loop0: rw=536870912, want=4241, limit=112 [ 375.843208] attempt to access beyond end of device [ 375.843218] loop0: rw=536870912, want=6289, limit=112 [ 375.851288] attempt to access beyond end of device [ 375.856586] loop0: rw=536870912, want=8337, limit=112 [ 375.857468] attempt to access beyond end of device [ 375.857475] loop0: rw=536870912, want=9113, limit=112 [ 375.857799] attempt to access beyond end of device [ 375.857805] loop0: rw=536870912, want=9142, limit=112 [ 375.857812] Buffer I/O error on dev loop0, logical block 9141, lost async page write [ 375.857821] attempt to access beyond end of device [ 375.857826] loop0: rw=536870912, want=9143, limit=112 [ 375.857831] Buffer I/O error on dev loop0, logical block 9142, lost async page write [ 375.857840] attempt to access beyond end of device [ 375.857844] loop0: rw=536870912, want=9144, limit=112 [ 375.857855] attempt to access beyond end of device [ 375.857860] loop0: rw=536870912, want=9145, limit=112 [ 375.857870] attempt to access beyond end of device [ 375.857875] loop0: rw=536870912, want=9166, limit=112 [ 375.857885] attempt to access beyond end of device [ 375.857889] loop0: rw=536870912, want=9167, limit=112 [ 375.857902] attempt to access beyond end of device [ 375.857906] loop0: rw=536870912, want=9168, limit=112 [ 375.857916] attempt to access beyond end of device [ 375.857921] loop0: rw=536870912, want=9169, limit=112 [ 375.857938] attempt to access beyond end of device [ 375.857942] loop0: rw=536870912, want=9218, limit=112 [ 375.857952] attempt to access beyond end of device [ 375.857957] loop0: rw=536870912, want=9219, limit=112 [ 375.857967] attempt to access beyond end of device [ 375.857972] loop0: rw=536870912, want=9220, limit=112 [ 375.857982] attempt to access beyond end of device [ 375.857986] loop0: rw=536870912, want=9221, limit=112 [ 375.857997] attempt to access beyond end of device [ 375.858001] loop0: rw=536870912, want=9230, limit=112 [ 375.858011] attempt to access beyond end of device [ 375.858016] loop0: rw=536870912, want=9231, limit=112 [ 375.858025] attempt to access beyond end of device [ 375.858030] loop0: rw=536870912, want=9232, limit=112 [ 375.858040] attempt to access beyond end of device [ 375.858044] loop0: rw=536870912, want=9233, limit=112 [ 375.859643] attempt to access beyond end of device [ 375.859649] loop0: rw=536870912, want=11281, limit=112 [ 375.861253] attempt to access beyond end of device [ 375.861260] loop0: rw=536870912, want=13329, limit=112 [ 375.863970] attempt to access beyond end of device [ 375.863977] loop0: rw=536870912, want=15377, limit=112 [ 375.875683] attempt to access beyond end of device [ 375.875689] loop0: rw=536870912, want=17425, limit=112 [ 375.882209] attempt to access beyond end of device [ 375.882215] loop0: rw=536870912, want=19473, limit=112 [ 375.883800] attempt to access beyond end of device [ 375.883807] loop0: rw=536870912, want=21521, limit=112 [ 375.885215] attempt to access beyond end of device [ 375.885221] loop0: rw=536870912, want=23569, limit=112 [ 375.886583] attempt to access beyond end of device [ 375.886589] loop0: rw=536870912, want=25617, limit=112 [ 375.901845] attempt to access beyond end of device [ 375.901851] loop0: rw=536870912, want=27665, limit=112 [ 375.903478] attempt to access beyond end of device [ 375.903484] loop0: rw=536870912, want=29713, limit=112 [ 375.905131] attempt to access beyond end of device [ 375.905137] loop0: rw=536870912, want=31761, limit=112 [ 375.906320] attempt to access beyond end of device [ 375.906326] loop0: rw=536870912, want=32993, limit=112 [ 376.488258] 9pnet: Insufficient options for proto=fd 19:10:10 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x3, 0x86, 0x2}) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:10:10 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x0, 0x42, 0x1, 0x3cf, 0xdf, 0x0, 0x1, 0x1, 0x0, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:10:10 executing program 5: syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 19:10:10 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x200000000000) 19:10:10 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x3, 0x86, 0x2}) modify_ldt$write(0x1, &(0x7f0000000340)={0x1f, 0x20000800, 0x6000, 0x0, 0x0, 0x5d0733b2, 0xffffffff, 0x1}, 0x10) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:10:10 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x4000) 19:10:10 executing program 6: r0 = socket$inet6(0xa, 0x1fffffffd, 0x7) setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f0000000080), 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000000200)=0xe8) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000240)={@ipv4, r1}, 0x14) 19:10:10 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x0, {}, 0x1, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800004, 0x0, 0x0, 0x0, 0x2}}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) 19:10:10 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000000), 0x0, 0x1f6) 19:10:10 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) 19:10:10 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x3, 0x86, 0x2}) modify_ldt$write(0x1, &(0x7f0000000340)={0x1f, 0x20000800, 0x6000, 0x0, 0x0, 0x5d0733b2, 0xffffffff, 0x1}, 0x10) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:10:10 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x0, 0x42, 0x1, 0x3cf, 0xdf, 0x0, 0x1, 0x1, 0x3, 0x0, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:10:10 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000480)={@multicast1, @multicast1, 0x0}, &(0x7f00000004c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', r1}) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000000280)={0x4, 0x9, 0xffffffffffffff58, 0xffffffff}) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = gettid() write$FUSE_LK(r2, &(0x7f0000000880)={0x28, 0x0, 0x7, {{0x80000000, 0x20, 0x1, r3}}}, 0x28) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000600)={0x1, 0x8, 0x8, 'queue1\x00', 0xf9a}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f00000008c0)=""/63, &(0x7f0000000900)=0x3f) r6 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) sendfile(r4, r6, &(0x7f0000002780), 0x8000fffffffe) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000006c0), 0xfffffffffffffdac) write$binfmt_elf64(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x2cd) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f00000002c0)=""/20, 0x14}, 0x100) sync() getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000000940)=""/228, &(0x7f0000000740)=0xfffffffffffffd8b) ioctl$BLKPG(r6, 0x1269, &(0x7f0000000300)={0x9, 0x1, 0xa0, &(0x7f0000000380)="3a016cb6fa73e570008093e6c842a7e0290cb50da2b7aa74f63f8c9645da834be22458622fee46093ff148dfb54f28e0513ee8ea1bbbb0a4cd21006dd989b5be6e3dca9663bde7a8cef32fdda8c39b142a4a658e116c3e5196ba9a4ddd08fcb112f7e6ce1cd89ad696555a4825bf8500bc92d5d3d959be22be70fed863dac30ecfbc5a74aafa22f4dc9616d485fc41b2372bc8dddf5add0ba24d44376deed3a6"}) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000100), 0xfffffd07) sendto$inet(r0, &(0x7f0000000180)="cc649bcf1524328e07f973a7f3f1244b780f48386978c155e78d31e6ccde14a3", 0x20, 0x0, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) ioctl$FS_IOC_GETFSLABEL(r5, 0x81009431, &(0x7f0000000780)) write$binfmt_elf64(r0, &(0x7f00000017c0)=ANY=[@ANYBLOB="7f454c4600250000050000000000000003003e00060000002c010000000000004000000000000000e1000000000000000500000087003800020002000700ea000200007001000000ea0a000000000000f7ffffffffffffff00000000ffffffff00000000000000000100000001000000010000000000000001000070040000000500000000000000000000000000000005000000000000000100000001000000ff0f00000000000000fcfffffffffffff423273d395b5dfe49a633eb0eb0263328129db30c89d614ca312379424593d1149401363a977a2b10bc8394762bab422771360aa38dc889b26829f721e3098b0f80c2f4ee55bcf0df04911af0a6a16e0ab5b5bb1e2227df0cb7b403be567ea3b9adef738dd4b7efbd9e56dfc0dc488a064d4ad246d477bc8fedb6c1fbcdb1469e544a6ac9afa9987b94c8d1209a41a79416931a8f43bd761418a2c47221a2a4d6bee2592cd6eab8fa3ac582965b48d68fb1dde708c9901874b0f1628c0adf0dc15872d102a327e9f073a52942892de4cc87c25e76cde841dd1e09db3f59955450018b682981af9bf3133a11fbf7915b41105bd663e6f7116777b3cb43f260d25a06d22119ca7674f7d9eeb496cccae5ea73758600072b6f0c2a040000002001cb9377fbc132be60c8b0bf6ac0a892b355685d62cb7077a1e889c359d7bfc544111c6ca232e6c6593a0b8f085567b065536d649fea6d4e202254fc1a0dedba780af208b0457ed33958cfd97c0155f59b06d997423bb3b6f3d5e01c8b74030434cacb0e50dcc661aff03a72021b6011f6ff05f6070f0bcb7d75cbf1668562cd6599dcf1eac792c47370ac83b2730215d9955f6fa81f59d3209fbaf52f41f8c413432d976fe6eb3ae98661de6250e09bcf7b82d0492b349ca022abade27ee2d41aa83ba7d2ed5193dda7e9c78769b1430e5a171e12e0fa1d057e1aef4b856ab0f2dabc8b207f09d78e1f83461ccac0b2558732ea70d369973971d2c6d94081f33308b1e4b27a2ce6f45838809407045aa63b6219d82564c7323f73bfc2260fd95e5e8eeca550b29adcca477de69469764858d7aa3ab8afd99e883c43dacae12ac88e7fea5a99df90755e5caf59185794ed6419a22fe36d9070ed6558b090cb871914491e2a135047b729107896b784bf87c941f7b993033898b993c83b8bcec93aed20e900921e8c8e716321ad5664665e7f89839258d1477a2e8fceaa9280b9c9dc53b5ed4bd907c3942d8fac1eff961bf3040ae0faed3985bccc355506dfcd52907750828fc988e60aec5b577af9769cebc8d6e87a826826f8362c84fe7ec9e6d3cc39c1b6b6b9005eaaf0d9037fa576757018d3f60fbab576284cd7343e70a4b8143dc67e94c1090b7376eec330f5995c4b3a119646b4a953cf0669d6e52264827bbbae2c7565529a68f46f5e1a23137059867d0192caf6b22e2d74f8fbe12a139bc90a0d12b6acc0a106ba4fc2baf87c254bb540835206fc5f63dbc82581cec68813c331af00086cae971610587c4683d5f1b0dd68b8a419f581f0387cc9d1a435e329a0595d73a4489b1ea23c331ca752bfd46de13faee26e7e2e9b11dd7151883ac8112c0ba049070bcf00881cc0a37395f1a102cddda4b0b903b0233461e70254e6a75b9c29c02fce51b630d5cd58867e5f8e5b47fdb2fb53e0b9485f1079ddb39d7b3ef5d8d37be9a08714575e454274581a8ad758ba53da32d2c893e8a40de0febf31f84016558a9db7c53dec27895d69fa1a34e4b5b856f4d0974a9dd4031e28632a245b921a576f1a19f47d7ba08e9ca94a7ae46c89b379d90e0dfdcffb790586d920ea79f94af735aa51695dfe0c9c73a44b277e877b473b43f5c3a960d7c5e22678ab3f7cf46bdf23cbbd31df613827f8e23f7b2c71be25eab7dbd56f7b426b784583ec97db1659afc521a84e709cd879f8e5afe72366ffcd05c29b92ad591e35a19df805a2b89b9b87a13109c19ea941e9b9f6ee1c47708870abfda2debce7eae0f356bc896a5a207f6bc3ed4186117e1ae9b861d3a9a94520a6df99fd700c6fc3b82467a1257c2040dd34b2fb30c032224e6b864900f93168e387edaeeedaebf8b7b40d4caaa97c85229e63770ced3382013fd11010d0ee46333666aaec98aacc511c92be9e55eee400c74ab4614552624ad88f5d63b6f87e85826ee7cf6f15418f9712c6d07f36a54f097d9bc48b3035ae569af4753e7831dc520fe4726d0c96d0cb7b45e5ca5002884d38ed8e8ead8d4a7da76f9bcfd848fd27345bec7dd4356ef7b11a0cd3113bd9d9bd72597daf8e25b987b6a17329b9c581e7e647eddd060553fd6e9194bc07ffc5ca9eb6e9ce36aa545ac0f6e242e381282522481668f05909a69db9c8f417ce2406fb727c11fa8ed3ec6f097fed51414f3286075c414753979f58a70d97539c1215ad15f4f2bdc9cb27e00245bb2291f767d4c581387a63022c727026043c0180a848edd1c3fffff21c3fe0b11c65caca8941959536882277e3dc9e61da52527a24e2d79a497a80b33b24f1ca184d56ad13194867d7a0a424977b5f256a4643460a03007ccf2abb042c6a8f357e8c67298f4ee68fa10d82aeec9c63884f43927692db04bfa6651a630ff1e945d5c2ceb1552d0cd69830f257e5d2b500e4447f03edc78938d82871b7075be875dee546cd23ae617356f51fe8f1fb11417e63a436d7ca0ecd22fab3719ab5b4a4fa0ac2b6a44002fdddb61f7d6fe2beac291455b144cff1da4cb487c430a42cd6dee2b0752536175bdeb3abf2a393823dddf4567d7a6ac785662eb272ea9ea223e0d63a2d027fc3bfa6da9c1537a5c207c9f2495bd45ee28be938ad3dbdadee778875ba641ceb20f3fb23d57269a4e40e0baea56d0b4247f12ebb7cf6ee0e64b0d521c8636ca845287f752adfde004e37bee0451540bcabf455b43233e287e4ce36ebbf2cf0aa8325b72b90c40cc5bdf77f66b07bf5423a80409e1e95424e2d63c09e621354d87d29d28758c290f29746e00e72e1f6ee9fc93841a7a4ec7420c1d78c09f9355b41c5b6a2e94d84218428a4e4e40bcab84f0cdc9a230101146a11e1f36367b4b5f21e76b5e58c31aec27a47e7ce6c22d29c553f03d0515199b541750e92718c53542cb8c0e4202c89b5bc2a4e3cd4fd1e33ba846b2d2d1c94d2e73327b1d327fe80ff1113634e2e94769b97a1088c2f00001fd26ffbf3b4b82036e960a01efd1eecb0e4cff79c5943cb7f3390757f2ebaa20ac131cddf19065dad03237cca7406b5c30228494fe25d9d26631795f3b0a16ac6c8c27e37a75bce127c582beed29fe6137efe5ac28a2a89597db794c570055e318e92f17f36e3fcbc68c8233d2f0c433f9e11b2819ade8026682c9c966d13605ba9cfa66d91f8203260ed06d8c53912b2c25be01165ebda24e3b70c4fa4a99c56470ee400000092272d6ba4a0906d5b8df7039b82bf83378b78ce124aca8b7944fffdd65bfca51e33614282fb1738dd43c6b95f2bc5e9b24605ff3fb5a06ece40c2c4a86b93acdde534777d47c5196e7ef7d65ff45606324b402aa6b81afa463f63f96bc442cd25a033b7b6feed08de0f00bccb16c439813c6c4b1d1733bb55a6245a9180ec71a7f31631613c60af161f5ef64493b859a6c4baa9e3811250984db538169178a4f4cb4141f74e366a28b4fdeef59bb22f6f525c493912a044bd99a3b4b86b2834a4f837d58d4292a22a730b6a2e5ec7bf358c2016326fff4889d5d5e1beec898a3a88d0f4a450d86548a1a9b1cc1bee45e6a4e2c4e09cd69a51d46190755bd42c1e53d4a1f80010da651d6c500a066afa9c98755acf643ff381af66742c6e091746c77e0f14f2583d6d70339ed50e9da34a0aa8820359872132179f087f16cdaf3636688927e39a857a99f911d08406b6addefa9f895f3b29812234eaf4d5a93b9363fa02a4ee9fe8676811004fabc8121f7639e9f92c0d7f796a6355e984d7a85aadc6220847666f8f52c4571516eb1a9fc487e918956411823e1edef555a61ba7d45931457b221bdcc8aaad58e8007497a8846278e0aed68926d3ea9fd96a89ccc89627c86da315c3eb5445bf799df613befe958390660f6c9f7ac02e3187100f18ea3bfacf9662601fc9868329b3524cb8c07850726355bd748f7c51b32e6c4341676cef6af55351e599d196d38d63bf0cd20b85f4bc79a2895b9c5c4d46090b4e1a10394f8ba7201d45d3878dc9b3e7ec3510073424b92a7448f9d8d9c15fff2a1c0e6dde7e6ad83f6243b21c6c14bd1b36e834b9cdc2b09022c0ddad8b5cdedb4a9e401acd96b77825cf6cb459e0c70b310c4d6f7a192c6766e75b4b50e64680b8bbe41065eac33f24c280ae6d89ef5fad05d8a9b635b052176cc3a9c2c9ffd43c0530deafd29079147dd34b5cd866e7feffe95f76695a40c216729ab52614000000000000000000d15fb7a1e1e415271a355e2920683606f9fc1e55e2bf1b5047b16c3c90280c51294756e33654a32aef0ba77bda88c545e20a6145a68d7dbf3e4ba0010fa7eeea87afa4d77297876614aebdc199a9da4b420083d16c28264dd3de22cd5add535914d9150c0efbeac1e113bd094222e55924f5e11ae2e4e3a99418fde8fb355438090f2b37d240238fe5a8f84e5456607e96a94254e12177ddc4399ec8dc6d26ec72e06f76c2b87ad2c42af894f689156c413e5b45015cd97cc02cf974f468"], 0xd13) 19:10:10 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_getres(0x0, &(0x7f0000000300)) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) [ 376.651433] attempt to access beyond end of device [ 376.656382] loop0: rw=536870912, want=114, limit=112 [ 376.661725] attempt to access beyond end of device [ 376.668183] loop0: rw=536870912, want=115, limit=112 [ 376.673402] attempt to access beyond end of device [ 376.678663] loop0: rw=536870912, want=116, limit=112 [ 376.684306] attempt to access beyond end of device [ 376.689259] loop0: rw=536870912, want=117, limit=112 19:10:11 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x101004, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000140)=""/246) 19:10:11 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000000), 0x0, 0x1f6) [ 376.700891] attempt to access beyond end of device [ 376.706026] loop0: rw=536870912, want=130, limit=112 [ 376.711170] attempt to access beyond end of device [ 376.716084] loop0: rw=536870912, want=131, limit=112 [ 376.721280] attempt to access beyond end of device [ 376.726219] loop0: rw=536870912, want=132, limit=112 [ 376.731542] attempt to access beyond end of device [ 376.737559] loop0: rw=536870912, want=133, limit=112 [ 376.748200] attempt to access beyond end of device [ 376.760604] loop0: rw=536870912, want=2189, limit=112 [ 376.780387] attempt to access beyond end of device [ 376.801414] loop0: rw=536870912, want=3477, limit=112 [ 376.817714] attempt to access beyond end of device [ 376.827228] loop0: rw=536870912, want=3478, limit=112 [ 376.832648] attempt to access beyond end of device [ 376.837676] loop0: rw=536870912, want=3479, limit=112 [ 376.842939] attempt to access beyond end of device [ 376.849563] loop0: rw=536870912, want=3480, limit=112 [ 376.855326] attempt to access beyond end of device [ 376.860581] loop0: rw=536870912, want=3481, limit=112 [ 376.866623] attempt to access beyond end of device [ 376.871644] loop0: rw=536870912, want=3510, limit=112 [ 376.877881] attempt to access beyond end of device [ 376.883030] loop0: rw=536870912, want=3511, limit=112 [ 376.890052] attempt to access beyond end of device [ 376.895699] loop0: rw=536870912, want=3512, limit=112 [ 376.900984] attempt to access beyond end of device [ 376.905933] loop0: rw=536870912, want=3513, limit=112 [ 376.911201] attempt to access beyond end of device [ 376.918389] loop0: rw=536870912, want=3534, limit=112 [ 376.924949] attempt to access beyond end of device [ 376.930011] loop0: rw=536870912, want=3535, limit=112 [ 376.935673] attempt to access beyond end of device [ 376.941302] loop0: rw=536870912, want=3536, limit=112 [ 376.946754] attempt to access beyond end of device [ 376.951731] loop0: rw=536870912, want=3537, limit=112 [ 376.957026] attempt to access beyond end of device [ 376.961957] loop0: rw=536870912, want=3570, limit=112 [ 376.967325] attempt to access beyond end of device [ 376.972282] loop0: rw=536870912, want=3571, limit=112 [ 376.977539] attempt to access beyond end of device [ 376.982832] loop0: rw=536870912, want=3572, limit=112 [ 376.988075] attempt to access beyond end of device [ 376.993051] loop0: rw=536870912, want=3573, limit=112 [ 376.998271] attempt to access beyond end of device [ 377.003219] loop0: rw=536870912, want=3586, limit=112 [ 377.008423] attempt to access beyond end of device [ 377.013405] loop0: rw=536870912, want=3587, limit=112 [ 377.018628] attempt to access beyond end of device [ 377.023570] loop0: rw=536870912, want=3588, limit=112 [ 377.028751] attempt to access beyond end of device [ 377.033684] loop0: rw=536870912, want=3589, limit=112 [ 377.038902] attempt to access beyond end of device [ 377.043857] loop0: rw=536870912, want=3598, limit=112 [ 377.049086] attempt to access beyond end of device [ 377.054070] loop0: rw=536870912, want=3599, limit=112 [ 377.059324] attempt to access beyond end of device [ 377.064307] loop0: rw=536870912, want=3600, limit=112 [ 377.069607] attempt to access beyond end of device [ 377.074796] loop0: rw=536870912, want=3601, limit=112 [ 377.080773] attempt to access beyond end of device [ 377.085757] loop0: rw=536870912, want=5649, limit=112 [ 377.092392] attempt to access beyond end of device [ 377.097425] loop0: rw=536870912, want=7697, limit=112 [ 377.112647] attempt to access beyond end of device [ 377.117642] loop0: rw=536870912, want=9745, limit=112 [ 377.124340] attempt to access beyond end of device [ 377.129307] loop0: rw=536870912, want=11793, limit=112 [ 377.135649] attempt to access beyond end of device [ 377.140609] loop0: rw=536870912, want=13841, limit=112 [ 377.146912] attempt to access beyond end of device [ 377.151860] loop0: rw=536870912, want=15889, limit=112 [ 377.158129] attempt to access beyond end of device [ 377.163076] loop0: rw=536870912, want=17937, limit=112 [ 377.169236] attempt to access beyond end of device [ 377.174179] loop0: rw=536870912, want=19985, limit=112 [ 377.180495] attempt to access beyond end of device [ 377.185586] loop0: rw=536870912, want=22033, limit=112 [ 377.191687] attempt to access beyond end of device [ 377.196653] loop0: rw=536870912, want=24081, limit=112 [ 377.202969] attempt to access beyond end of device [ 377.208019] loop0: rw=536870912, want=26129, limit=112 [ 377.214314] attempt to access beyond end of device [ 377.219282] loop0: rw=536870912, want=28177, limit=112 [ 377.225560] attempt to access beyond end of device [ 377.230514] loop0: rw=536870912, want=30225, limit=112 [ 377.236839] attempt to access beyond end of device [ 377.241778] loop0: rw=536870912, want=32273, limit=112 [ 377.247671] attempt to access beyond end of device [ 377.252618] loop0: rw=536870912, want=32985, limit=112 19:10:11 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:10:11 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x3, 0x86, 0x2}) modify_ldt$write(0x1, &(0x7f0000000340)={0x1f, 0x20000800, 0x6000, 0x0, 0x0, 0x5d0733b2, 0xffffffff, 0x1}, 0x10) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:10:11 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) 19:10:11 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000000), 0x0, 0x1f6) 19:10:11 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x0, 0x42, 0x1, 0x3cf, 0xdf, 0x0, 0x1, 0x1, 0x3, 0x0, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:10:11 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000380)=""/246) syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x80, 0x400000) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="80fd", 0xfd80}], 0x1, 0x0) fcntl$getown(r0, 0x9) 19:10:11 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x0, {0x0, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) 19:10:11 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000480)={@multicast1, @multicast1, 0x0}, &(0x7f00000004c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', r1}) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000000280)={0x4, 0x9, 0xffffffffffffff58, 0xffffffff}) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = gettid() write$FUSE_LK(r2, &(0x7f0000000880)={0x28, 0x0, 0x7, {{0x80000000, 0x20, 0x1, r3}}}, 0x28) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000600)={0x1, 0x8, 0x8, 'queue1\x00', 0xf9a}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f00000008c0)=""/63, &(0x7f0000000900)=0x3f) r6 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) sendfile(r4, r6, &(0x7f0000002780), 0x8000fffffffe) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000006c0), 0xfffffffffffffdac) write$binfmt_elf64(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x2cd) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f00000002c0)=""/20, 0x14}, 0x100) sync() getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000000940)=""/228, &(0x7f0000000740)=0xfffffffffffffd8b) ioctl$BLKPG(r6, 0x1269, &(0x7f0000000300)={0x9, 0x1, 0xa0, &(0x7f0000000380)="3a016cb6fa73e570008093e6c842a7e0290cb50da2b7aa74f63f8c9645da834be22458622fee46093ff148dfb54f28e0513ee8ea1bbbb0a4cd21006dd989b5be6e3dca9663bde7a8cef32fdda8c39b142a4a658e116c3e5196ba9a4ddd08fcb112f7e6ce1cd89ad696555a4825bf8500bc92d5d3d959be22be70fed863dac30ecfbc5a74aafa22f4dc9616d485fc41b2372bc8dddf5add0ba24d44376deed3a6"}) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000100), 0xfffffd07) sendto$inet(r0, &(0x7f0000000180)="cc649bcf1524328e07f973a7f3f1244b780f48386978c155e78d31e6ccde14a3", 0x20, 0x0, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) ioctl$FS_IOC_GETFSLABEL(r5, 0x81009431, &(0x7f0000000780)) write$binfmt_elf64(r0, &(0x7f00000017c0)=ANY=[@ANYBLOB="7f454c4600250000050000000000000003003e00060000002c010000000000004000000000000000e1000000000000000500000087003800020002000700ea000200007001000000ea0a000000000000f7ffffffffffffff00000000ffffffff00000000000000000100000001000000010000000000000001000070040000000500000000000000000000000000000005000000000000000100000001000000ff0f00000000000000fcfffffffffffff423273d395b5dfe49a633eb0eb0263328129db30c89d614ca312379424593d1149401363a977a2b10bc8394762bab422771360aa38dc889b26829f721e3098b0f80c2f4ee55bcf0df04911af0a6a16e0ab5b5bb1e2227df0cb7b403be567ea3b9adef738dd4b7efbd9e56dfc0dc488a064d4ad246d477bc8fedb6c1fbcdb1469e544a6ac9afa9987b94c8d1209a41a79416931a8f43bd761418a2c47221a2a4d6bee2592cd6eab8fa3ac582965b48d68fb1dde708c9901874b0f1628c0adf0dc15872d102a327e9f073a52942892de4cc87c25e76cde841dd1e09db3f59955450018b682981af9bf3133a11fbf7915b41105bd663e6f7116777b3cb43f260d25a06d22119ca7674f7d9eeb496cccae5ea73758600072b6f0c2a040000002001cb9377fbc132be60c8b0bf6ac0a892b355685d62cb7077a1e889c359d7bfc544111c6ca232e6c6593a0b8f085567b065536d649fea6d4e202254fc1a0dedba780af208b0457ed33958cfd97c0155f59b06d997423bb3b6f3d5e01c8b74030434cacb0e50dcc661aff03a72021b6011f6ff05f6070f0bcb7d75cbf1668562cd6599dcf1eac792c47370ac83b2730215d9955f6fa81f59d3209fbaf52f41f8c413432d976fe6eb3ae98661de6250e09bcf7b82d0492b349ca022abade27ee2d41aa83ba7d2ed5193dda7e9c78769b1430e5a171e12e0fa1d057e1aef4b856ab0f2dabc8b207f09d78e1f83461ccac0b2558732ea70d369973971d2c6d94081f33308b1e4b27a2ce6f45838809407045aa63b6219d82564c7323f73bfc2260fd95e5e8eeca550b29adcca477de69469764858d7aa3ab8afd99e883c43dacae12ac88e7fea5a99df90755e5caf59185794ed6419a22fe36d9070ed6558b090cb871914491e2a135047b729107896b784bf87c941f7b993033898b993c83b8bcec93aed20e900921e8c8e716321ad5664665e7f89839258d1477a2e8fceaa9280b9c9dc53b5ed4bd907c3942d8fac1eff961bf3040ae0faed3985bccc355506dfcd52907750828fc988e60aec5b577af9769cebc8d6e87a826826f8362c84fe7ec9e6d3cc39c1b6b6b9005eaaf0d9037fa576757018d3f60fbab576284cd7343e70a4b8143dc67e94c1090b7376eec330f5995c4b3a119646b4a953cf0669d6e52264827bbbae2c7565529a68f46f5e1a23137059867d0192caf6b22e2d74f8fbe12a139bc90a0d12b6acc0a106ba4fc2baf87c254bb540835206fc5f63dbc82581cec68813c331af00086cae971610587c4683d5f1b0dd68b8a419f581f0387cc9d1a435e329a0595d73a4489b1ea23c331ca752bfd46de13faee26e7e2e9b11dd7151883ac8112c0ba049070bcf00881cc0a37395f1a102cddda4b0b903b0233461e70254e6a75b9c29c02fce51b630d5cd58867e5f8e5b47fdb2fb53e0b9485f1079ddb39d7b3ef5d8d37be9a08714575e454274581a8ad758ba53da32d2c893e8a40de0febf31f84016558a9db7c53dec27895d69fa1a34e4b5b856f4d0974a9dd4031e28632a245b921a576f1a19f47d7ba08e9ca94a7ae46c89b379d90e0dfdcffb790586d920ea79f94af735aa51695dfe0c9c73a44b277e877b473b43f5c3a960d7c5e22678ab3f7cf46bdf23cbbd31df613827f8e23f7b2c71be25eab7dbd56f7b426b784583ec97db1659afc521a84e709cd879f8e5afe72366ffcd05c29b92ad591e35a19df805a2b89b9b87a13109c19ea941e9b9f6ee1c47708870abfda2debce7eae0f356bc896a5a207f6bc3ed4186117e1ae9b861d3a9a94520a6df99fd700c6fc3b82467a1257c2040dd34b2fb30c032224e6b864900f93168e387edaeeedaebf8b7b40d4caaa97c85229e63770ced3382013fd11010d0ee46333666aaec98aacc511c92be9e55eee400c74ab4614552624ad88f5d63b6f87e85826ee7cf6f15418f9712c6d07f36a54f097d9bc48b3035ae569af4753e7831dc520fe4726d0c96d0cb7b45e5ca5002884d38ed8e8ead8d4a7da76f9bcfd848fd27345bec7dd4356ef7b11a0cd3113bd9d9bd72597daf8e25b987b6a17329b9c581e7e647eddd060553fd6e9194bc07ffc5ca9eb6e9ce36aa545ac0f6e242e381282522481668f05909a69db9c8f417ce2406fb727c11fa8ed3ec6f097fed51414f3286075c414753979f58a70d97539c1215ad15f4f2bdc9cb27e00245bb2291f767d4c581387a63022c727026043c0180a848edd1c3fffff21c3fe0b11c65caca8941959536882277e3dc9e61da52527a24e2d79a497a80b33b24f1ca184d56ad13194867d7a0a424977b5f256a4643460a03007ccf2abb042c6a8f357e8c67298f4ee68fa10d82aeec9c63884f43927692db04bfa6651a630ff1e945d5c2ceb1552d0cd69830f257e5d2b500e4447f03edc78938d82871b7075be875dee546cd23ae617356f51fe8f1fb11417e63a436d7ca0ecd22fab3719ab5b4a4fa0ac2b6a44002fdddb61f7d6fe2beac291455b144cff1da4cb487c430a42cd6dee2b0752536175bdeb3abf2a393823dddf4567d7a6ac785662eb272ea9ea223e0d63a2d027fc3bfa6da9c1537a5c207c9f2495bd45ee28be938ad3dbdadee778875ba641ceb20f3fb23d57269a4e40e0baea56d0b4247f12ebb7cf6ee0e64b0d521c8636ca845287f752adfde004e37bee0451540bcabf455b43233e287e4ce36ebbf2cf0aa8325b72b90c40cc5bdf77f66b07bf5423a80409e1e95424e2d63c09e621354d87d29d28758c290f29746e00e72e1f6ee9fc93841a7a4ec7420c1d78c09f9355b41c5b6a2e94d84218428a4e4e40bcab84f0cdc9a230101146a11e1f36367b4b5f21e76b5e58c31aec27a47e7ce6c22d29c553f03d0515199b541750e92718c53542cb8c0e4202c89b5bc2a4e3cd4fd1e33ba846b2d2d1c94d2e73327b1d327fe80ff1113634e2e94769b97a1088c2f00001fd26ffbf3b4b82036e960a01efd1eecb0e4cff79c5943cb7f3390757f2ebaa20ac131cddf19065dad03237cca7406b5c30228494fe25d9d26631795f3b0a16ac6c8c27e37a75bce127c582beed29fe6137efe5ac28a2a89597db794c570055e318e92f17f36e3fcbc68c8233d2f0c433f9e11b2819ade8026682c9c966d13605ba9cfa66d91f8203260ed06d8c53912b2c25be01165ebda24e3b70c4fa4a99c56470ee400000092272d6ba4a0906d5b8df7039b82bf83378b78ce124aca8b7944fffdd65bfca51e33614282fb1738dd43c6b95f2bc5e9b24605ff3fb5a06ece40c2c4a86b93acdde534777d47c5196e7ef7d65ff45606324b402aa6b81afa463f63f96bc442cd25a033b7b6feed08de0f00bccb16c439813c6c4b1d1733bb55a6245a9180ec71a7f31631613c60af161f5ef64493b859a6c4baa9e3811250984db538169178a4f4cb4141f74e366a28b4fdeef59bb22f6f525c493912a044bd99a3b4b86b2834a4f837d58d4292a22a730b6a2e5ec7bf358c2016326fff4889d5d5e1beec898a3a88d0f4a450d86548a1a9b1cc1bee45e6a4e2c4e09cd69a51d46190755bd42c1e53d4a1f80010da651d6c500a066afa9c98755acf643ff381af66742c6e091746c77e0f14f2583d6d70339ed50e9da34a0aa8820359872132179f087f16cdaf3636688927e39a857a99f911d08406b6addefa9f895f3b29812234eaf4d5a93b9363fa02a4ee9fe8676811004fabc8121f7639e9f92c0d7f796a6355e984d7a85aadc6220847666f8f52c4571516eb1a9fc487e918956411823e1edef555a61ba7d45931457b221bdcc8aaad58e8007497a8846278e0aed68926d3ea9fd96a89ccc89627c86da315c3eb5445bf799df613befe958390660f6c9f7ac02e3187100f18ea3bfacf9662601fc9868329b3524cb8c07850726355bd748f7c51b32e6c4341676cef6af55351e599d196d38d63bf0cd20b85f4bc79a2895b9c5c4d46090b4e1a10394f8ba7201d45d3878dc9b3e7ec3510073424b92a7448f9d8d9c15fff2a1c0e6dde7e6ad83f6243b21c6c14bd1b36e834b9cdc2b09022c0ddad8b5cdedb4a9e401acd96b77825cf6cb459e0c70b310c4d6f7a192c6766e75b4b50e64680b8bbe41065eac33f24c280ae6d89ef5fad05d8a9b635b052176cc3a9c2c9ffd43c0530deafd29079147dd34b5cd866e7feffe95f76695a40c216729ab52614000000000000000000d15fb7a1e1e415271a355e2920683606f9fc1e55e2bf1b5047b16c3c90280c51294756e33654a32aef0ba77bda88c545e20a6145a68d7dbf3e4ba0010fa7eeea87afa4d77297876614aebdc199a9da4b420083d16c28264dd3de22cd5add535914d9150c0efbeac1e113bd094222e55924f5e11ae2e4e3a99418fde8fb355438090f2b37d240238fe5a8f84e5456607e96a94254e12177ddc4399ec8dc6d26ec72e06f76c2b87ad2c42af894f689156c413e5b45015cd97cc02cf974f468"], 0xd13) 19:10:11 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) 19:10:11 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) 19:10:11 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x3, 0x86, 0x2}) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:10:12 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x0, 0x42, 0x1, 0x3cf, 0xdf, 0x0, 0x1, 0x1, 0x3, 0x0, 0x5, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:10:12 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RREADDIR(r1, &(0x7f0000000600)={0x68, 0x29, 0x2, {0x20, [{{0x0, 0x2, 0x4}, 0x3, 0x100000001, 0x7, './file1'}, {{0x0, 0x1, 0x8}, 0x100, 0x3, 0x7, './file0'}, {{0x4}, 0x8, 0x0, 0x7, './file0'}]}}, 0x68) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="160000002f01000100000000000000bc9c121f86eb000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x1100000, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r2}}]}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) 19:10:12 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) preadv(r0, &(0x7f0000001580)=[{&(0x7f0000000040)=""/243, 0xf3}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000180)=""/114, 0x72}, {&(0x7f0000000200)=""/112, 0x70}, {&(0x7f0000001380)=""/234, 0xea}, {&(0x7f0000001480)=""/196, 0xc4}], 0x6, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) 19:10:12 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101009, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x8000, 0x1, 0xffffffff, 0x7}]}) [ 377.689543] attempt to access beyond end of device [ 377.698310] loop0: rw=536870912, want=130, limit=112 [ 377.718325] attempt to access beyond end of device [ 377.730806] loop0: rw=536870912, want=131, limit=112 19:10:12 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000380)=""/169, 0xa9}], 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000040)={'raw\x00'}, &(0x7f00000000c0)=0x54) setsockopt$inet6_int(r0, 0x29, 0x7e, &(0x7f0000000240)=0x8, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0xffffffffffffffe1, 0x4) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000180)={'filter\x00'}, &(0x7f0000000100)=0x78) shutdown(r0, 0x1) ioctl$TIOCSTI(r0, 0x5412, 0xffffffffffffff04) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000280)={0x1, 0xfff, 0x5, 0x0, 0x0, [{r0, 0x0, 0xffff}, {0xffffffffffffffff, 0x0, 0x7}, {r1}, {r0, 0x0, 0x1}, {r0, 0x0, 0x7}]}) [ 377.736530] attempt to access beyond end of device [ 377.745596] loop0: rw=536870912, want=132, limit=112 [ 377.751981] attempt to access beyond end of device [ 377.757662] loop0: rw=536870912, want=133, limit=112 [ 377.763123] attempt to access beyond end of device [ 377.768146] loop0: rw=536870912, want=142, limit=112 [ 377.773669] attempt to access beyond end of device [ 377.778655] loop0: rw=536870912, want=143, limit=112 [ 377.783844] attempt to access beyond end of device [ 377.797487] loop0: rw=536870912, want=144, limit=112 [ 377.821170] attempt to access beyond end of device [ 377.836347] loop0: rw=536870912, want=145, limit=112 [ 377.843467] attempt to access beyond end of device [ 377.848516] loop0: rw=536870912, want=2193, limit=112 [ 377.855713] attempt to access beyond end of device [ 377.861516] loop0: rw=536870912, want=4241, limit=112 [ 377.868634] attempt to access beyond end of device [ 377.873779] loop0: rw=536870912, want=4377, limit=112 [ 377.879027] attempt to access beyond end of device [ 377.883966] loop0: rw=536870912, want=4406, limit=112 [ 377.889230] attempt to access beyond end of device [ 377.894212] loop0: rw=536870912, want=4407, limit=112 [ 377.899443] attempt to access beyond end of device [ 377.904434] loop0: rw=536870912, want=4408, limit=112 [ 377.909642] attempt to access beyond end of device [ 377.914703] loop0: rw=536870912, want=4409, limit=112 [ 377.919928] attempt to access beyond end of device [ 377.930024] loop0: rw=536870912, want=4430, limit=112 [ 377.942960] attempt to access beyond end of device [ 377.947925] loop0: rw=536870912, want=4431, limit=112 [ 377.953146] attempt to access beyond end of device [ 377.958120] loop0: rw=536870912, want=4432, limit=112 [ 377.963377] attempt to access beyond end of device [ 377.968372] loop0: rw=536870912, want=4433, limit=112 [ 377.974002] attempt to access beyond end of device [ 377.978986] loop0: rw=536870912, want=4482, limit=112 [ 377.984301] attempt to access beyond end of device [ 377.989272] loop0: rw=536870912, want=4483, limit=112 [ 377.994544] attempt to access beyond end of device [ 377.999493] loop0: rw=536870912, want=4484, limit=112 [ 378.004759] attempt to access beyond end of device [ 378.009756] loop0: rw=536870912, want=4485, limit=112 [ 378.015022] attempt to access beyond end of device [ 378.019979] loop0: rw=536870912, want=4494, limit=112 [ 378.025240] attempt to access beyond end of device [ 378.030209] loop0: rw=536870912, want=4495, limit=112 [ 378.035466] attempt to access beyond end of device [ 378.040399] loop0: rw=536870912, want=4496, limit=112 [ 378.045811] attempt to access beyond end of device [ 378.050763] loop0: rw=536870912, want=4497, limit=112 [ 378.056682] attempt to access beyond end of device [ 378.061663] loop0: rw=536870912, want=6545, limit=112 [ 378.067887] attempt to access beyond end of device [ 378.073340] loop0: rw=536870912, want=8593, limit=112 [ 378.079551] attempt to access beyond end of device [ 378.084530] loop0: rw=536870912, want=10641, limit=112 [ 378.090651] attempt to access beyond end of device [ 378.095607] loop0: rw=536870912, want=12689, limit=112 [ 378.101799] attempt to access beyond end of device [ 378.106783] loop0: rw=536870912, want=14737, limit=112 [ 378.112977] attempt to access beyond end of device [ 378.117939] loop0: rw=536870912, want=16785, limit=112 [ 378.124161] attempt to access beyond end of device [ 378.129143] loop0: rw=536870912, want=18833, limit=112 [ 378.135475] attempt to access beyond end of device [ 378.140432] loop0: rw=536870912, want=20881, limit=112 [ 378.146546] attempt to access beyond end of device [ 378.151480] loop0: rw=536870912, want=22929, limit=112 [ 378.157936] attempt to access beyond end of device [ 378.162923] loop0: rw=536870912, want=24977, limit=112 [ 378.169038] attempt to access beyond end of device [ 378.173998] loop0: rw=536870912, want=27025, limit=112 [ 378.180187] attempt to access beyond end of device [ 378.185175] loop0: rw=536870912, want=29073, limit=112 [ 378.191380] attempt to access beyond end of device [ 378.196372] loop0: rw=536870912, want=31121, limit=112 [ 378.202531] attempt to access beyond end of device [ 378.207915] loop0: rw=536870912, want=32993, limit=112 19:10:12 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:10:12 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x3, 0x86, 0x2}) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:10:12 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x0, 0x42, 0x1, 0x3cf, 0xdf, 0x0, 0x1, 0x1, 0x3, 0x5, 0x0, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:10:12 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_names\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1000000006000000000000000000000001000000000000000500010001000000000000000000000000"], 0x29) 19:10:12 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) 19:10:12 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x109000, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000040)) pwritev(r0, &(0x7f0000000080), 0x0, 0x0) 19:10:12 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x40000, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="1d253afe182c77", @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r2, &(0x7f0000000600)={0xa0, 0x19, 0x1, {0x828, {0x1, 0x3, 0x7}, 0x91, r3, r4, 0x8e1, 0x80, 0x10001, 0xffff, 0xf2, 0x3, 0xe7, 0x8, 0xfd, 0x6, 0x7, 0x1ff, 0x100000000, 0x100000000, 0x5}}, 0xa0) ftruncate(r2, 0xb2b) 19:10:12 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x101000, 0x0) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000480)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/create\x00', 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x200) fcntl$setpipe(r0, 0x407, 0x9) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000440)) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000580)={0x0, @multicast1, @multicast2}, &(0x7f00000005c0)=0xc) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000300)=r4) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000180)={'security\x00'}, &(0x7f00000000c0)=0x54) socket$inet(0x2, 0x2, 0x0) set_tid_address(&(0x7f0000000540)) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000240), 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x9, 0x1, 0x100000000, 0x1ff}]}, 0x10) openat$cgroup_type(r1, &(0x7f00000003c0)='cgroup.type\x00', 0x2, 0x0) unshare(0x10000000) 19:10:12 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x3, 0x86, 0x2}) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:10:12 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000540)=0x6, 0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) bind$inet6(r0, &(0x7f0000000580)={0xa, 0x4e20, 0x10000, @loopback, 0x7}, 0x1c) syz_open_procfs(r1, &(0x7f0000000080)='net/icmp\x00') fcntl$getflags(r0, 0x3) readv(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/89, 0x59}, {&(0x7f0000000180)=""/192, 0xc0}, {&(0x7f0000000240)=""/30, 0x1e}, {&(0x7f0000000380)=""/182, 0xb6}, {&(0x7f0000000280)=""/15, 0xf}, {&(0x7f0000000440)=""/117, 0x75}], 0x6) 19:10:12 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) flistxattr(r0, &(0x7f0000000040)=""/204, 0xcc) 19:10:12 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x0, 0x42, 0x1, 0x3cf, 0xdf, 0x0, 0x1, 0x1, 0x3, 0x5, 0x0, 0x1, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) [ 378.604535] 9pnet: Insufficient options for proto=fd [ 378.610492] attempt to access beyond end of device [ 378.610498] loop0: rw=536870912, want=114, limit=112 [ 378.610511] attempt to access beyond end of device 19:10:12 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000180)={'broute\x00'}, &(0x7f0000000000)=0x78) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) 19:10:12 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) [ 378.610515] loop0: rw=536870912, want=115, limit=112 [ 378.610524] attempt to access beyond end of device [ 378.610528] loop0: rw=536870912, want=116, limit=112 19:10:13 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0x32d}], 0x1, 0x0) 19:10:13 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') ioctl$FICLONE(r0, 0x40049409, r0) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000040)) r1 = getpgrp(0xffffffffffffffff) fcntl$lock(r0, 0x6, &(0x7f0000000100)={0x0, 0x2, 0x8, 0x0, r1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x9, 0x7fffffff, 0x2, 0x2a61, 0x3f, 0x400, 0x2e4, 0x1f, 0xffffffffffffff2b, 0x9, 0x0, 0x1}) [ 378.610539] attempt to access beyond end of device [ 378.610543] loop0: rw=536870912, want=117, limit=112 [ 378.610556] attempt to access beyond end of device [ 378.610560] loop0: rw=536870912, want=130, limit=112 [ 378.610572] attempt to access beyond end of device [ 378.610576] loop0: rw=536870912, want=131, limit=112 [ 378.610586] attempt to access beyond end of device [ 378.610591] loop0: rw=536870912, want=132, limit=112 [ 378.610601] attempt to access beyond end of device [ 378.610605] loop0: rw=536870912, want=133, limit=112 [ 378.611747] attempt to access beyond end of device [ 378.611753] loop0: rw=536870912, want=2189, limit=112 [ 378.613103] attempt to access beyond end of device [ 378.613109] loop0: rw=536870912, want=4237, limit=112 [ 378.614284] attempt to access beyond end of device [ 378.614290] loop0: rw=536870912, want=5909, limit=112 [ 378.614611] attempt to access beyond end of device [ 378.614616] loop0: rw=536870912, want=5910, limit=112 [ 378.614628] attempt to access beyond end of device [ 378.614632] loop0: rw=536870912, want=5911, limit=112 [ 378.614643] attempt to access beyond end of device [ 378.614647] loop0: rw=536870912, want=5912, limit=112 [ 378.614658] attempt to access beyond end of device [ 378.614663] loop0: rw=536870912, want=5913, limit=112 [ 378.614673] attempt to access beyond end of device [ 378.614678] loop0: rw=536870912, want=5942, limit=112 [ 378.614688] attempt to access beyond end of device [ 378.614692] loop0: rw=536870912, want=5943, limit=112 [ 378.614702] attempt to access beyond end of device [ 378.614707] loop0: rw=536870912, want=5944, limit=112 [ 378.614717] attempt to access beyond end of device [ 378.614722] loop0: rw=536870912, want=5945, limit=112 [ 378.614737] attempt to access beyond end of device [ 378.614741] loop0: rw=536870912, want=5966, limit=112 [ 378.614751] attempt to access beyond end of device [ 378.614756] loop0: rw=536870912, want=5967, limit=112 [ 378.614766] attempt to access beyond end of device [ 378.614771] loop0: rw=536870912, want=5968, limit=112 [ 378.614781] attempt to access beyond end of device [ 378.614786] loop0: rw=536870912, want=5969, limit=112 [ 378.614796] attempt to access beyond end of device [ 378.614801] loop0: rw=536870912, want=6002, limit=112 [ 378.614812] attempt to access beyond end of device [ 378.614817] loop0: rw=536870912, want=6003, limit=112 [ 378.614826] attempt to access beyond end of device [ 378.614831] loop0: rw=536870912, want=6004, limit=112 [ 378.614841] attempt to access beyond end of device [ 378.614845] loop0: rw=536870912, want=6005, limit=112 [ 378.614860] attempt to access beyond end of device [ 378.614865] loop0: rw=536870912, want=6018, limit=112 [ 378.614875] attempt to access beyond end of device [ 378.614880] loop0: rw=536870912, want=6019, limit=112 [ 378.614889] attempt to access beyond end of device [ 378.614894] loop0: rw=536870912, want=6020, limit=112 [ 378.614905] attempt to access beyond end of device [ 378.614909] loop0: rw=536870912, want=6021, limit=112 [ 378.614919] attempt to access beyond end of device [ 378.614924] loop0: rw=536870912, want=6030, limit=112 [ 378.614934] attempt to access beyond end of device [ 378.614939] loop0: rw=536870912, want=6031, limit=112 [ 378.614949] attempt to access beyond end of device [ 378.614953] loop0: rw=536870912, want=6032, limit=112 [ 378.614963] attempt to access beyond end of device [ 378.614968] loop0: rw=536870912, want=6033, limit=112 [ 378.615926] attempt to access beyond end of device [ 378.615931] loop0: rw=536870912, want=8081, limit=112 [ 378.623773] attempt to access beyond end of device [ 378.623779] loop0: rw=536870912, want=10129, limit=112 [ 378.629843] attempt to access beyond end of device [ 378.629850] loop0: rw=536870912, want=12177, limit=112 [ 378.631690] attempt to access beyond end of device [ 378.631696] loop0: rw=536870912, want=14225, limit=112 [ 378.635228] attempt to access beyond end of device [ 378.635234] loop0: rw=536870912, want=16273, limit=112 [ 378.636778] attempt to access beyond end of device [ 378.636785] loop0: rw=536870912, want=18321, limit=112 [ 378.638207] attempt to access beyond end of device [ 378.638491] loop0: rw=536870912, want=20369, limit=112 [ 378.653611] attempt to access beyond end of device [ 378.653618] loop0: rw=536870912, want=22417, limit=112 [ 378.657199] attempt to access beyond end of device [ 378.657206] loop0: rw=536870912, want=24465, limit=112 [ 378.659084] attempt to access beyond end of device [ 378.659090] loop0: rw=536870912, want=26513, limit=112 [ 378.661150] attempt to access beyond end of device [ 378.661156] loop0: rw=536870912, want=28561, limit=112 [ 378.664793] attempt to access beyond end of device [ 378.664799] loop0: rw=536870912, want=30609, limit=112 [ 378.666265] attempt to access beyond end of device [ 378.666271] loop0: rw=536870912, want=32657, limit=112 [ 378.667188] attempt to access beyond end of device [ 378.667194] loop0: rw=536870912, want=32985, limit=112 [ 378.676291] IPVS: Creating netns size=2536 id=42 [ 379.009351] IPVS: Creating netns size=2536 id=43 [ 379.328712] 9pnet: Insufficient options for proto=fd 19:10:13 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:10:13 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:10:13 executing program 5: capset(&(0x7f0000001000)={0x19980330}, &(0x7f0000001040)) mknod(&(0x7f0000000040)='./bus\x00', 0xffe, 0x0) execve(&(0x7f0000000000)='./bus\x00', &(0x7f00000003c0), &(0x7f00000002c0)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x2000, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x8, 0xef000000000, 0x8001, 0xe7f, 0x6, 0x1, 0x0, 0x100, 0x7fff, 0x7, 0x90dd, 0x7}) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) 19:10:13 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x0, 0x42, 0x1, 0x3cf, 0xdf, 0x0, 0x1, 0x1, 0x3, 0x5, 0x5, 0x0, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:10:13 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/169, 0x260}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0xa, @tick=0x4, 0x20, {0x4, 0x7}, 0x3, 0x1, 0x1a}) exit(0x1e) umount2(&(0x7f0000000100)='./file0\x00', 0xa) 19:10:13 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) gettid() get_thread_area(&(0x7f0000000100)={0x7f6, 0x1000, 0xffffffffffffffff, 0xffff, 0x4, 0xff, 0x6920, 0x100000000, 0x2, 0x1cb}) 19:10:13 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000540)=[&(0x7f0000000280)='sed\x00', &(0x7f0000000380)='\x00', &(0x7f00000004c0)="cfb9d8eab8a3794f682f73656c69"], &(0x7f0000000240)) syz_read_part_table(0x0, 0x1, &(0x7f00000005c0)=[{&(0x7f0000001180), 0x0, 0xb308}]) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x200000, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000000)=r0) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000240)={0x7, 0x7f, 0x2}, 0x7) 19:10:13 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xfffffffffffffeaa, 0x4d, 0x80}, 0xfffffffffffffdba) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="090011d3b25d004e0def3d39733e989444959381c6641ecba6e1e9d680584831b8cb4acca4679aa19b533e2546556159f33f8b2dcf404ff4", @ANYRESHEX=r1, @ANYBLOB=',\x00']) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x101040, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000000380)) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) 19:10:13 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:10:13 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x0, 0x42, 0x1, 0x3cf, 0xdf, 0x0, 0x1, 0x1, 0x3, 0x5, 0x5, 0x0, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:10:13 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') sendfile(r0, r0, &(0x7f0000000080), 0x101) fsync(r0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x5}) ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f00000000c0)) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f00000000c0)=ANY=[]) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x200000, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f00000002c0)=0xfffffffffffffff9) creat(&(0x7f0000000280)='./file0\x00', 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x4cc, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f00000001c0)=ANY=[]) pkey_alloc(0x0, 0x2) fcntl$getflags(r0, 0x1) preadv(r3, &(0x7f0000000100), 0x316, 0x0) syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x1000, 0x441) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000040)=0x3) 19:10:13 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x2110020, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) [ 379.528344] 9pnet: Insufficient options for proto=fd [ 379.545056] attempt to access beyond end of device [ 379.553170] 9pnet: Insufficient options for proto=fd [ 379.561008] loop0: rw=536870912, want=130, limit=112 [ 379.566789] attempt to access beyond end of device [ 379.572111] loop0: rw=536870912, want=131, limit=112 19:10:13 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000000)={0x57, 0x0, 0x80, {0xff, 0x259}, {0x7ff, 0x2}, @const={0x6, {0x20, 0x7fff, 0x20, 0x2}}}) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) 19:10:13 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) [ 379.577619] attempt to access beyond end of device [ 379.583952] loop0: rw=536870912, want=132, limit=112 [ 379.589176] attempt to access beyond end of device [ 379.601245] loop0: rw=536870912, want=133, limit=112 [ 379.609029] attempt to access beyond end of device [ 379.614464] loop0: rw=536870912, want=142, limit=112 [ 379.619701] attempt to access beyond end of device 19:10:13 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x0, 0x42, 0x1, 0x3cf, 0xdf, 0x0, 0x1, 0x1, 0x3, 0x5, 0x5, 0x0, 0x54468f78, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) [ 379.624993] loop0: rw=536870912, want=143, limit=112 [ 379.631916] attempt to access beyond end of device [ 379.640173] loop0: rw=536870912, want=144, limit=112 [ 379.645413] attempt to access beyond end of device [ 379.650389] loop0: rw=536870912, want=145, limit=112 [ 379.657215] attempt to access beyond end of device 19:10:13 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000540)=[&(0x7f0000000280)='sed\x00', &(0x7f0000000380)='\x00', &(0x7f00000004c0)="cfb9d8eab8a3794f682f73656c69"], &(0x7f0000000240)) syz_read_part_table(0x0, 0x1, &(0x7f00000005c0)=[{&(0x7f0000001180), 0x0, 0xb308}]) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x200000, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000000)=r0) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000240)={0x7, 0x7f, 0x2}, 0x7) [ 379.681104] loop0: rw=536870912, want=2193, limit=112 [ 379.690579] attempt to access beyond end of device [ 379.695772] loop0: rw=536870912, want=4241, limit=112 [ 379.702112] attempt to access beyond end of device [ 379.707494] loop0: rw=536870912, want=5721, limit=112 [ 379.713409] attempt to access beyond end of device [ 379.736173] loop0: rw=536870912, want=5750, limit=112 [ 379.755604] attempt to access beyond end of device [ 379.772753] loop0: rw=536870912, want=5751, limit=112 [ 379.789772] attempt to access beyond end of device [ 379.794773] loop0: rw=536870912, want=5752, limit=112 [ 379.802714] attempt to access beyond end of device [ 379.809919] loop0: rw=536870912, want=5753, limit=112 [ 379.820093] attempt to access beyond end of device [ 379.829405] loop0: rw=536870912, want=5774, limit=112 [ 379.837764] attempt to access beyond end of device [ 379.843016] loop0: rw=536870912, want=5775, limit=112 [ 379.848427] attempt to access beyond end of device [ 379.853529] loop0: rw=536870912, want=5776, limit=112 [ 379.859021] attempt to access beyond end of device [ 379.864030] loop0: rw=536870912, want=5777, limit=112 [ 379.869327] attempt to access beyond end of device [ 379.874298] loop0: rw=536870912, want=5826, limit=112 [ 379.880241] attempt to access beyond end of device [ 379.885230] loop0: rw=536870912, want=5827, limit=112 [ 379.892287] attempt to access beyond end of device [ 379.900223] loop0: rw=536870912, want=5828, limit=112 [ 379.906488] attempt to access beyond end of device [ 379.911757] loop0: rw=536870912, want=5829, limit=112 [ 379.917020] attempt to access beyond end of device [ 379.922901] loop0: rw=536870912, want=5838, limit=112 [ 379.928229] attempt to access beyond end of device [ 379.933175] loop0: rw=536870912, want=5839, limit=112 [ 379.938405] attempt to access beyond end of device [ 379.943389] loop0: rw=536870912, want=5840, limit=112 [ 379.948668] attempt to access beyond end of device [ 379.953811] loop0: rw=536870912, want=5841, limit=112 [ 379.960164] attempt to access beyond end of device [ 379.965148] loop0: rw=536870912, want=7889, limit=112 [ 379.971556] attempt to access beyond end of device [ 379.976516] loop0: rw=536870912, want=9937, limit=112 [ 379.982620] attempt to access beyond end of device [ 379.987555] loop0: rw=536870912, want=11985, limit=112 [ 379.993783] attempt to access beyond end of device [ 379.998746] loop0: rw=536870912, want=14033, limit=112 [ 380.004999] attempt to access beyond end of device [ 380.009968] loop0: rw=536870912, want=16081, limit=112 [ 380.016054] attempt to access beyond end of device [ 380.021012] loop0: rw=536870912, want=18129, limit=112 [ 380.027355] attempt to access beyond end of device [ 380.032354] loop0: rw=536870912, want=20177, limit=112 [ 380.039077] attempt to access beyond end of device [ 380.044030] loop0: rw=536870912, want=22225, limit=112 [ 380.050223] attempt to access beyond end of device [ 380.055175] loop0: rw=536870912, want=24273, limit=112 [ 380.061368] attempt to access beyond end of device [ 380.066317] loop0: rw=536870912, want=26321, limit=112 [ 380.072614] attempt to access beyond end of device [ 380.077570] loop0: rw=536870912, want=28369, limit=112 [ 380.084011] attempt to access beyond end of device [ 380.089073] loop0: rw=536870912, want=30417, limit=112 [ 380.095718] attempt to access beyond end of device [ 380.100682] loop0: rw=536870912, want=32465, limit=112 [ 380.106526] attempt to access beyond end of device [ 380.111521] loop0: rw=536870912, want=32993, limit=112 19:10:14 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:10:14 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000180)=""/209) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) 19:10:14 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000300)='/dev/pktcdvd/control\x00', 0x20000, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000380)={{0x9, 0xb21}, 'port1\x00', 0x18, 0x800, 0x8000, 0x7, 0x81, 0x0, 0x8, 0x0, 0x4, 0x1}) mkdirat(r2, &(0x7f0000000440)='./file0\x00', 0x40) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) 19:10:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:10:14 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x0, 0x42, 0x1, 0x3cf, 0xdf, 0x0, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x0, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:10:14 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') getsockopt(r0, 0x80, 0x2, &(0x7f0000000040)=""/91, &(0x7f00000000c0)=0x5b) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) 19:10:14 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x108000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xd8, r1, 0x210, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffffffffff7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffffffffff9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x581}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffffffffffffff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x188f}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3ff}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xffffffffffffffe1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @broadcast}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc54f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfc}]}, 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x18, r2, 0x531, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x0) 19:10:14 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x8100, 0x0) 19:10:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:10:14 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r1 = openat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) 19:10:14 executing program 5: ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000080)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f0000000040)={0x8, 0x6}) 19:10:14 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000100), 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/icmp\x00') openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x800, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) 19:10:14 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x0, 0x42, 0x1, 0x3cf, 0xdf, 0x0, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x0, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:10:14 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0xd, 0x6f, 0x1, {0x1, [{0x0, 0x1}]}}, 0x16) r2 = dup2(r1, r1) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000700)={'mangle\x00', 0xab, "4c89f4025004c9b907bbdfe1ac2c8898a3ea201e131076de1309c7042f45b9cdca5ff09159c0fad3632995ce3842b80f0db7ce85cc0f194a6e9c80d7a2381bc7fe94609551721ed74d8e43f96646473d2011831b92473564ea0d1ffe8eaca287026eb4bf4b32edbce0c2a9b39bdb7558e0d3bfde0796cfd4b43643ae19c744bc0faa244b51168eb720549a35c6ae21f1d7dc72a743d6a7102c4a7e423991d8639bc6d3911947d3aa4be21c"}, &(0x7f0000000400)=0xcf) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000300)={0x7fff, 0x0, 0x2}, 0xc) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize'}}, {@cache_none='cache=none'}, {@nodevmap='nodevmap'}, {@version_L='version=9p2000.L'}, {@debug={'debug', 0x3d, 0x100000001}}, {@loose='loose'}, {@access_any='access=any'}, {@cache_none='cache=none'}, {@cachetag={'cachetag', 0x3d, 'trans=fd,'}}]}}) [ 380.543013] attempt to access beyond end of device [ 380.547978] loop0: rw=536870912, want=114, limit=112 [ 380.561954] attempt to access beyond end of device [ 380.578622] loop0: rw=536870912, want=115, limit=112 [ 380.584552] attempt to access beyond end of device [ 380.589719] loop0: rw=536870912, want=116, limit=112 [ 380.595371] attempt to access beyond end of device [ 380.600541] loop0: rw=536870912, want=117, limit=112 [ 380.606020] attempt to access beyond end of device [ 380.610995] loop0: rw=536870912, want=130, limit=112 [ 380.616229] attempt to access beyond end of device [ 380.621205] loop0: rw=536870912, want=131, limit=112 [ 380.626420] attempt to access beyond end of device [ 380.631398] loop0: rw=536870912, want=132, limit=112 [ 380.636747] attempt to access beyond end of device 19:10:14 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) r1 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000100)='#\x00', 0xfffffffffffffff8) r2 = add_key$user(&(0x7f00000011c0)='user\x00', &(0x7f0000001200)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000001240)="4c99c67bd4781d67db3dbee5b4666f0b33537e0e7af4074b798e694ca0863189acec6d0991b10c3ad831fa85ab4631e4757cb5d09b18d2b3e86963628d259c5829e03c416a9279895533cfef2b41bd9050a49cf9530e75dda2b21d330bf3eaa12a377d2c98f2ba068c46aa67e98b667c46251553f102e7d10ed7b203de135025c3fb97f3ddfadb21a680af76fbb42b059a5572a8ac1b7e03b1aebf1ecbe8a2158db50e64b2a8f9250575dd945a324a73c3e629c60acf92564e9346ea809db87cbd9073ab14763124048b247fd5c89d472aac8211d9e3baadf7cb48dd0dc6fa4e88bbdf14a9d1986d8a043aa7a35051f8e15bb0", 0xf3, 0xfffffffffffffff8) keyctl$instantiate_iov(0x14, r1, &(0x7f0000001180)=[{&(0x7f0000000180)="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", 0x1000}], 0x1, r2) 19:10:14 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) fcntl$getown(r0, 0x9) [ 380.647417] loop0: rw=536870912, want=133, limit=112 [ 380.670961] attempt to access beyond end of device [ 380.683926] loop0: rw=536870912, want=2189, limit=112 [ 380.714686] attempt to access beyond end of device [ 380.738386] loop0: rw=536870912, want=4237, limit=112 [ 380.773575] attempt to access beyond end of device [ 380.799602] loop0: rw=536870912, want=6229, limit=112 [ 380.818754] attempt to access beyond end of device [ 380.830854] loop0: rw=536870912, want=6230, limit=112 [ 380.839574] attempt to access beyond end of device [ 380.844652] loop0: rw=536870912, want=6231, limit=112 [ 380.850460] attempt to access beyond end of device [ 380.855560] loop0: rw=536870912, want=6232, limit=112 [ 380.861423] attempt to access beyond end of device [ 380.866431] loop0: rw=536870912, want=6233, limit=112 [ 380.884657] attempt to access beyond end of device [ 380.889735] loop0: rw=536870912, want=6262, limit=112 [ 380.894930] buffer_io_error: 138 callbacks suppressed [ 380.894936] Buffer I/O error on dev loop0, logical block 6261, lost async page write [ 380.908240] attempt to access beyond end of device [ 380.913217] loop0: rw=536870912, want=6263, limit=112 [ 380.918785] Buffer I/O error on dev loop0, logical block 6262, lost async page write [ 380.926922] attempt to access beyond end of device [ 380.931881] loop0: rw=536870912, want=6264, limit=112 [ 380.937088] Buffer I/O error on dev loop0, logical block 6263, lost async page write [ 380.945041] attempt to access beyond end of device [ 380.950025] loop0: rw=536870912, want=6265, limit=112 [ 380.955258] Buffer I/O error on dev loop0, logical block 6264, lost async page write [ 380.963756] attempt to access beyond end of device [ 380.968778] loop0: rw=536870912, want=6286, limit=112 [ 380.973981] Buffer I/O error on dev loop0, logical block 6285, lost async page write [ 380.982001] attempt to access beyond end of device [ 380.987430] loop0: rw=536870912, want=6287, limit=112 [ 380.992662] Buffer I/O error on dev loop0, logical block 6286, lost async page write [ 381.000615] attempt to access beyond end of device [ 381.005551] loop0: rw=536870912, want=6288, limit=112 [ 381.010788] Buffer I/O error on dev loop0, logical block 6287, lost async page write [ 381.018703] attempt to access beyond end of device [ 381.023641] loop0: rw=536870912, want=6289, limit=112 [ 381.028886] Buffer I/O error on dev loop0, logical block 6288, lost async page write [ 381.036966] attempt to access beyond end of device [ 381.041903] loop0: rw=536870912, want=6322, limit=112 [ 381.047138] Buffer I/O error on dev loop0, logical block 6321, lost async page write [ 381.055041] attempt to access beyond end of device [ 381.060016] loop0: rw=536870912, want=6323, limit=112 [ 381.065207] Buffer I/O error on dev loop0, logical block 6322, lost async page write [ 381.073123] attempt to access beyond end of device [ 381.078079] loop0: rw=536870912, want=6324, limit=112 [ 381.083284] attempt to access beyond end of device [ 381.088603] loop0: rw=536870912, want=6325, limit=112 [ 381.093814] attempt to access beyond end of device [ 381.099131] loop0: rw=536870912, want=6338, limit=112 [ 381.104340] attempt to access beyond end of device [ 381.109304] loop0: rw=536870912, want=6339, limit=112 [ 381.114510] attempt to access beyond end of device [ 381.119457] loop0: rw=536870912, want=6340, limit=112 [ 381.124660] attempt to access beyond end of device [ 381.129641] loop0: rw=536870912, want=6341, limit=112 [ 381.134936] attempt to access beyond end of device [ 381.139914] loop0: rw=536870912, want=6350, limit=112 [ 381.145115] attempt to access beyond end of device [ 381.150275] loop0: rw=536870912, want=6351, limit=112 [ 381.155479] attempt to access beyond end of device [ 381.160439] loop0: rw=536870912, want=6352, limit=112 [ 381.165646] attempt to access beyond end of device [ 381.170595] loop0: rw=536870912, want=6353, limit=112 [ 381.176538] attempt to access beyond end of device [ 381.181515] loop0: rw=536870912, want=8401, limit=112 [ 381.187744] attempt to access beyond end of device [ 381.192696] loop0: rw=536870912, want=10449, limit=112 [ 381.198962] attempt to access beyond end of device [ 381.203904] loop0: rw=536870912, want=12497, limit=112 [ 381.210265] attempt to access beyond end of device [ 381.215209] loop0: rw=536870912, want=14545, limit=112 [ 381.221810] attempt to access beyond end of device [ 381.226763] loop0: rw=536870912, want=16593, limit=112 [ 381.232980] attempt to access beyond end of device [ 381.237923] loop0: rw=536870912, want=18641, limit=112 [ 381.244052] attempt to access beyond end of device [ 381.248999] loop0: rw=536870912, want=20689, limit=112 [ 381.255162] attempt to access beyond end of device [ 381.260312] loop0: rw=536870912, want=22737, limit=112 [ 381.266443] attempt to access beyond end of device [ 381.271416] loop0: rw=536870912, want=24785, limit=112 [ 381.277823] attempt to access beyond end of device [ 381.282791] loop0: rw=536870912, want=26833, limit=112 [ 381.289127] attempt to access beyond end of device [ 381.294081] loop0: rw=536870912, want=28881, limit=112 [ 381.300275] attempt to access beyond end of device [ 381.305212] loop0: rw=536870912, want=30929, limit=112 [ 381.311423] attempt to access beyond end of device [ 381.316368] loop0: rw=536870912, want=32977, limit=112 [ 381.321939] attempt to access beyond end of device [ 381.326869] loop0: rw=536870912, want=32985, limit=112 19:10:15 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:10:15 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000000), 0x0, 0x0) 19:10:15 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000100), 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/icmp\x00') openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x800, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) 19:10:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x123040, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000000c0)={0x9, {{0xa, 0x4e21, 0xf2, @empty, 0x8}}, {{0xa, 0x4e20, 0x8, @ipv4={[], [], @broadcast}, 0x400}}}, 0x108) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000efd000)=0x62) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000fddfff)={0xffffffffffffffff, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000}) r3 = syz_open_pts(r0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r3) ioctl$TIOCSETD(r3, 0x5412, &(0x7f00000004c0)=0x631a) 19:10:15 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x0, 0x42, 0x1, 0x3cf, 0xdf, 0x0, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x0, 0x8, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:10:15 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) fadvise64(r0, 0x11, 0x5, 0x4) 19:10:15 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1, {0x0, {0x0, 0x0, 0x3}}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB='lwfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) 19:10:15 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) setns(r0, 0x20000000) 19:10:16 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)=0x0) ptrace$setregs(0xffffffffffffffff, r1, 0x80, &(0x7f0000000080)="0d4b4d88615e77ec9d8096217188aa310c6fd71d97998da46b2bf43802d7c03c2bd6dde2dc68e37300967333d1d8c8f581524b6af018de1f79aeac925f63d72aa1edb79a31298cf8a37f546def84cfa05926a273f6525197c68c9d83ac4a63c5190c628128f969309a97233e12033429ab4337f466196f26ee0682fa81d389969b82acb0a23e693149c88c9f31544e5187814811f4e8") 19:10:16 executing program 6: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:10:16 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/225}], 0x8468274, 0x7fffffffffffffc) 19:10:16 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x0, 0x42, 0x1, 0x3cf, 0xdf, 0x0, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x0, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:10:16 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:10:16 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff}, 0x4800) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000004080)='/selinux/status\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f00000040c0), 0x4) write$binfmt_elf64(r2, &(0x7f0000000940)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0xff, 0x5, 0xffff, 0x9, 0x3, 0x3f, 0x3ff, 0x34, 0x40, 0x23d, 0x81, 0x4, 0x38, 0x1, 0xfdcf, 0x7fff, 0x6}, [{0x3, 0x5, 0x2, 0x8000, 0x6, 0x100, 0x4, 0x6}], "96325761eb67fae1d7003d4b4545a6a1c371319920ab637f153ea1c8164ee5d221e5cfab38189beae2df0a59757c68a1bbddf8815ad439c0dc069504f97530ead89cef12927a5f13f65b3896a7c252d6641fd8ef1faa72881f2f1579547b6dcf7dd39215f3fb2297b52a44487a5e51aa8dd7b12a01d32d983529b56aa436cb082830db93ffc465a9df65b84a33f0c2a4f3ca15bafbd868993a211eb3b22f499560085d728fd10fa130b34615d2af230ff9dd572c482eb9e636852e86bbe0f2c9e477854e03239bed7ec337f99921808f343867d9daf15b66d21ba2248668874f2996fa3073f2f15fed0c5802c074a85ac1e87dc21490c8", [[], [], [], []]}, 0x56f) [ 381.746572] 9pnet: Insufficient options for proto=fd [ 381.763053] attempt to access beyond end of device [ 381.769314] loop0: rw=536870912, want=130, limit=112 [ 381.770188] 9pnet: Insufficient options for proto=fd [ 381.781245] attempt to access beyond end of device [ 381.786520] loop0: rw=536870912, want=131, limit=112 [ 381.791747] attempt to access beyond end of device 19:10:16 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) times(&(0x7f0000000000)) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) 19:10:16 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) setuid(r1) [ 381.796910] loop0: rw=536870912, want=132, limit=112 [ 381.806358] attempt to access beyond end of device [ 381.816930] loop0: rw=536870912, want=133, limit=112 [ 381.822083] attempt to access beyond end of device [ 381.835718] loop0: rw=536870912, want=142, limit=112 [ 381.873928] attempt to access beyond end of device [ 381.899849] loop0: rw=536870912, want=143, limit=112 [ 381.928986] attempt to access beyond end of device [ 381.948602] loop0: rw=536870912, want=144, limit=112 [ 381.959256] attempt to access beyond end of device [ 381.966099] loop0: rw=536870912, want=145, limit=112 [ 381.981554] attempt to access beyond end of device [ 381.996490] loop0: rw=536870912, want=2193, limit=112 [ 382.004208] attempt to access beyond end of device [ 382.010111] loop0: rw=536870912, want=4241, limit=112 [ 382.018010] attempt to access beyond end of device [ 382.023043] loop0: rw=536870912, want=5593, limit=112 [ 382.028906] attempt to access beyond end of device [ 382.034079] loop0: rw=536870912, want=5622, limit=112 [ 382.042091] attempt to access beyond end of device [ 382.047216] loop0: rw=536870912, want=5623, limit=112 [ 382.052643] attempt to access beyond end of device [ 382.057882] loop0: rw=536870912, want=5624, limit=112 [ 382.063809] attempt to access beyond end of device [ 382.069056] loop0: rw=536870912, want=5625, limit=112 [ 382.074355] attempt to access beyond end of device [ 382.080474] loop0: rw=536870912, want=5646, limit=112 [ 382.086040] attempt to access beyond end of device [ 382.091071] loop0: rw=536870912, want=5647, limit=112 [ 382.098821] attempt to access beyond end of device [ 382.106558] loop0: rw=536870912, want=5648, limit=112 [ 382.114600] attempt to access beyond end of device [ 382.119915] loop0: rw=536870912, want=5649, limit=112 [ 382.125303] attempt to access beyond end of device [ 382.130486] loop0: rw=536870912, want=5698, limit=112 [ 382.136913] attempt to access beyond end of device [ 382.142102] loop0: rw=536870912, want=5699, limit=112 [ 382.147961] attempt to access beyond end of device [ 382.153187] loop0: rw=536870912, want=5700, limit=112 [ 382.158622] attempt to access beyond end of device [ 382.163726] loop0: rw=536870912, want=5701, limit=112 [ 382.169098] attempt to access beyond end of device [ 382.174301] loop0: rw=536870912, want=5710, limit=112 [ 382.179786] attempt to access beyond end of device [ 382.184923] loop0: rw=536870912, want=5711, limit=112 [ 382.190491] attempt to access beyond end of device [ 382.195600] loop0: rw=536870912, want=5712, limit=112 [ 382.201078] attempt to access beyond end of device [ 382.206170] loop0: rw=536870912, want=5713, limit=112 [ 382.213133] attempt to access beyond end of device [ 382.218357] loop0: rw=536870912, want=7761, limit=112 [ 382.225621] attempt to access beyond end of device [ 382.230730] loop0: rw=536870912, want=9809, limit=112 [ 382.238403] attempt to access beyond end of device [ 382.243517] loop0: rw=536870912, want=11857, limit=112 [ 382.250820] attempt to access beyond end of device [ 382.256935] loop0: rw=536870912, want=13905, limit=112 [ 382.264039] attempt to access beyond end of device [ 382.269222] loop0: rw=536870912, want=15953, limit=112 [ 382.276193] attempt to access beyond end of device [ 382.281232] loop0: rw=536870912, want=18001, limit=112 [ 382.287799] attempt to access beyond end of device [ 382.292755] loop0: rw=536870912, want=20049, limit=112 [ 382.298949] attempt to access beyond end of device [ 382.303891] loop0: rw=536870912, want=22097, limit=112 [ 382.310262] attempt to access beyond end of device [ 382.315207] loop0: rw=536870912, want=24145, limit=112 [ 382.321540] attempt to access beyond end of device [ 382.326480] loop0: rw=536870912, want=26193, limit=112 [ 382.332813] attempt to access beyond end of device [ 382.337729] attempt to access beyond end of device [ 382.337735] loop6: rw=536870912, want=114, limit=112 [ 382.337756] attempt to access beyond end of device [ 382.337760] loop6: rw=536870912, want=115, limit=112 [ 382.337771] attempt to access beyond end of device [ 382.337775] loop6: rw=536870912, want=116, limit=112 [ 382.337786] attempt to access beyond end of device [ 382.337791] loop6: rw=536870912, want=117, limit=112 [ 382.337800] attempt to access beyond end of device [ 382.337805] loop6: rw=536870912, want=130, limit=112 [ 382.337814] attempt to access beyond end of device [ 382.337818] loop6: rw=536870912, want=131, limit=112 [ 382.337827] attempt to access beyond end of device [ 382.337831] loop6: rw=536870912, want=132, limit=112 [ 382.337840] attempt to access beyond end of device [ 382.337844] loop6: rw=536870912, want=133, limit=112 [ 382.338429] attempt to access beyond end of device [ 382.338433] loop6: rw=536870912, want=1429, limit=112 [ 382.338656] attempt to access beyond end of device [ 382.338661] loop6: rw=536870912, want=1430, limit=112 [ 382.338672] attempt to access beyond end of device [ 382.338676] loop6: rw=536870912, want=1431, limit=112 [ 382.338686] attempt to access beyond end of device [ 382.338690] loop6: rw=536870912, want=1432, limit=112 [ 382.338699] attempt to access beyond end of device [ 382.338703] loop6: rw=536870912, want=1433, limit=112 [ 382.338712] attempt to access beyond end of device [ 382.338716] loop6: rw=536870912, want=1462, limit=112 [ 382.338725] attempt to access beyond end of device [ 382.338730] loop6: rw=536870912, want=1463, limit=112 [ 382.338739] attempt to access beyond end of device [ 382.338762] loop6: rw=536870912, want=1464, limit=112 [ 382.338771] attempt to access beyond end of device [ 382.338775] loop6: rw=536870912, want=1465, limit=112 [ 382.338789] attempt to access beyond end of device [ 382.338793] loop6: rw=536870912, want=1486, limit=112 [ 382.338803] attempt to access beyond end of device [ 382.338807] loop6: rw=536870912, want=1487, limit=112 [ 382.338816] attempt to access beyond end of device [ 382.338820] loop6: rw=536870912, want=1488, limit=112 [ 382.338831] attempt to access beyond end of device [ 382.338835] loop6: rw=536870912, want=1489, limit=112 [ 382.338845] attempt to access beyond end of device [ 382.338849] loop6: rw=536870912, want=1522, limit=112 [ 382.338858] attempt to access beyond end of device [ 382.338862] loop6: rw=536870912, want=1523, limit=112 [ 382.338871] attempt to access beyond end of device [ 382.338875] loop6: rw=536870912, want=1524, limit=112 [ 382.338885] attempt to access beyond end of device [ 382.338889] loop6: rw=536870912, want=1525, limit=112 [ 382.338903] attempt to access beyond end of device [ 382.338907] loop6: rw=536870912, want=1538, limit=112 [ 382.338916] attempt to access beyond end of device [ 382.338921] loop6: rw=536870912, want=1539, limit=112 [ 382.338930] attempt to access beyond end of device [ 382.338934] loop6: rw=536870912, want=1540, limit=112 [ 382.338943] attempt to access beyond end of device [ 382.338947] loop6: rw=536870912, want=1541, limit=112 [ 382.338956] attempt to access beyond end of device [ 382.338960] loop6: rw=536870912, want=1550, limit=112 [ 382.338971] attempt to access beyond end of device [ 382.338975] loop6: rw=536870912, want=1551, limit=112 [ 382.338985] attempt to access beyond end of device [ 382.338989] loop6: rw=536870912, want=1552, limit=112 [ 382.338998] attempt to access beyond end of device [ 382.339002] loop6: rw=536870912, want=1553, limit=112 [ 382.339963] attempt to access beyond end of device [ 382.339968] loop6: rw=536870912, want=3601, limit=112 [ 382.341203] attempt to access beyond end of device [ 382.341207] loop6: rw=536870912, want=5649, limit=112 [ 382.342421] attempt to access beyond end of device [ 382.342425] loop6: rw=536870912, want=7697, limit=112 [ 382.343916] attempt to access beyond end of device [ 382.343922] loop6: rw=536870912, want=9745, limit=112 [ 382.345297] attempt to access beyond end of device [ 382.345302] loop6: rw=536870912, want=11793, limit=112 [ 382.346527] attempt to access beyond end of device [ 382.346532] loop6: rw=536870912, want=13841, limit=112 [ 382.347845] attempt to access beyond end of device [ 382.347851] loop6: rw=536870912, want=15889, limit=112 [ 382.349247] attempt to access beyond end of device [ 382.349253] loop6: rw=536870912, want=17937, limit=112 [ 382.350469] attempt to access beyond end of device [ 382.350473] loop6: rw=536870912, want=19985, limit=112 [ 382.351686] attempt to access beyond end of device [ 382.351690] loop6: rw=536870912, want=22033, limit=112 [ 382.353405] attempt to access beyond end of device [ 382.353410] loop6: rw=536870912, want=24081, limit=112 [ 382.354641] attempt to access beyond end of device [ 382.354645] loop6: rw=536870912, want=26129, limit=112 [ 382.355863] attempt to access beyond end of device [ 382.355867] loop6: rw=536870912, want=28177, limit=112 [ 382.357074] attempt to access beyond end of device [ 382.357078] loop6: rw=536870912, want=30225, limit=112 [ 382.358482] attempt to access beyond end of device [ 382.358487] loop6: rw=536870912, want=32273, limit=112 [ 382.359271] attempt to access beyond end of device [ 382.359276] loop6: rw=536870912, want=32985, limit=112 [ 382.833571] loop0: rw=536870912, want=28241, limit=112 [ 382.839635] attempt to access beyond end of device [ 382.844573] loop0: rw=536870912, want=30289, limit=112 [ 382.850917] attempt to access beyond end of device [ 382.855884] loop0: rw=536870912, want=32337, limit=112 [ 382.861687] attempt to access beyond end of device [ 382.866621] loop0: rw=536870912, want=32993, limit=112 19:10:17 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:10:17 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000140)='net/tcp6\x00') socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000040)) preadv(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) 19:10:17 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:10:17 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x0, 0x42, 0x1, 0x3cf, 0xdf, 0x0, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x0, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:10:17 executing program 2: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) r1 = syz_open_procfs(r0, &(0x7f00000000c0)="6e65742f74963958b126ad6b63703600") fsetxattr(r1, &(0x7f0000000080)=@known='security.ima\x00', &(0x7f0000000100)='posix_acl_access\x00', 0x11, 0x3) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) 19:10:17 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0xb, 0x29, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) 19:10:17 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x9, 0x5) 19:10:17 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) fcntl$getown(r0, 0x9) 19:10:17 executing program 2: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f00000001c0)) r1 = fcntl$getown(0xffffffffffffff9c, 0x9) r2 = syz_open_procfs(r1, &(0x7f0000000040)='net/ipv6_route\x00') ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f0000000100)=""/33) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) 19:10:17 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:10:17 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x0, 0x42, 0x1, 0x3cf, 0xdf, 0x0, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x0, 0x10001, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:10:17 executing program 6: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:10:17 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x91) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) [ 383.265660] attempt to access beyond end of device [ 383.270758] loop0: rw=536870912, want=130, limit=112 [ 383.282150] attempt to access beyond end of device [ 383.289324] loop0: rw=536870912, want=131, limit=112 [ 383.305030] attempt to access beyond end of device 19:10:17 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x101409, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2, 0x10, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)='devtmpfs\x00', 0x0, &(0x7f0000000cc0)) sendto(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, &(0x7f0000006d40)=@can, 0x80) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000100)=""/186, 0x4a9e280) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000000)={{0x73, @multicast2, 0x4e21, 0x0, 'lc\x00', 0x16, 0x6, 0x7f}, {@loopback, 0x4e23, 0x3, 0x4, 0x8}}, 0x44) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) 19:10:17 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/rt6_stats\x00') ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x6, 0x3, 0xe1a, 0x9, 0x4}) openat$selinux_create(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/create\x00', 0x2, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) [ 383.313616] loop0: rw=536870912, want=132, limit=112 [ 383.319115] attempt to access beyond end of device [ 383.326942] loop0: rw=536870912, want=133, limit=112 [ 383.332172] attempt to access beyond end of device [ 383.337259] loop0: rw=536870912, want=142, limit=112 [ 383.342436] attempt to access beyond end of device [ 383.347655] loop0: rw=536870912, want=143, limit=112 [ 383.352794] attempt to access beyond end of device [ 383.357791] loop0: rw=536870912, want=144, limit=112 19:10:17 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000016c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001680)={&(0x7f0000000300)=@updpolicy={0x13c, 0x19, 0xa07, 0x0, 0x0, {{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@tmpl={0x84, 0x5, [{{@in6, 0x0, 0x2b}, 0xa, @in6=@mcast2, 0x0, 0x2}, {{@in6, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x4}]}]}, 0x13c}}, 0xfffffffffffffeff) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x800, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb8, r2, 0x411, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6d}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x33}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3d}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x67}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x33}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) [ 383.362920] attempt to access beyond end of device [ 383.367886] loop0: rw=536870912, want=145, limit=112 [ 383.375291] attempt to access beyond end of device [ 383.380763] loop0: rw=536870912, want=2193, limit=112 [ 383.388176] attempt to access beyond end of device [ 383.393242] loop0: rw=536870912, want=4241, limit=112 [ 383.416040] attempt to access beyond end of device [ 383.427921] loop0: rw=536870912, want=5593, limit=112 [ 383.444990] attempt to access beyond end of device [ 383.475155] loop0: rw=536870912, want=5622, limit=112 [ 383.493248] attempt to access beyond end of device [ 383.495896] tmpfs: No value for mount option '‰' [ 383.510237] loop0: rw=536870912, want=5623, limit=112 [ 383.515499] attempt to access beyond end of device [ 383.520716] loop0: rw=536870912, want=5624, limit=112 [ 383.526033] attempt to access beyond end of device [ 383.531057] loop0: rw=536870912, want=5625, limit=112 [ 383.536650] attempt to access beyond end of device [ 383.541934] loop0: rw=536870912, want=5646, limit=112 [ 383.548662] attempt to access beyond end of device [ 383.553648] loop0: rw=536870912, want=5647, limit=112 [ 383.558944] attempt to access beyond end of device [ 383.563923] loop0: rw=536870912, want=5648, limit=112 [ 383.573249] attempt to access beyond end of device [ 383.578331] loop0: rw=536870912, want=5649, limit=112 [ 383.584554] attempt to access beyond end of device [ 383.589558] loop0: rw=536870912, want=5698, limit=112 [ 383.594993] attempt to access beyond end of device [ 383.600251] loop0: rw=536870912, want=5699, limit=112 [ 383.605444] attempt to access beyond end of device [ 383.610449] loop0: rw=536870912, want=5700, limit=112 [ 383.615686] attempt to access beyond end of device [ 383.620875] loop0: rw=536870912, want=5701, limit=112 [ 383.626164] attempt to access beyond end of device [ 383.631169] loop0: rw=536870912, want=5710, limit=112 [ 383.636410] attempt to access beyond end of device [ 383.641766] loop0: rw=536870912, want=5711, limit=112 [ 383.647056] attempt to access beyond end of device [ 383.652248] loop0: rw=536870912, want=5712, limit=112 [ 383.657486] attempt to access beyond end of device [ 383.662599] loop0: rw=536870912, want=5713, limit=112 [ 383.669018] attempt to access beyond end of device [ 383.673978] loop0: rw=536870912, want=7761, limit=112 [ 383.681045] attempt to access beyond end of device [ 383.686024] loop0: rw=536870912, want=9809, limit=112 [ 383.701225] attempt to access beyond end of device [ 383.708719] loop0: rw=536870912, want=11857, limit=112 [ 383.716023] attempt to access beyond end of device [ 383.721249] loop0: rw=536870912, want=13905, limit=112 [ 383.728122] attempt to access beyond end of device [ 383.733423] loop0: rw=536870912, want=15953, limit=112 [ 383.740065] attempt to access beyond end of device [ 383.745039] loop0: rw=536870912, want=18001, limit=112 [ 383.752097] attempt to access beyond end of device [ 383.757184] loop0: rw=536870912, want=20049, limit=112 [ 383.764334] attempt to access beyond end of device [ 383.769421] loop0: rw=536870912, want=22097, limit=112 [ 383.776312] attempt to access beyond end of device [ 383.781429] loop0: rw=536870912, want=24145, limit=112 [ 383.788490] attempt to access beyond end of device [ 383.793630] loop0: rw=536870912, want=26193, limit=112 [ 383.800454] attempt to access beyond end of device [ 383.805432] loop0: rw=536870912, want=28241, limit=112 [ 383.812487] attempt to access beyond end of device [ 383.817567] loop0: rw=536870912, want=30289, limit=112 [ 383.824650] attempt to access beyond end of device [ 383.829756] loop0: rw=536870912, want=32337, limit=112 [ 383.835887] attempt to access beyond end of device [ 383.840875] loop0: rw=536870912, want=32993, limit=112 [ 383.900610] attempt to access beyond end of device [ 383.905543] loop6: rw=536870912, want=130, limit=112 [ 383.910727] attempt to access beyond end of device [ 383.915684] loop6: rw=536870912, want=131, limit=112 [ 383.920913] attempt to access beyond end of device [ 383.925894] loop6: rw=536870912, want=132, limit=112 [ 383.931133] attempt to access beyond end of device [ 383.936177] loop6: rw=536870912, want=133, limit=112 [ 383.941353] attempt to access beyond end of device [ 383.946317] loop6: rw=536870912, want=142, limit=112 [ 383.951581] attempt to access beyond end of device [ 383.957659] loop6: rw=536870912, want=143, limit=112 [ 383.962830] attempt to access beyond end of device [ 383.967814] loop6: rw=536870912, want=144, limit=112 [ 383.973070] attempt to access beyond end of device [ 383.978162] loop6: rw=536870912, want=145, limit=112 [ 383.983858] attempt to access beyond end of device [ 383.988825] loop6: rw=536870912, want=1305, limit=112 [ 383.994235] attempt to access beyond end of device [ 383.999177] loop6: rw=536870912, want=1334, limit=112 [ 384.004561] attempt to access beyond end of device [ 384.009521] loop6: rw=536870912, want=1335, limit=112 [ 384.014783] attempt to access beyond end of device [ 384.019733] loop6: rw=536870912, want=1336, limit=112 [ 384.025032] attempt to access beyond end of device [ 384.029980] loop6: rw=536870912, want=1337, limit=112 [ 384.035219] attempt to access beyond end of device [ 384.040196] loop6: rw=536870912, want=1358, limit=112 [ 384.045447] attempt to access beyond end of device [ 384.050402] loop6: rw=536870912, want=1359, limit=112 [ 384.055665] attempt to access beyond end of device [ 384.060640] loop6: rw=536870912, want=1360, limit=112 [ 384.065888] attempt to access beyond end of device [ 384.070832] loop6: rw=536870912, want=1361, limit=112 [ 384.076088] attempt to access beyond end of device [ 384.081070] loop6: rw=536870912, want=1410, limit=112 [ 384.086329] attempt to access beyond end of device [ 384.091384] loop6: rw=536870912, want=1411, limit=112 [ 384.096787] attempt to access beyond end of device [ 384.101748] loop6: rw=536870912, want=1412, limit=112 [ 384.107019] attempt to access beyond end of device [ 384.112045] loop6: rw=536870912, want=1413, limit=112 [ 384.117242] attempt to access beyond end of device [ 384.122230] loop6: rw=536870912, want=1422, limit=112 [ 384.127441] attempt to access beyond end of device [ 384.132428] loop6: rw=536870912, want=1423, limit=112 [ 384.137658] attempt to access beyond end of device [ 384.142721] loop6: rw=536870912, want=1424, limit=112 [ 384.147975] attempt to access beyond end of device [ 384.153046] loop6: rw=536870912, want=1425, limit=112 [ 384.159486] attempt to access beyond end of device [ 384.164502] loop6: rw=536870912, want=3473, limit=112 [ 384.171230] attempt to access beyond end of device [ 384.176212] loop6: rw=536870912, want=5521, limit=112 [ 384.191690] attempt to access beyond end of device [ 384.198658] loop6: rw=536870912, want=7569, limit=112 [ 384.206885] attempt to access beyond end of device [ 384.211844] loop6: rw=536870912, want=9617, limit=112 [ 384.218528] attempt to access beyond end of device [ 384.223534] loop6: rw=536870912, want=11665, limit=112 [ 384.230261] attempt to access beyond end of device [ 384.235294] loop6: rw=536870912, want=13713, limit=112 [ 384.242171] attempt to access beyond end of device [ 384.247234] loop6: rw=536870912, want=15761, limit=112 [ 384.253910] attempt to access beyond end of device [ 384.258881] loop6: rw=536870912, want=17809, limit=112 [ 384.265544] attempt to access beyond end of device [ 384.270525] loop6: rw=536870912, want=19857, limit=112 [ 384.277357] attempt to access beyond end of device [ 384.282332] loop6: rw=536870912, want=21905, limit=112 [ 384.289143] attempt to access beyond end of device [ 384.294197] loop6: rw=536870912, want=23953, limit=112 [ 384.301070] attempt to access beyond end of device [ 384.306059] loop6: rw=536870912, want=26001, limit=112 [ 384.312786] attempt to access beyond end of device [ 384.318007] loop6: rw=536870912, want=28049, limit=112 [ 384.324830] attempt to access beyond end of device [ 384.329910] loop6: rw=536870912, want=30097, limit=112 [ 384.336925] attempt to access beyond end of device [ 384.341914] loop6: rw=536870912, want=32145, limit=112 19:10:18 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:10:18 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='n^t/tcp6\x00') read$eventfd(r0, &(0x7f0000000040), 0x8) futex(&(0x7f0000000080)=0x1, 0x4, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000380)={{0x3e, @local, 0x4e24, 0x0, 'wrr\x00', 0x10, 0x3, 0x50}, {@multicast1, 0x4e21, 0x6, 0x80, 0x7fffffff, 0xffffffff}}, 0x44) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x400300, 0x0) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000180)) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) 19:10:18 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x0, 0x42, 0x1, 0x3cf, 0xdf, 0x0, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x0, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:10:18 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'veth0\x00', 0x1}) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) 19:10:18 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="cb", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x1a4) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000003c0)=0x0) sendmsg$nl_netfilter(r2, &(0x7f00000004c0)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x5, 0xe, 0x100, 0x70bd2d, 0x25dfdbff, {0x5, 0x0, 0x8}, [@typed={0x8, 0x15, @pid=r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 19:10:18 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) ioctl$KDDISABIO(r0, 0x4b37) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="2321202e2f627573206367726f7570757365725b5b70726f63656d3076626f786e657431657468302d40776c616e31200000616e3000207663616e300020a020207663616e30000ad96e7dd51040c7ddce6b88b25e672b507e8161056db69c6f1cce1c5b4a0d9482b4b533ef6a8a5da9e5959f914108e1019ad89ee9a52833b744d200eb384d9a35548e5c1f5af2ef96f1a7180782d398b9e9c1c1d60100000083ecbc10ba23718ca51f6309b482b10000000000000000000000000000"], 0xbd) fallocate(r0, 0x1, 0x0, 0x10000101) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={@empty, 0x71, r1}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000040)={0x6, 0xffff, 0x7}, 0xc) socket$inet_udp(0x2, 0x2, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/load\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.events\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') getpeername$unix(r0, &(0x7f0000000380)=@abs, &(0x7f0000000400)=0x6e) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f00000002c0)={'dummy0\x00', 0xed4}) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="e8156663"], 0x1}}, 0x0) 19:10:18 executing program 3: r0 = accept(0xffffffffffffff9c, 0x0, &(0x7f0000000000)) ioctl(r0, 0x1, &(0x7f0000000180)="6d80d1d3501534834e47496911e2f04c33c5b813441bc2cc3a420034f006ac4434ddcad714435500cedf891c82b05d202561e78b14e012f94842a232953a91b3f2747c6ad49f720c98c9ccfba541dddc7839cb7fe4e4e925873eef18225dd030dac140d77bac8c3d") r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$void(r0, 0xc004587f) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) 19:10:18 executing program 6: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe440, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0xff6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x400000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000016) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x401, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000140)={0x9, {{0xa, 0x4e21, 0x8, @mcast2, 0x5}}, {{0xa, 0x4e22, 0x200, @loopback, 0xb982}}}, 0x108) 19:10:18 executing program 5: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x1, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = syz_open_procfs(r0, &(0x7f0000000080)='net/tcp6\x00') fsync(r2) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/169, 0x6fd}], 0x1, 0xffffffffffffffff) lseek(r2, 0x0, 0x3) 19:10:18 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r1 = getpid() getpeername$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, &(0x7f0000000080)=0x1c) fcntl$setown(r0, 0x8, r1) rt_sigaction(0x20, &(0x7f00000000c0)={0x4, {0xf499}, 0x4}, &(0x7f0000000100), 0x8, &(0x7f0000000180)) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={0x9, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e21, @rand_addr=0x5}, 0x8, 0x101, 0x3, 0xfffffffffffffffc, 0x535, &(0x7f00000001c0)='veth0\x00', 0x2, 0x200, 0x100000000}) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) 19:10:18 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000180)=""/160) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) write$binfmt_elf32(r0, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x7ff, 0x1, 0x5, 0x20, 0x0, 0x2, 0x3e, 0x0, 0x6f, 0x38, 0x1b5, 0xcc13, 0x40, 0x20, 0x1, 0xb1, 0x5, 0xae}, [{0x7, 0x2, 0x3, 0x0, 0xfffffffffffffffe, 0x2f, 0xac8, 0x3}], "ab08507dae273d55d38f1378cb7bb2", [[], [], []]}, 0x367) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000000)) openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x4000, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) 19:10:18 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x0, 0x42, 0x1, 0x3cf, 0xdf, 0x0, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x0, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) [ 384.348246] attempt to access beyond end of device [ 384.353221] loop6: rw=536870912, want=32993, limit=112 [ 384.524744] 9pnet_virtio: no channels available for device (null) [ 384.537041] attempt to access beyond end of device [ 384.537048] loop0: rw=536870912, want=114, limit=112 19:10:18 executing program 5: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000180)='sched\x00') shutdown(r0, 0x0) preadv(r2, &(0x7f0000002380)=[{&(0x7f0000001380)=""/4096}], 0x18a, 0x58) timerfd_create(0x4, 0x80800) ptrace$peek(0x1, r1, &(0x7f0000000080)) [ 384.537071] attempt to access beyond end of device [ 384.537076] loop0: rw=536870912, want=115, limit=112 19:10:18 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000280)=0x3) iopl(0xff) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000480)=""/181) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000000c0)=0x1) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) delete_module(&(0x7f0000000140)='net/tcp6\x00', 0x800) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0xfffffffffffffab, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000540)=""/245) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000180)=""/255) [ 384.537087] attempt to access beyond end of device [ 384.537091] loop0: rw=536870912, want=116, limit=112 [ 384.537102] attempt to access beyond end of device 19:10:18 executing program 6: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:10:18 executing program 3: r0 = openat$cgroup_procs(0xffffffffffffff9c, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_ifreq(r1, 0x891a, &(0x7f0000000340)={'\x00', @ifru_addrs=@vsock={0x28, 0x0, 0x0, @hyper}}) r2 = perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x8, 0xffffffffffffff00, 0x401, 0xfff, 0x0, 0x7, 0x10, 0x4, 0xca0f, 0x8, 0xfff, 0x7, 0x99, 0x81, 0x1, 0x0, 0xfff, 0x4, 0x1, 0x2, 0x3, 0x5, 0x8, 0x6, 0xfffffffffffffff7, 0x0, 0x159b, 0x5, 0x0, 0xc2, 0x2, 0x2, 0xf6b, 0xfffffffffffffc17, 0x80000001, 0x6, 0x0, 0x100000000, 0x2, @perf_bp={&(0x7f0000000080), 0x57d4030014e92c12}, 0x280, 0x5, 0x3, 0x0, 0x1, 0x5, 0x40}, 0x0, 0xa, 0xffffffffffffff9c, 0x8) r3 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x0) r4 = openat$md(0xffffffffffffff9c, &(0x7f0000000200)='/dev/md0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000240)={0x1, 0x7, 0x4, 0x0, 0x0, [{r1, 0x0, 0x7}, {r2, 0x0, 0x7fff}, {r3}, {r4, 0x0, 0x1ff}]}) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) fcntl$getown(r5, 0x9) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) syz_open_dev$evdev(&(0x7f0000000300)='/dev/input/event#\x00', 0x4, 0x240080) [ 384.537107] loop0: rw=536870912, want=117, limit=112 [ 384.537117] attempt to access beyond end of device [ 384.537122] loop0: rw=536870912, want=130, limit=112 [ 384.537132] attempt to access beyond end of device [ 384.537137] loop0: rw=536870912, want=131, limit=112 [ 384.537148] attempt to access beyond end of device [ 384.537152] loop0: rw=536870912, want=132, limit=112 [ 384.537162] attempt to access beyond end of device [ 384.537167] loop0: rw=536870912, want=133, limit=112 [ 384.538306] attempt to access beyond end of device [ 384.538313] loop0: rw=536870912, want=2189, limit=112 [ 384.539688] attempt to access beyond end of device [ 384.539694] loop0: rw=536870912, want=4237, limit=112 [ 384.540276] attempt to access beyond end of device [ 384.540281] loop0: rw=536870912, want=4629, limit=112 [ 384.540366] attempt to access beyond end of device [ 384.540371] loop0: rw=536870912, want=4630, limit=112 [ 384.540383] attempt to access beyond end of device [ 384.540387] loop0: rw=536870912, want=4631, limit=112 [ 384.540398] attempt to access beyond end of device [ 384.540402] loop0: rw=536870912, want=4632, limit=112 [ 384.540412] attempt to access beyond end of device [ 384.540417] loop0: rw=536870912, want=4633, limit=112 [ 384.540427] attempt to access beyond end of device [ 384.540432] loop0: rw=536870912, want=4662, limit=112 [ 384.540443] attempt to access beyond end of device [ 384.540448] loop0: rw=536870912, want=4663, limit=112 [ 384.540458] attempt to access beyond end of device [ 384.540463] loop0: rw=536870912, want=4664, limit=112 [ 384.540473] attempt to access beyond end of device [ 384.540478] loop0: rw=536870912, want=4665, limit=112 [ 384.540493] attempt to access beyond end of device [ 384.540498] loop0: rw=536870912, want=4686, limit=112 [ 384.540507] attempt to access beyond end of device [ 384.540512] loop0: rw=536870912, want=4687, limit=112 [ 384.540522] attempt to access beyond end of device [ 384.540527] loop0: rw=536870912, want=4688, limit=112 [ 384.540537] attempt to access beyond end of device [ 384.540542] loop0: rw=536870912, want=4689, limit=112 [ 384.540551] attempt to access beyond end of device [ 384.540556] loop0: rw=536870912, want=4722, limit=112 [ 384.540565] attempt to access beyond end of device [ 384.540570] loop0: rw=536870912, want=4723, limit=112 [ 384.540579] attempt to access beyond end of device [ 384.540583] loop0: rw=536870912, want=4724, limit=112 [ 384.540592] attempt to access beyond end of device [ 384.540596] loop0: rw=536870912, want=4725, limit=112 [ 384.540614] attempt to access beyond end of device [ 384.540619] loop0: rw=536870912, want=4738, limit=112 [ 384.540629] attempt to access beyond end of device [ 384.540634] loop0: rw=536870912, want=4739, limit=112 [ 384.540644] attempt to access beyond end of device [ 384.540649] loop0: rw=536870912, want=4740, limit=112 [ 384.540659] attempt to access beyond end of device [ 384.540664] loop0: rw=536870912, want=4741, limit=112 [ 384.540674] attempt to access beyond end of device [ 384.540678] loop0: rw=536870912, want=4750, limit=112 [ 384.540689] attempt to access beyond end of device [ 384.540693] loop0: rw=536870912, want=4751, limit=112 [ 384.540703] attempt to access beyond end of device [ 384.540708] loop0: rw=536870912, want=4752, limit=112 [ 384.540718] attempt to access beyond end of device [ 384.540722] loop0: rw=536870912, want=4753, limit=112 [ 384.541701] attempt to access beyond end of device [ 384.541706] loop0: rw=536870912, want=6801, limit=112 [ 384.542989] attempt to access beyond end of device [ 384.542994] loop0: rw=536870912, want=8849, limit=112 [ 384.544347] attempt to access beyond end of device [ 384.544353] loop0: rw=536870912, want=10897, limit=112 [ 384.558179] attempt to access beyond end of device [ 384.558186] loop0: rw=536870912, want=12945, limit=112 [ 384.561517] attempt to access beyond end of device [ 384.561524] loop0: rw=536870912, want=14993, limit=112 [ 384.565076] attempt to access beyond end of device [ 384.565082] loop0: rw=536870912, want=17041, limit=112 [ 384.566668] attempt to access beyond end of device [ 384.566675] loop0: rw=536870912, want=19089, limit=112 [ 384.568438] attempt to access beyond end of device [ 384.568444] loop0: rw=536870912, want=21137, limit=112 [ 384.569831] attempt to access beyond end of device [ 384.569836] loop0: rw=536870912, want=23185, limit=112 [ 384.571145] attempt to access beyond end of device [ 384.571150] loop0: rw=536870912, want=25233, limit=112 [ 384.572439] attempt to access beyond end of device [ 384.572444] loop0: rw=536870912, want=27281, limit=112 [ 384.578661] attempt to access beyond end of device [ 384.578667] loop0: rw=536870912, want=29329, limit=112 [ 384.581636] attempt to access beyond end of device [ 384.581643] loop0: rw=536870912, want=31377, limit=112 [ 384.582779] attempt to access beyond end of device [ 384.582784] loop0: rw=536870912, want=32985, limit=112 [ 385.326051] 9pnet_virtio: no channels available for device (null) 19:10:19 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:10:19 executing program 5: r0 = epoll_create(0x1000) fstat(r0, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000100)=0x10000) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000180)=""/169, 0xa9}], 0x1, 0x0) epoll_create(0x89) 19:10:19 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) ioctl$KDDISABIO(r0, 0x4b37) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="2321202e2f627573206367726f7570757365725b5b70726f63656d3076626f786e657431657468302d40776c616e31200000616e3000207663616e300020a020207663616e30000ad96e7dd51040c7ddce6b88b25e672b507e8161056db69c6f1cce1c5b4a0d9482b4b533ef6a8a5da9e5959f914108e1019ad89ee9a52833b744d200eb384d9a35548e5c1f5af2ef96f1a7180782d398b9e9c1c1d60100000083ecbc10ba23718ca51f6309b482b10000000000000000000000000000"], 0xbd) fallocate(r0, 0x1, 0x0, 0x10000101) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={@empty, 0x71, r1}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000040)={0x6, 0xffff, 0x7}, 0xc) socket$inet_udp(0x2, 0x2, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/load\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.events\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') getpeername$unix(r0, &(0x7f0000000380)=@abs, &(0x7f0000000400)=0x6e) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f00000002c0)={'dummy0\x00', 0xed4}) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="e8156663"], 0x1}}, 0x0) 19:10:19 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) getpeername$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000080)=0x10) 19:10:19 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x0, 0x42, 0x1, 0x3cf, 0xdf, 0x0, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:10:19 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/status\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000380)={'team_slave_0\x00', {0x2, 0x4e22, @rand_addr=0xc340}}) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000300)) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f00000004c0)={'bridge0\x00', {0x2, 0x4e23}}) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000500)={0x30, 0x5, 0x0, {0x0, 0x5, 0x7, 0x7}}, 0x30) r3 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7, 0x190010, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000440)={r3}) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f00000003c0)=0x1ff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000400)=""/57, 0xfd9c) 19:10:19 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x101003, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000000)={0x3, 0x5, 0x401, 0xe67, 0x1000, 0x101}) fgetxattr(r0, &(0x7f0000000040)=@known='system.posix_acl_access\x00', &(0x7f0000000180)=""/190, 0xbe) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000100)={r0, 0x0, 0x7, 0x1, 0x1}) 19:10:19 executing program 6: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{}], 0x1, 0x100000001) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:10:19 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') prctl$setendian(0x14, 0x2) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={@empty, 0x11, r1}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000280)={@ipv4={[], [], @loopback}, r1}, 0x14) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f00000000c0)=0x100000001) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000100), &(0x7f0000000080)=0xfffffffffffffe45) 19:10:19 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_tables_targets\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000020}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="fd37169e9ea011d061854afdd1018c2c9adb8e84089d90a6013c8c227ebbfb7b6907e2c40ebe10973bc2ce6a5a08b03e5878714995423fcf952d23146689886b8905924388d522ee0f97b9a68ffd5fb6e87313d0c627000000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x81) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@newtaction={0x5ac, 0x30, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x1, 0x9}, [{0x118, 0x1, @m_csum={0x114, 0x19, {{0xc, 0x1, 'csum\x00'}, {0x20, 0x2, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0x9, 0x0, 0x5, 0x8}, 0x42}}}, {0xe0, 0x6, "8c49d1d31a49a92bc8efdf920272cf7e4bc6c57b1f8bea19c8e3b38fef88df52f7b936a3103365128881b89f8c1159cb08ad1b8ca9842528f7423d5fcb6bbd1f0847eac986b591557df6db371b2ccae3e2a39c8cd7bf30bfc8b2af633d7c3b85730bf4c3a4df0fb7ce1820cd55d7780893a934510940c17648a7634ce5bfd4b7dfbac841260cbeba2c3dd80430e333028a4134654837c776e4c7dcadd969613173659867a2035ecc63c3d0fb9f045f84567177f6abd537312df6a2f6ede1fa55ad5254b3819ebe09febe288b0a1c06869fc2e23d1dfe9e94d896fc"}}}}, {0x480, 0x1, @m_police={0x47c, 0x2, {{0xc, 0x1, 'police\x00'}, {0x418, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x0, 0x99, 0x6, 0x10000, 0x4, 0x1, 0x1, 0x9, 0x7ff, 0x0, 0xf17, 0x3, 0x43e8, 0x4, 0x2, 0x6, 0x80000001, 0x100000001, 0x9, 0x7fffffff, 0x100, 0x401, 0x4, 0x689374b, 0x1, 0x20, 0x7, 0xd40f, 0xeb2, 0x50000000, 0x3, 0xe2dd, 0x3, 0xfff, 0x80000001, 0x80, 0x8, 0x5, 0x0, 0x7, 0xea9e, 0x5, 0x401, 0x6, 0x6, 0x1, 0x3, 0x80000001, 0x5, 0x6, 0xffffffffffff3335, 0x100000000, 0x3, 0x17c178cf, 0x3f0d, 0x1ff, 0x3, 0x4, 0x6, 0xfffffffffffffff8, 0x10001, 0x9, 0x3, 0x0, 0x9, 0x5, 0x6, 0x5, 0x3f6, 0x40, 0x400, 0x2, 0x3, 0xffff, 0x6, 0x10001, 0xffffffff, 0x7e1d, 0x9, 0x677, 0x400, 0x3, 0x200, 0x800, 0xb9a, 0x35e1aba5, 0x8001, 0x0, 0x7f, 0xffff, 0x3f, 0x8, 0x8, 0x400, 0x4, 0x7ff, 0x5, 0x8, 0x5, 0x39, 0x56, 0x1f9c, 0x0, 0x2, 0x1, 0xff, 0x5, 0xffffffff, 0x3df, 0x4, 0xfe, 0x80000001, 0x64, 0x1ff, 0x9, 0x6, 0xffffffff, 0x100, 0x1, 0x10001, 0x400, 0x9, 0x101, 0x8, 0x4, 0x100, 0x1, 0x2, 0x8000, 0x7ff, 0x15, 0x7, 0x5c, 0x2, 0xd84, 0xc5, 0x6, 0xff, 0x7, 0x40, 0x800, 0x8, 0x4, 0x8001, 0x101, 0x2, 0x6, 0x5a90, 0x8, 0x9, 0x2, 0x0, 0x35, 0x800000000, 0x7, 0x2, 0x9, 0x20, 0x1, 0x7, 0x9, 0x8, 0x3, 0x7, 0x5, 0x7, 0x0, 0x0, 0x6, 0x3, 0x5, 0x64acdec5, 0x2, 0x101, 0x7, 0x3, 0x0, 0x101, 0x10000, 0xffff, 0x800000000, 0xb6, 0x1000, 0x4c1f, 0x20, 0x80000000, 0x5, 0x27, 0x2, 0xffffffffffff0b70, 0x6, 0x5, 0x4, 0x4, 0x3, 0x7, 0x9, 0x1, 0x2, 0x100000000, 0x6, 0x2, 0x4, 0x10001, 0xffff, 0x8001, 0x4, 0x4, 0xfff, 0x9, 0x1ff, 0x100000000, 0x7fffffff, 0x2, 0x100000001, 0x6, 0xfffffffffffff001, 0x3504, 0x8, 0x4fcf, 0x867, 0xff, 0xff, 0x6, 0x4, 0x703, 0x9, 0x10001, 0x4, 0xffffffffffffff81, 0xffff, 0x100000000, 0x3, 0x400, 0x81, 0x78, 0x96000000000000, 0x9, 0x54, 0xaa0, 0x6, 0x101, 0x4b5, 0x62, 0x4, 0xe53, 0xae, 0x8, 0xa04f, 0x2, 0x1f, 0x6a81, 0x5, 0x8, 0x1000]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7fffffff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}]}, {0x50, 0x6, "158aae8652faa71cee4b7cd7dcc2177ce9da0c88b35e3d8b0b6a8a54c9d8cfa5c93537842113172c42cbf7f355f7de712137a19c7ce41dc4b5ba6127921da4044d7ca52ce26540330932"}}}}]}, 0x5ac}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x81) tee(r0, r0, 0x2, 0xf) 19:10:19 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x0, 0x42, 0x1, 0x3cf, 0xdf, 0x0, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:10:19 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000ebffffffa8bd5146cbcb0000000000000000000000000007002e"], 0x2a) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00022cbd7000fcdbdf2504000000080006000500000008000400000200004400010008000b0073697000080005000400000008000200330000000800090007000000080004004e2000000800050003000000080006006e710000080009002d000000080006000700000008000600f8ffffff"], 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x4000010) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x22010, r1, 0x0) lremovexattr(&(0x7f0000000500)='./file0\x00', &(0x7f0000000600)=@known='com.apple.FinderInfo\x00') write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) 19:10:19 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/nfsfs\x00') mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x110, r0, 0x0) 19:10:19 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) write$P9_RFSYNC(r0, &(0x7f0000000000)={0x7, 0x33, 0x1}, 0x7) pwritev(r0, &(0x7f00000000c0), 0x90f3a995f7f493b, 0x44) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000140)={'bond_slave_0\x00', {0x2, 0x4e23, @remote}}) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={'ip_vti0\x00', {0x2, 0x4e22, @rand_addr=0x9885}}) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000100)={0x8000, 0x35bd, 0x80, 0x6, 0x4, 0x8}) 19:10:19 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r1 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000180)='/dev/pktcdvd/control\x00', 0x100, 0x0) dup2(r1, r1) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x0, &(0x7f0000000040)=""/187, &(0x7f0000000100)=0xbb) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) 19:10:19 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) [ 385.546436] attempt to access beyond end of device [ 385.551410] loop0: rw=536870912, want=130, limit=112 [ 385.563611] attempt to access beyond end of device [ 385.580711] loop0: rw=536870912, want=131, limit=112 [ 385.586685] attempt to access beyond end of device [ 385.601875] loop0: rw=536870912, want=132, limit=112 [ 385.607504] attempt to access beyond end of device [ 385.612697] loop0: rw=536870912, want=133, limit=112 [ 385.618180] attempt to access beyond end of device [ 385.629808] loop0: rw=536870912, want=142, limit=112 [ 385.635460] attempt to access beyond end of device [ 385.640442] loop0: rw=536870912, want=143, limit=112 [ 385.649039] attempt to access beyond end of device [ 385.655531] loop0: rw=536870912, want=144, limit=112 [ 385.661483] attempt to access beyond end of device [ 385.666690] loop0: rw=536870912, want=145, limit=112 [ 385.672761] attempt to access beyond end of device [ 385.678049] loop0: rw=536870912, want=2193, limit=112 [ 385.683478] attempt to access beyond end of device [ 385.688674] loop0: rw=536870912, want=2265, limit=112 [ 385.693909] attempt to access beyond end of device [ 385.704644] loop0: rw=536870912, want=2294, limit=112 [ 385.717584] attempt to access beyond end of device [ 385.725026] loop0: rw=536870912, want=2295, limit=112 [ 385.730914] attempt to access beyond end of device [ 385.736271] loop0: rw=536870912, want=2296, limit=112 [ 385.741621] attempt to access beyond end of device [ 385.747886] loop0: rw=536870912, want=2297, limit=112 [ 385.753143] attempt to access beyond end of device [ 385.758130] loop0: rw=536870912, want=2318, limit=112 [ 385.763512] attempt to access beyond end of device [ 385.768574] loop0: rw=536870912, want=2319, limit=112 [ 385.773769] attempt to access beyond end of device [ 385.780021] loop0: rw=536870912, want=2320, limit=112 [ 385.785247] attempt to access beyond end of device [ 385.791290] loop0: rw=536870912, want=2321, limit=112 [ 385.802924] attempt to access beyond end of device [ 385.808357] loop0: rw=536870912, want=2370, limit=112 [ 385.813562] attempt to access beyond end of device [ 385.834364] loop0: rw=536870912, want=2371, limit=112 [ 385.844895] attempt to access beyond end of device [ 385.849907] loop0: rw=536870912, want=2372, limit=112 [ 385.855175] attempt to access beyond end of device [ 385.860291] loop0: rw=536870912, want=2373, limit=112 [ 385.865539] attempt to access beyond end of device [ 385.877492] loop0: rw=536870912, want=2382, limit=112 [ 385.882792] attempt to access beyond end of device [ 385.887961] loop0: rw=536870912, want=2383, limit=112 [ 385.893197] attempt to access beyond end of device [ 385.898222] loop0: rw=536870912, want=2384, limit=112 [ 385.903474] attempt to access beyond end of device [ 385.908889] loop0: rw=536870912, want=2385, limit=112 [ 385.914833] attempt to access beyond end of device [ 385.919872] loop0: rw=536870912, want=4433, limit=112 [ 385.926424] attempt to access beyond end of device [ 385.931565] loop0: rw=536870912, want=6481, limit=112 [ 385.938259] attempt to access beyond end of device [ 385.943248] loop0: rw=536870912, want=8529, limit=112 [ 385.950169] attempt to access beyond end of device [ 385.955154] loop0: rw=536870912, want=10577, limit=112 [ 385.964744] attempt to access beyond end of device [ 385.969765] loop0: rw=536870912, want=12625, limit=112 [ 385.977966] attempt to access beyond end of device [ 385.982933] loop0: rw=536870912, want=14673, limit=112 [ 385.989732] attempt to access beyond end of device [ 385.994700] loop0: rw=536870912, want=16721, limit=112 [ 386.001468] attempt to access beyond end of device [ 386.006432] loop0: rw=536870912, want=18769, limit=112 [ 386.013141] attempt to access beyond end of device [ 386.018275] loop0: rw=536870912, want=20817, limit=112 [ 386.025247] attempt to access beyond end of device [ 386.030226] loop0: rw=536870912, want=22865, limit=112 [ 386.036911] attempt to access beyond end of device [ 386.042098] loop0: rw=536870912, want=24913, limit=112 [ 386.048786] attempt to access beyond end of device [ 386.053742] loop0: rw=536870912, want=26961, limit=112 [ 386.060411] attempt to access beyond end of device [ 386.065391] loop0: rw=536870912, want=29009, limit=112 [ 386.072127] attempt to access beyond end of device [ 386.077098] loop0: rw=536870912, want=31057, limit=112 [ 386.084042] attempt to access beyond end of device [ 386.089037] loop0: rw=536870912, want=32993, limit=112 19:10:20 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:10:20 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x0, 0x42, 0x1, 0x3cf, 0xdf, 0x0, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:10:20 executing program 2: ioctl$ION_IOC_ALLOC(0xffffffffffffff9c, 0xc0184900, &(0x7f0000000040)={0xff, 0x12, 0x1, 0xffffffffffffff9c}) fchdir(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) 19:10:20 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000180)={0x0, 0x0}) r1 = syz_open_procfs(r0, &(0x7f0000000040)='wchan\x00') setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000140)={0x3, 0x6, 0x1ff, 0x6}, 0x10) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) 19:10:20 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) syncfs(r0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000000)=0x4) pwritev(r0, &(0x7f0000000080), 0x0, 0x0) 19:10:20 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = memfd_create(&(0x7f00000003c0)='wfdno', 0x0) getsockname$inet(r2, &(0x7f0000000400)={0x2, 0x0, @local}, &(0x7f0000000440)=0x10) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="ac7766646e6f3d", @ANYRESHEX=r1, @ANYBLOB=',\x00']) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RLOCK(r0, &(0x7f0000000380)={0x8, 0x35, 0x2, 0x2}, 0x8) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap='nodevmap'}]}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) 19:10:20 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:10:20 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f84ff0)={&(0x7f0000000100)=ANY=[@ANYBLOB="020500000c000000000000000000000005000600000000000a00000000eb15297ad1e37c670000000000000000000000220000000000000002000100000000000000000000000000030005000000000002000000ac14ffbb00000000000000005ee1d2df26ab17e01ff0954a7638a35bb5f600d3d2759cb6a93b2c384aaa3877c8285dfcafc7765f38c4d5fb7105597fa6b45d7839a48307aae29a3d9bbc91984e71e9517ac29ed1c79b005afa43565c8d2430202aba7c9499da04bcd6665f42bc80c5338f9fe4cb30a26a71615efa97eae79881e8c820573a141088501b"], 0x60}}, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x5a3040, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000080)) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000200)=""/236) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x90003, 0x0) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000040)) 19:10:20 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x300, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e22}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xf155b7c94ed81bb9}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9b506c64", @ANYRES16=r2, @ANYBLOB="10002bbd7000fcdbdf2503000000080001004e2000000800030029000000080003003c00000004000500"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x20000001) syz_mount_image$vfat(&(0x7f00000004c0)='vfat\x00', &(0x7f0000000500)='./file0\x00', 0xffffffff, 0x3, &(0x7f0000000680)=[{&(0x7f0000000540)="d21d6d7c1b75", 0x6, 0xfffffffffffffffb}, {&(0x7f0000000580)="faf7c9fc977cfa342ae26db90908c0ab386fded8077b6d42a9b5f0bc3e8e390b75a5b3fc9ca55f63bf7f5d0d2c78552afe7c95a3048ec2a5dc19f5918374a47b6882e2924b6735717281ab505294448d8b7bebc8caa1a2a59b88aa05", 0x5c}, {&(0x7f0000000600)="31a6ddcb01abd931086d06040b22a2660b07f141788038bd4da70fb6c2621dfe48fe80fc2a82464a56c8c9d8258da0e319d5f0e887fb5680c8c059d56280ad0769ab6fcab6622f991fcffab9d52c8240a374eb4cc686dc8e88eba682f45fc8d99ad724ee684d75de5300b95b4743e0634251cc7ba38a215316280db383", 0x7d, 0x9d09}], 0x10080, &(0x7f0000000700)={[{@numtail='nonumtail=0'}]}) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000480)={0x0, 0x0}) r4 = gettid() tgkill(r3, r4, 0x1f) r5 = gettid() ptrace$getregs(0xe, r5, 0x10001, &(0x7f0000000440)=""/18) rt_sigprocmask(0x1, &(0x7f00000003c0)={0x5}, &(0x7f0000000400), 0x8) 19:10:20 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:10:20 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000000), 0x1231, 0x0) signalfd4(r0, &(0x7f00000000c0)={0x5}, 0x8, 0x800) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000180)={0x5, 0x1}) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000040), 0x4) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x935, 0x80000) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000100)=0x7) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffd000/0x3000)=nil, 0x2000}, &(0x7f0000000280)=0xfffffffffffffe48) write$FUSE_DIRENTPLUS(r1, &(0x7f00000001c0)={0x10, 0xfffffffffffffffe, 0x5}, 0x10) [ 386.545400] 9pnet: Insufficient options for proto=fd 19:10:20 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="7472616e733d66642c3266646e6f3dc4aac2795220fa64d1d0bcfa60e82b5a54c163bb359a06cc8b125136067d223efce227142a3243c043a1af7e50339834da62f580fb5d166f645e1435f26ab31e80520000000700820eca63c910023c51b2f621c6dbe349ac301fe92664bfee45efa5230d378ac0386991ac11c59eba6098f90404af1edb730c07734d9bf5a23c41ba11dde3f05de376c7f27ae783c9403e34726faa4e5082a887f3c0704f7280b09eb492780e19d69f8bf81d510ae21a00aa3a2a938567633f7e05c25adab21e57b615c3b0d549f97d6b0cf482e195e33f580cdca4c48bfe9ff72f5b8830a7363f713dc38c461a214bc0", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) open(&(0x7f00000001c0)='./file0\x00', 0x90002, 0x20) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) 19:10:20 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) 19:10:20 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') umount2(&(0x7f0000000040)='./file0\x00', 0x1) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x20000, 0x0) fstatfs(r0, &(0x7f00000000c0)=""/108) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) sendfile(r0, r0, 0x0, 0x80000000000003) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000200)={0x3d, 0x3, 0x0, {0x5, 0x1c, 0x0, '].keyring&trusted.&\',em0ppp1'}}, 0x3d) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000180)=""/113) ioctl$TCFLSH(r1, 0x540b, 0x8) openat$cgroup_type(r0, &(0x7f0000000240)='cgroup.type\x00', 0x2, 0x0) [ 386.573009] attempt to access beyond end of device [ 386.579466] loop0: rw=536870912, want=114, limit=112 [ 386.585603] 9pnet: Insufficient options for proto=fd 19:10:20 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0xfffffffefffffffa, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000004c0)=""/246) ioctl$EVIOCGREP(r0, 0x40047459, &(0x7f0000d1df52)=""/174) 19:10:20 executing program 6: r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000136000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0xb, &(0x7f00000000c0)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000044000)) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uinput\x00', 0x80000, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x1a001) ppoll(&(0x7f0000000100)=[{r1, 0x80d5}, {r2, 0x2000}], 0x2, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180)={0x3b62}, 0x8) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x0, r3+10000000}, {0x0, 0x9}}, &(0x7f0000000200)) socket$inet(0x2, 0x800, 0x0) ppoll(&(0x7f0000000500), 0x0, &(0x7f00000003c0)={0x0, 0x1c9c380}, &(0x7f000079dff8), 0x8) [ 386.619125] FAT-fs (loop5): invalid media value (0x7b) [ 386.619131] FAT-fs (loop5): Can't find a valid FAT filesystem [ 386.637772] buffer_io_error: 170 callbacks suppressed [ 386.637778] Buffer I/O error on dev loop0, logical block 113, lost async page write [ 386.651322] attempt to access beyond end of device [ 386.656507] loop0: rw=536870912, want=115, limit=112 [ 386.661683] Buffer I/O error on dev loop0, logical block 114, lost async page write [ 386.674723] attempt to access beyond end of device [ 386.678860] FAT-fs (loop5): invalid media value (0x7b) [ 386.678864] FAT-fs (loop5): Can't find a valid FAT filesystem [ 386.694905] loop0: rw=536870912, want=116, limit=112 [ 386.700017] Buffer I/O error on dev loop0, logical block 115, lost async page write [ 386.708120] attempt to access beyond end of device [ 386.708770] 9pnet: Insufficient options for proto=fd [ 386.731400] loop0: rw=536870912, want=117, limit=112 [ 386.744644] 9pnet: Insufficient options for proto=fd [ 386.782210] Buffer I/O error on dev loop0, logical block 116, lost async page write [ 386.790761] attempt to access beyond end of device [ 386.796360] loop0: rw=536870912, want=130, limit=112 [ 386.801525] Buffer I/O error on dev loop0, logical block 129, lost async page write [ 386.809392] attempt to access beyond end of device [ 386.814509] loop0: rw=536870912, want=131, limit=112 [ 386.819794] Buffer I/O error on dev loop0, logical block 130, lost async page write [ 386.827696] attempt to access beyond end of device [ 386.832685] loop0: rw=536870912, want=132, limit=112 [ 386.837862] Buffer I/O error on dev loop0, logical block 131, lost async page write [ 386.845700] attempt to access beyond end of device [ 386.850651] loop0: rw=536870912, want=133, limit=112 [ 386.855823] Buffer I/O error on dev loop0, logical block 132, lost async page write [ 386.864492] attempt to access beyond end of device [ 386.870024] loop0: rw=536870912, want=2189, limit=112 [ 386.876340] attempt to access beyond end of device [ 386.881311] loop0: rw=536870912, want=4237, limit=112 [ 386.888275] attempt to access beyond end of device [ 386.893259] loop0: rw=536870912, want=5525, limit=112 [ 386.898724] attempt to access beyond end of device [ 386.903674] loop0: rw=536870912, want=5526, limit=112 [ 386.908916] Buffer I/O error on dev loop0, logical block 5525, lost async page write [ 386.916846] attempt to access beyond end of device [ 386.921808] loop0: rw=536870912, want=5527, limit=112 [ 386.927185] Buffer I/O error on dev loop0, logical block 5526, lost async page write [ 386.935088] attempt to access beyond end of device [ 386.940071] loop0: rw=536870912, want=5528, limit=112 [ 386.945289] attempt to access beyond end of device [ 386.950269] loop0: rw=536870912, want=5529, limit=112 [ 386.955518] attempt to access beyond end of device [ 386.960464] loop0: rw=536870912, want=5558, limit=112 [ 386.965728] attempt to access beyond end of device [ 386.970680] loop0: rw=536870912, want=5559, limit=112 [ 386.975936] attempt to access beyond end of device [ 386.980967] loop0: rw=536870912, want=5560, limit=112 [ 386.986203] attempt to access beyond end of device [ 386.991181] loop0: rw=536870912, want=5561, limit=112 [ 386.996881] attempt to access beyond end of device [ 387.001831] loop0: rw=536870912, want=5582, limit=112 [ 387.007053] attempt to access beyond end of device [ 387.011995] loop0: rw=536870912, want=5583, limit=112 [ 387.017242] attempt to access beyond end of device [ 387.022206] loop0: rw=536870912, want=5584, limit=112 [ 387.027455] attempt to access beyond end of device [ 387.032389] loop0: rw=536870912, want=5585, limit=112 [ 387.037814] attempt to access beyond end of device [ 387.042759] loop0: rw=536870912, want=5618, limit=112 [ 387.047984] attempt to access beyond end of device [ 387.052940] loop0: rw=536870912, want=5619, limit=112 [ 387.058165] attempt to access beyond end of device [ 387.063112] loop0: rw=536870912, want=5620, limit=112 [ 387.068359] attempt to access beyond end of device [ 387.073317] loop0: rw=536870912, want=5621, limit=112 [ 387.078574] attempt to access beyond end of device [ 387.083511] loop0: rw=536870912, want=5634, limit=112 [ 387.088754] attempt to access beyond end of device [ 387.093703] loop0: rw=536870912, want=5635, limit=112 [ 387.098926] attempt to access beyond end of device [ 387.103872] loop0: rw=536870912, want=5636, limit=112 [ 387.109086] attempt to access beyond end of device [ 387.114029] loop0: rw=536870912, want=5637, limit=112 [ 387.119284] attempt to access beyond end of device [ 387.124237] loop0: rw=536870912, want=5646, limit=112 [ 387.129817] attempt to access beyond end of device [ 387.134751] loop0: rw=536870912, want=5647, limit=112 [ 387.139980] attempt to access beyond end of device [ 387.144927] loop0: rw=536870912, want=5648, limit=112 [ 387.150316] attempt to access beyond end of device [ 387.155274] loop0: rw=536870912, want=5649, limit=112 [ 387.161281] attempt to access beyond end of device [ 387.166232] loop0: rw=536870912, want=7697, limit=112 [ 387.172457] attempt to access beyond end of device [ 387.177422] loop0: rw=536870912, want=9745, limit=112 [ 387.183636] attempt to access beyond end of device [ 387.188599] loop0: rw=536870912, want=11793, limit=112 [ 387.194889] attempt to access beyond end of device [ 387.199895] loop0: rw=536870912, want=13841, limit=112 [ 387.206199] attempt to access beyond end of device [ 387.211162] loop0: rw=536870912, want=15889, limit=112 [ 387.217511] attempt to access beyond end of device [ 387.222595] loop0: rw=536870912, want=17937, limit=112 [ 387.228972] attempt to access beyond end of device [ 387.233922] loop0: rw=536870912, want=19985, limit=112 [ 387.240289] attempt to access beyond end of device [ 387.245237] loop0: rw=536870912, want=22033, limit=112 [ 387.251571] attempt to access beyond end of device [ 387.256525] loop0: rw=536870912, want=24081, limit=112 [ 387.263383] attempt to access beyond end of device [ 387.268375] loop0: rw=536870912, want=26129, limit=112 [ 387.274672] attempt to access beyond end of device [ 387.279650] loop0: rw=536870912, want=28177, limit=112 [ 387.285967] attempt to access beyond end of device [ 387.290956] loop0: rw=536870912, want=30225, limit=112 [ 387.297269] attempt to access beyond end of device [ 387.302251] loop0: rw=536870912, want=32273, limit=112 [ 387.308143] attempt to access beyond end of device [ 387.313110] loop0: rw=536870912, want=32985, limit=112 19:10:21 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:10:21 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x0, 0x42, 0x1, 0x3cf, 0xdf, 0x0, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x0, 0xdc1, 0x0, 0x5, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:10:21 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') fsetxattr(r0, &(0x7f0000000040)=@known='system.posix_acl_default\x00', &(0x7f0000000080)='net/tcp6\x00', 0x9, 0x2) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) 19:10:21 executing program 7: listxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000940)=""/4096, 0x1000) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYRESDEC=r2, @ANYBLOB=',access=client,accen\x00\x00\x00']) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) 19:10:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={"6c6f3a2c000081800000faffdff700", &(0x7f0000000040)=ANY=[@ANYBLOB="fd16aa0002ce1a0aa0dcfdd3a677e7dfad15524bd70b8476"]}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) 19:10:21 executing program 2: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x400000, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000680)=""/246, &(0x7f0000000040)=0xf6) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1) preadv(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000240)=""/116}, {&(0x7f0000000100)=""/64}, {&(0x7f0000000380)=""/70}, {&(0x7f0000000400)=""/108}, {&(0x7f0000000480)=""/227}, {&(0x7f0000000580)=""/207}, {&(0x7f0000000800)=""/252}], 0x95, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000180)) 19:10:21 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000180)={{0x5, 0xffff}, {0xffff, 0x400}, 0x5, 0x3}) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000080)=0x4) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000000)={0x7, 0x4, 0x7}, 0xc) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) 19:10:21 executing program 6: pipe(&(0x7f0000a01ff8)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c, 0x80800) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x20002100008912, &(0x7f00000001c0)="025cc80700145f8f764070") rt_sigprocmask(0x0, &(0x7f0000834000)={0x7fffffff}, &(0x7f00000c1000), 0x8) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) writev(r4, &(0x7f000000b000)=[{&(0x7f0000066000)=',', 0x1}], 0x1) tee(r3, r1, 0x5, 0x0) 19:10:21 executing program 4: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000380)=0xc) r1 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x400000) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f00000001c0)) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000600)) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000007c0)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/create\x00', 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3d}) unshare(0x40000000) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) epoll_create1(0x80000) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000700)={'mangle\x00'}, &(0x7f0000000140)=0x58d56019b6cf755e) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCSBRK(r2, 0x5427) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f00000003c0)={0x0, {{0xa, 0x4e23, 0x0, @mcast2, 0x3ff}}, {{0xa, 0x4e22, 0x6b29, @dev={0xfe, 0x80, [], 0x15}, 0x8}}}, 0x108) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000640)={'filter\x00'}, &(0x7f00000006c0)=0x54) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000200)={'nat\x00'}, &(0x7f00000002c0)=0x54) set_robust_list(&(0x7f00000009c0)={&(0x7f0000000500)={&(0x7f0000000940)}, 0x5, &(0x7f0000000980)={&(0x7f00000008c0)}}, 0x11) 19:10:21 executing program 5: getpgid(0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000140)='net/tcp6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) 19:10:21 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x4000000000014, &(0x7f00000000c0)=0x80400000001, 0x240) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) sendto$inet(r3, &(0x7f0000000100), 0xffffffffffffff1f, 0x0, 0x0, 0x56c3) fcntl$setsig(r2, 0xa, 0x2d) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x14, &(0x7f0000000040), 0x14) close(r3) dup3(r1, r2, 0x0) 19:10:21 executing program 2: r0 = dup(0xffffffffffffffff) finit_module(r0, &(0x7f0000000400)='net/tcp6\x00', 0x3) ioctl$TIOCSCTTY(r0, 0x540e, 0x3) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="50c2ef2f296128ba1adbdcc41342c2c7c3a359b84811beeaa7ce69b6", 0x1c, 0x5}, {&(0x7f00000001c0)="bd75422a684d0d3fee0f23d0396013ea136c5c8bc2319cbae373d749600c2fe70a8da8f7f2a860d4d0f0767bbdb2e33a70fb8af55abfaef6c17e98d12af84a1049aec3aab4dde1cb224458d2b88f1875d2b320e93a8832ec316a2adf3d80025761abbc6a22693c35bf35acd276be88b286378fc51323371ee3a372382d0c412a61497ab2958e8221201b2c12b5e6bd7cc09255b68878f1d8725b2726106ac0cdd9b52ec37f43adce7b9836311d95345c6239193fea6062eb715fc63c7a52", 0xbe, 0x2}], 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB='check=strTct,mode=0x0000000000000e12nhide,map=normal,\x00']) accept$inet6(r1, 0x0, &(0x7f00000003c0)) preadv(r2, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000440)={'HL\x00'}, &(0x7f0000000480)=0x1e) 19:10:21 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x0, 0x42, 0x1, 0x3cf, 0xdf, 0x0, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x0, 0xdc1, 0xfffffffffffffffd, 0x0, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:10:21 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101101, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) [ 387.722604] attempt to access beyond end of device [ 387.727571] loop0: rw=536870912, want=130, limit=112 [ 387.748204] attempt to access beyond end of device [ 387.754258] loop0: rw=536870912, want=131, limit=112 [ 387.759536] attempt to access beyond end of device [ 387.765411] loop0: rw=536870912, want=132, limit=112 19:10:22 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@alg, &(0x7f0000000300)=0x80, 0x80000) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x27, &(0x7f0000000400)={@rand_addr, @multicast2, 0x0}, &(0x7f0000000440)=0xc) sendmmsg(r2, &(0x7f0000000c80)=[{{&(0x7f00000004c0)=@can={0x1d, r3}, 0x80, &(0x7f0000000700)}, 0x6}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000740)="4088ecf8c0b2b0cf95e29b1770f18cfa78fb9d799029ba9af71c1a128ad4f65f8b993ccf165880ee5ecf86ca70cc17a3690682da8da0422a291eea92a27cafab00ed42a817fde79dd40239265e99e8614083c23dd1d611ce1084b21df6b1828c17abf3ff14", 0x65}, {&(0x7f0000000940)="0cfe5b0c5e4750bbee9c2d1fb404372c2ecfdd7a67b24530bf0b64471bd61bafe084e0a28f8641baaa6fc40c1208f7a2f3eadbb563b461a4b94c5450dcd21f93584b9a026b203c17bbf0a7e3c403345167f9fa89f23c45d0ad708c123cb2e35cd67914c2501548a489d93ac4915760f541efd72f7a3122e2d74e8238c9f0cc84249798b4bd792dad81647eb14c534fa7c90b49fb6497e4bad871c7b26e8cd8276c49", 0xa2}, {&(0x7f0000000a00)="07d2d1286e4b9d9f2af069014030ac88213bc9788c384054da90e3a9742d8acaee6eb446f2e0a4322027d157e13e968b8d8bddc5f0d2647c7d38fb6b0146969beaa7f580e6e6028b87a520209ad16293af03c2fde7dc7e0a8a298b6474f45c33a3c9a80cfcdfc15d8d91be6bcc6fbb944eb5b25030c565f5b883e1c55577263e3d068162cfb131d3be0eb27e62a72a8f9ec354082f32d6f6572cb8b61cc4ecd0bdab16e5ca", 0xa5}], 0x3, &(0x7f0000000ac0), 0x0, 0x80}, 0x6}], 0x2, 0x1) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000d80)={0x0, 0x0}, &(0x7f0000000dc0)=0xc) mount$9p_fd(0x0, &(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40)='9p\x00', 0x80000, &(0x7f0000000e00)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r4}}]}}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) futex(&(0x7f0000000600)=0x2, 0x0, 0x2, &(0x7f0000000640), &(0x7f0000000680)=0x2, 0x2) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) ioctl$sock_ifreq(r2, 0x8914, &(0x7f00000008c0)={'ipddp0\x00', @ifru_data=&(0x7f0000000800)="e73cc73cb8453df2eb60288412e2e0bd281eb3c5787ec4c753850f4c60d73a9c"}) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="733da80000000000", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000e80)="680cf474f5b13caa22a70980e59774d5033f1aac323988837038e03f35f0e82d276357597b4c83144f472a928c23a635617fe878e19ec7caecd25b8548cd5f9f49b2f1fdde531495c69f4d5d36ea8fbf8292209da2abda9e04b1555817b8bbca87d264f91efa61004ddcca2205661002db03cb363c73bbe3bf466e85f366c10a8dd22c7af04b645ab4e093088b64da9a774310604179993a9f97a5878b5754edfacf80eb16aeeff7273693550758db44da97c9f5f057a735f349af755499509650a4aad0a6a30449920bc4528a002b32fb0ae75e94b5d5", 0xd7) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) [ 387.772822] attempt to access beyond end of device [ 387.777899] loop0: rw=536870912, want=133, limit=112 [ 387.780443] IPVS: Creating netns size=2536 id=44 [ 387.807433] attempt to access beyond end of device [ 387.822106] loop0: rw=536870912, want=142, limit=112 19:10:22 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4800405}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x88, r1, 0x500, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6c59}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x44f8875b}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xa4}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x5}, 0x44) [ 387.843547] attempt to access beyond end of device [ 387.866622] loop0: rw=536870912, want=143, limit=112 [ 387.884037] attempt to access beyond end of device [ 387.902282] loop0: rw=536870912, want=144, limit=112 [ 387.911661] 9pnet: Insufficient options for proto=fd [ 387.940189] attempt to access beyond end of device [ 387.947073] 9pnet: Insufficient options for proto=fd [ 387.972530] loop0: rw=536870912, want=145, limit=112 [ 387.979149] attempt to access beyond end of device [ 387.985829] loop0: rw=536870912, want=2193, limit=112 [ 388.002175] attempt to access beyond end of device [ 388.007185] loop0: rw=536870912, want=4241, limit=112 [ 388.014728] attempt to access beyond end of device [ 388.026593] loop0: rw=536870912, want=6289, limit=112 [ 388.033585] attempt to access beyond end of device [ 388.043879] loop0: rw=536870912, want=8337, limit=112 [ 388.050818] attempt to access beyond end of device [ 388.053053] pktgen: kernel_thread() failed for cpu 0 [ 388.053060] pktgen: Cannot create thread for cpu 0 (-4) [ 388.053187] pktgen: kernel_thread() failed for cpu 1 [ 388.053193] pktgen: Cannot create thread for cpu 1 (-4) [ 388.053196] pktgen: Initialization failed for all threads [ 388.082882] loop0: rw=536870912, want=9049, limit=112 [ 388.088501] attempt to access beyond end of device [ 388.093465] loop0: rw=536870912, want=9078, limit=112 [ 388.099303] attempt to access beyond end of device [ 388.104281] loop0: rw=536870912, want=9079, limit=112 [ 388.109678] attempt to access beyond end of device [ 388.114648] loop0: rw=536870912, want=9080, limit=112 [ 388.119898] attempt to access beyond end of device [ 388.124856] loop0: rw=536870912, want=9081, limit=112 [ 388.130372] attempt to access beyond end of device [ 388.135963] loop0: rw=536870912, want=9102, limit=112 [ 388.141247] attempt to access beyond end of device [ 388.146344] loop0: rw=536870912, want=9103, limit=112 [ 388.151582] attempt to access beyond end of device [ 388.156750] loop0: rw=536870912, want=9104, limit=112 [ 388.161995] attempt to access beyond end of device [ 388.166958] loop0: rw=536870912, want=9105, limit=112 [ 388.172198] attempt to access beyond end of device [ 388.177190] loop0: rw=536870912, want=9154, limit=112 [ 388.182420] attempt to access beyond end of device [ 388.188051] loop0: rw=536870912, want=9155, limit=112 [ 388.193295] attempt to access beyond end of device [ 388.198299] loop0: rw=536870912, want=9156, limit=112 [ 388.203537] attempt to access beyond end of device [ 388.208510] loop0: rw=536870912, want=9157, limit=112 [ 388.213757] attempt to access beyond end of device [ 388.218725] loop0: rw=536870912, want=9166, limit=112 [ 388.224128] attempt to access beyond end of device [ 388.229110] loop0: rw=536870912, want=9167, limit=112 [ 388.234340] attempt to access beyond end of device [ 388.239340] loop0: rw=536870912, want=9168, limit=112 [ 388.244560] attempt to access beyond end of device [ 388.250209] loop0: rw=536870912, want=9169, limit=112 [ 388.256603] attempt to access beyond end of device [ 388.261573] loop0: rw=536870912, want=11217, limit=112 [ 388.267950] attempt to access beyond end of device [ 388.272870] loop0: rw=536870912, want=13265, limit=112 [ 388.279233] attempt to access beyond end of device [ 388.284250] loop0: rw=536870912, want=15313, limit=112 [ 388.290786] attempt to access beyond end of device [ 388.295735] loop0: rw=536870912, want=17361, limit=112 [ 388.302360] attempt to access beyond end of device [ 388.307349] loop0: rw=536870912, want=19409, limit=112 [ 388.313643] attempt to access beyond end of device [ 388.318957] loop0: rw=536870912, want=21457, limit=112 [ 388.325094] attempt to access beyond end of device [ 388.330098] loop0: rw=536870912, want=23505, limit=112 [ 388.336682] attempt to access beyond end of device [ 388.341677] loop0: rw=536870912, want=25553, limit=112 [ 388.348028] attempt to access beyond end of device [ 388.352973] loop0: rw=536870912, want=27601, limit=112 [ 388.359342] attempt to access beyond end of device [ 388.364311] loop0: rw=536870912, want=29649, limit=112 [ 388.370769] attempt to access beyond end of device [ 388.375748] loop0: rw=536870912, want=31697, limit=112 [ 388.382093] attempt to access beyond end of device [ 388.387045] loop0: rw=536870912, want=32993, limit=112 19:10:22 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000002c0)=0x63e) 19:10:22 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x0, 0x42, 0x1, 0x3cf, 0xdf, 0x0, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x0, 0xdc1, 0xfffffffffffffffd, 0x0, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:10:22 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x80, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000040)=""/200) sendfile(r0, r0, &(0x7f0000000140), 0x3f) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000180), &(0x7f00000001c0)=0xc) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)={0x3a, 0x6, 0x0, {0x3, 0x6, 0x11, 0x0, '/selinux/enforce\x00'}}, 0x3a) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000240)={0xaa4, 0x8001, 0x7, 0x5, 0xfffffffffffffffa, 0x3}) write$cgroup_int(r0, &(0x7f0000000280)=0x7, 0x12) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000300)={0x5, 0x70, 0x100000000, 0x9, 0x1, 0x101, 0x0, 0x8, 0x4, 0xf, 0xa2, 0x464, 0x254000000, 0x4, 0x47, 0x5, 0x7, 0x5, 0x200, 0x7fff, 0x1b1e, 0x6, 0x8, 0x3, 0x7ff, 0x600, 0x73, 0x4, 0x80800000000, 0x101, 0x8, 0x1f, 0x4, 0x5, 0x3ff, 0x100000001, 0x2, 0x7, 0x0, 0x3, 0x4, @perf_bp={&(0x7f00000002c0), 0x8}, 0x200, 0x3f, 0x80000001, 0x7, 0x6, 0x9, 0x5}) r1 = accept$inet6(r0, 0x0, &(0x7f0000000380)) writev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)="01eae0415b6aa9262d1b90df10b0ef281ff92c26137b012e1a13443e70131bbcae11126d2a07c825aaa3f9fa0a738034aeaf330c6ff063b57867821fcffa2a315807599dd4b8820aa20d884d3e6691d472d4f2", 0x53}, {&(0x7f0000000440)="6a7e1eb043b3fd8d156f05f4c3b122a8b30ea710b4796ec18f6d8454089e6bd0dbde0e31f3a2d19215e9d6f9664468fdaa7c94e6a180f4a9fac8d33f4953cbbd6de939b2f6867f", 0x47}, {&(0x7f00000004c0)="6e982ccfe381a2d05cdb9750ab1665241bad43231c4fec901d830e3ec632c4f76741f7ec048bbe4e2e626e005f05e8d7e565eda5a4b8ccd40d11df6a14c1150ae54e2623830238", 0x47}], 0x3) writev(r1, &(0x7f00000009c0)=[{&(0x7f0000000580)="af98bc440ed226d8174eb1470e80597cb74b7f3cf6677765ce66bf5e0a537ea7bdf1691ba322c267252ce78c8c89917a893cff92a7f2baf543f17b3bd5a9442ba8b0d1851c2359dce6bac8d41cbb5ac20e494379c5793b57d9d313a4afc93bce6bea854be93c66147f848666d6ac22c7370d06e44b3a6f342df37de67f54772b5cb82b32a6789c3e282f8cea060b65f1ac9fe190933058641409beacb5", 0x9d}, {&(0x7f0000000640)="c595642b34", 0x5}, {&(0x7f0000000680)="076d4c2481597bc96f852883d4b2de770fd581bac6f3d89ffa4bd37d26cd97dc420e95d54a1d7219794730ad51c19b73aebad39d74d28f510d97be309baf76b6df1f062ccfdd74ed29282c57bcaf918f9567ae6ab71e2044a5be2881337d02686ae72bce71a68359fed8f172e3f83b6ebfe08715ad51ed0550df94fae4b2c5ccc13b17f15e2ec64eb1fbbce70f7977792a73e3f2901a34afd57166af5bc7e67462fe6332a1805a37799562c0faaf4d5e6a80ce0a6269ff04615b02592b6f274c44994e1bd3ec8fe4474765623e8736ca7d", 0xd1}, {&(0x7f0000000780)="28abb382668c3377273525dd776183b02f2198f9c493e83e7875da43b9e6c746f054368d00066f652cd48f3fc63dc85577be3613376cd5bfbf95843c096edc26ce2e24660417adecb9574687d0475740ffd977378b9c876143821b9149feeac2a47d5bd2ec883ad69e32a6ca3adf7e95b1aba5c532239fada7079415ba1fdd", 0x7f}, {&(0x7f0000000800)="c0b67ef4e1d322f42afcf8e45b52d498a36a15a7c3b20597195f4de6ea0db887a908f62e6f63fc0c1f261c58beac70a498bb8fb33714d6fb3bdb9eca58808a4553cd2e26549ad3a24dfd1f1c32f747f00470844871ea7c4bfe82ea6a779a948c1c7c1bd6d4292e1f040982743682cf7f5270e9598018a7819622d79eb213000e7add3f", 0x83}, {&(0x7f00000008c0)="0439ce7de2a9f831a2ee67b5373c13e1156f76b9dd18986da4752c6af7413def3c9910fe92fd9d96cc820ec571f2e8c214b9a8a599097b1e169b681c6eff4f06d8c0450b7ec0a21eee61ac3405d188cb4ebaf29da381f705754abee658ccaeb7f9408d7529942e87271a4f8f836637de34dab72ec5d7229ff488535d60f2cbf7b803d8dcb7651d286b014c", 0x8b}, {&(0x7f0000000980)="80ed790957f6a7097308badc0d9b8c7b090ff397302c65b13c8ff580e202a51c227075a0114ecdbb9aca129149e477280d9c4bf64571aab2927ee9", 0x3b}], 0x7) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40)='IPVS\x00') ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000a80)={'vlan0\x00', 0x3}) ioctl$TCFLSH(r0, 0x540b, 0x7) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r2) alarm(0xfbaf) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') r3 = accept4(r0, 0x0, &(0x7f0000000b00), 0x80000) write$FUSE_GETXATTR(r0, &(0x7f0000000b40)={0x18, 0x0, 0x7, {0x6}}, 0x18) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/uinput\x00', 0x4000, 0x0) getsockopt$netlink(r4, 0x10e, 0x2, &(0x7f0000000bc0)=""/82, &(0x7f0000000c40)=0x52) r5 = syz_open_pts(r0, 0x80000) epoll_create1(0x0) ioctl$VT_SETMODE(r4, 0x5602, &(0x7f0000000c80)={0x0, 0x3, 0x100, 0xc87, 0xffffffffffffffc0}) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/autofs\x00', 0x40, 0x0) ioctl$EVIOCGABS3F(r6, 0x8018457f, &(0x7f0000000d00)=""/245) accept4$packet(r3, &(0x7f0000000e00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000e40)=0x14, 0x80000) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000e80)=0x1) keyctl$session_to_parent(0x12) 19:10:22 executing program 2: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x4}) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) lseek(r1, 0x0, 0x3) 19:10:22 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000180)="e7b74d8b882b960942ff0042995393a8c1bc08b463a080ec94f1e4a613f073e7e34556f7bdf1411e1497f51c5bc92fd282047c46884bcb0d8e5788af4a041fc3ab6683ff4b4f4e6143c6d91f20d7c37beef877f60490f2ea195c73b06e0ff33727b18606c30f1ddc9dfc7b05f7ac6af4c681d6cfa7f9135f3d5a680b8753aff24b8d7959936803be7fdad1419a919280d5726ff4f2f07920604216b9fb50038d248019d420bf5bb3c5f5adfd6587b2c9fb4e4c2d163c9b5b4b8b773dc82f03ceb46dfb8f85f910") preadv(r0, &(0x7f0000001e80)=[{&(0x7f0000001dc0)=""/105}], 0x10000000000006c8, 0xfffffffffffffffc) r1 = getpid() process_vm_writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000080)=""/61, 0x3d}, {&(0x7f0000000380)=""/208, 0xd0}, {&(0x7f00000000c0)=""/179, 0xb3}, {&(0x7f0000000480)=""/116, 0x74}, {&(0x7f0000000280)=""/56, 0x38}, {&(0x7f0000000500)=""/37, 0x25}, {&(0x7f0000000540)=""/102, 0x66}], 0x7, &(0x7f0000001c40)=[{&(0x7f0000000640)=""/236, 0xec}, {&(0x7f0000000740)=""/109, 0x6d}, {&(0x7f00000007c0)=""/139, 0x8b}, {&(0x7f0000000880)=""/191, 0xbf}, {&(0x7f0000000940)=""/19, 0x13}, {&(0x7f0000000980)=""/254, 0xfe}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/63, 0x3f}, {&(0x7f0000001ac0)=""/192, 0xc0}, {&(0x7f0000001b80)=""/156, 0x9c}], 0xa, 0x0) sched_yield() write$cgroup_type(r0, &(0x7f0000000040)='threaded\x00', 0x9) 19:10:22 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) 19:10:22 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) ioctl$KDSETMODE(r0, 0x4b3a, 0x6) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) 19:10:22 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x40000000000000, 0x143882) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000080)={'raw\x00', 0x2, [{}, {}]}, 0x48) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="10002bbd7000fddbdf2502000000080004000100000004000500080003002e00000008000400020000000800040003000000080001004e240000"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4008000) tkill(r1, 0x1) close(r0) 19:10:22 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x4, &(0x7f0000000280)="025cc80700145f8f764070") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'nr0\x00', 0x0}) r2 = geteuid() setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@dev={0xac, 0x14, 0x14, 0x15}, @in=@multicast1, 0x4e24, 0x0, 0x4e20, 0x1, 0xa, 0x80, 0xa0, 0x2f, r1, r2}, {0xd689, 0x0, 0x8, 0xfff, 0x6, 0x200, 0x5, 0x4022}, {0x4, 0xc4, 0x8, 0x10000}, 0x1, 0x6e6bb5, 0x1, 0x1, 0x491a72c8fa869ed1, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x7, 0x6c}, 0xa, @in6=@loopback, 0x0, 0x3, 0x3, 0xacde, 0x8, 0x0, 0x80}}, 0xe8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) socket$inet6(0xa, 0x1, 0x2) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="ec31ca3903a9b1a9648482f6ae122775d8f3716dbc8a53483a0df0b5690e7acaab5b5e067669d8e5a24759d9cff59e5c2a80bd13e88de8b5330a349a4edaf251d54cc1217e979f3e84c4a3c2166d42a89ee5110f055247b756f9126b7be04f3c5b033a2e8b95fe7972ec71646d06383a48b9a32659e3a60e739d563a3f2f7daddb6018de"], 0x26) r4 = syz_open_pts(r3, 0x0) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000040)={0x7f}) 19:10:22 executing program 2: r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) 19:10:22 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x14}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) futex(&(0x7f0000004000), 0x400000085, 0x0, &(0x7f0000001ff0), &(0x7f0000004000), 0x4020000002) r1 = socket$inet6(0xa, 0x80008, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_read_part_table(0x2000000004, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="0200eeffffff01000000ff07000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055aa4546492050415254000001005c00000069e97250000000000100000000000000ff070000000000002200000000000000de070000000000004e76b15f0eb90e46a14691316350ecae02000000000000008000000080000000080951e0", 0x9c, 0x1c0}]) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) 19:10:23 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x0, 0x42, 0x1, 0x3cf, 0xdf, 0x0, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x0, 0xdc1, 0xfffffffffffffffd, 0x0, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:10:23 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) 19:10:23 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x0, 0x42, 0x1, 0x3cf, 0xdf, 0x0, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x0, 0xdc1, 0xfffffffffffffffd, 0x0, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) [ 388.781289] attempt to access beyond end of device [ 388.786960] loop0: rw=536870912, want=114, limit=112 [ 388.795207] attempt to access beyond end of device [ 388.800498] loop0: rw=536870912, want=115, limit=112 [ 388.806351] attempt to access beyond end of device [ 388.811431] loop0: rw=536870912, want=116, limit=112 [ 388.817133] attempt to access beyond end of device 19:10:23 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = geteuid() setreuid(r1, r2) 19:10:23 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@local, 0x0}, &(0x7f0000000080)=0x14) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x1000001, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000240)={r1, 0x1, 0x6, @random="e787c80a2746"}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000000c0)={@local, 0x3b, r1}) [ 388.827045] loop0: rw=536870912, want=117, limit=112 [ 388.832431] attempt to access beyond end of device [ 388.838093] loop0: rw=536870912, want=130, limit=112 [ 388.852648] attempt to access beyond end of device [ 388.858021] loop0: rw=536870912, want=131, limit=112 [ 388.863588] attempt to access beyond end of device [ 388.882153] loop0: rw=536870912, want=132, limit=112 [ 388.897631] attempt to access beyond end of device [ 388.927082] loop0: rw=536870912, want=133, limit=112 [ 388.961803] attempt to access beyond end of device [ 388.990412] loop0: rw=536870912, want=2189, limit=112 [ 389.007510] attempt to access beyond end of device [ 389.013753] loop0: rw=536870912, want=4237, limit=112 [ 389.029660] attempt to access beyond end of device [ 389.034743] loop0: rw=536870912, want=6101, limit=112 [ 389.040335] attempt to access beyond end of device [ 389.045692] loop0: rw=536870912, want=6102, limit=112 [ 389.054046] attempt to access beyond end of device [ 389.059009] loop0: rw=536870912, want=6103, limit=112 [ 389.069151] attempt to access beyond end of device [ 389.074228] loop0: rw=536870912, want=6104, limit=112 [ 389.079442] attempt to access beyond end of device [ 389.084802] loop0: rw=536870912, want=6105, limit=112 [ 389.090015] attempt to access beyond end of device [ 389.095001] loop0: rw=536870912, want=6134, limit=112 [ 389.100206] attempt to access beyond end of device [ 389.105175] loop0: rw=536870912, want=6135, limit=112 [ 389.110393] attempt to access beyond end of device [ 389.115541] loop0: rw=536870912, want=6136, limit=112 [ 389.120753] attempt to access beyond end of device [ 389.125779] loop0: rw=536870912, want=6137, limit=112 [ 389.130999] attempt to access beyond end of device [ 389.136037] loop0: rw=536870912, want=6158, limit=112 [ 389.141258] attempt to access beyond end of device [ 389.146281] loop0: rw=536870912, want=6159, limit=112 [ 389.151494] attempt to access beyond end of device [ 389.156647] loop0: rw=536870912, want=6160, limit=112 [ 389.161891] attempt to access beyond end of device [ 389.166858] loop0: rw=536870912, want=6161, limit=112 [ 389.172070] attempt to access beyond end of device [ 389.177050] loop0: rw=536870912, want=6194, limit=112 [ 389.182278] attempt to access beyond end of device [ 389.187268] loop0: rw=536870912, want=6195, limit=112 [ 389.192474] attempt to access beyond end of device [ 389.197440] loop0: rw=536870912, want=6196, limit=112 [ 389.202650] attempt to access beyond end of device [ 389.207613] loop0: rw=536870912, want=6197, limit=112 [ 389.212832] attempt to access beyond end of device [ 389.218206] loop0: rw=536870912, want=6210, limit=112 [ 389.223408] attempt to access beyond end of device [ 389.228384] loop0: rw=536870912, want=6211, limit=112 [ 389.233604] attempt to access beyond end of device [ 389.238580] loop0: rw=536870912, want=6212, limit=112 [ 389.243784] attempt to access beyond end of device [ 389.248746] loop0: rw=536870912, want=6213, limit=112 [ 389.253958] attempt to access beyond end of device [ 389.258915] loop0: rw=536870912, want=6222, limit=112 [ 389.264134] attempt to access beyond end of device [ 389.269259] loop0: rw=536870912, want=6223, limit=112 [ 389.274471] attempt to access beyond end of device [ 389.279442] loop0: rw=536870912, want=6224, limit=112 [ 389.284653] attempt to access beyond end of device [ 389.289624] loop0: rw=536870912, want=6225, limit=112 [ 389.295608] attempt to access beyond end of device [ 389.300560] loop0: rw=536870912, want=8273, limit=112 [ 389.306810] attempt to access beyond end of device [ 389.311756] loop0: rw=536870912, want=10321, limit=112 [ 389.317965] attempt to access beyond end of device [ 389.322913] loop0: rw=536870912, want=12369, limit=112 [ 389.329255] attempt to access beyond end of device [ 389.334204] loop0: rw=536870912, want=14417, limit=112 [ 389.340467] attempt to access beyond end of device [ 389.345824] loop0: rw=536870912, want=16465, limit=112 [ 389.352003] attempt to access beyond end of device [ 389.356992] loop0: rw=536870912, want=18513, limit=112 [ 389.363201] attempt to access beyond end of device [ 389.368173] loop0: rw=536870912, want=20561, limit=112 [ 389.374360] attempt to access beyond end of device [ 389.379491] loop0: rw=536870912, want=22609, limit=112 [ 389.385576] attempt to access beyond end of device [ 389.390534] loop0: rw=536870912, want=24657, limit=112 [ 389.396717] attempt to access beyond end of device [ 389.401674] loop0: rw=536870912, want=26705, limit=112 [ 389.407837] attempt to access beyond end of device [ 389.412803] loop0: rw=536870912, want=28753, limit=112 [ 389.419059] attempt to access beyond end of device [ 389.424006] loop0: rw=536870912, want=30801, limit=112 [ 389.430286] attempt to access beyond end of device [ 389.435232] loop0: rw=536870912, want=32849, limit=112 [ 389.440828] attempt to access beyond end of device [ 389.445761] loop0: rw=536870912, want=32985, limit=112 19:10:24 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000002c0)=0x63e) 19:10:24 executing program 5: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) r2 = getpgrp(0x0) r3 = syz_open_procfs(r2, &(0x7f0000000240)="6ea7806a5d107bb6c41a9d02000000000000007461747300") r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x0, 0x2) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000180)={@multicast2, @broadcast}, &(0x7f00000001c0)=0xc) 19:10:24 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x0, 0x42, 0x1, 0x3cf, 0xdf, 0x0, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x0, 0xdc1, 0xfffffffffffffffd, 0x5, 0x0, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:10:24 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x0, 0x42, 0x1, 0x3cf, 0xdf, 0x0, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x0, 0xdc1, 0xfffffffffffffffd, 0x0, 0x80, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:10:24 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000bfcffc), &(0x7f0000000100)=0xfffffffffffffc74) 19:10:24 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/114, 0x72}], 0x1) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) ioctl$FICLONE(r0, 0x40049409, r0) 19:10:24 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000400000000bd66ba62e9e99486091400000000090000001e8b2a9d9c3f9847690000"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) 19:10:24 executing program 2: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='net/tcp6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) 19:10:24 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x0, 0x42, 0x1, 0x3cf, 0xdf, 0x0, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x0, 0xdc1, 0xfffffffffffffffd, 0x5, 0x0, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:10:24 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/137, 0x89}, {&(0x7f0000000180)=""/84, 0x54}], 0x2, 0x0) 19:10:24 executing program 4: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x660c, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x90000, 0x0) epoll_wait(r0, &(0x7f0000000100)=[{}, {}, {}], 0x3, 0x3f) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) write$FUSE_LK(r1, &(0x7f0000000080)={0x28, 0x0, 0x4, {{0xfffffffffffff286, 0x2, 0x1, r2}}}, 0x28) r3 = socket$inet(0x2, 0x0, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) getpeername$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) getsockname(r1, &(0x7f00000002c0)=@hci={0x1f, 0x0}, &(0x7f0000000340)=0x80) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000540)=0xe8) accept4$packet(r0, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000005c0)=0x14, 0x80800) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@multicast2}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000740)={'ip6tnl0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000840)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000880)={'gretap0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000008c0)={'bond_slave_0\x00', 0x0}) accept4$packet(r0, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000940)=0x14, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000b40)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000b80)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000c80)=0xe8) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000d00)={@dev, @empty, 0x0}, &(0x7f0000000d40)=0xc) recvmmsg(r1, &(0x7f0000003980)=[{{&(0x7f0000000d80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000e00)=""/75, 0x4b}], 0x1, &(0x7f0000000ec0)=""/231, 0xe7, 0x3}, 0xad08}, {{&(0x7f0000000fc0)=@can={0x1d, 0x0}, 0x80, &(0x7f0000003440)=[{&(0x7f0000001040)=""/159, 0x9f}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000003100)=""/87, 0x57}, {&(0x7f0000003180)=""/33, 0x21}, {&(0x7f00000031c0)=""/129, 0x81}, {&(0x7f0000003280)=""/133, 0x85}, {&(0x7f0000003340)=""/4, 0x4}, {&(0x7f0000003380)=""/182, 0xb6}], 0x9, &(0x7f0000003500)=""/82, 0x52, 0xb2b}, 0x7fff}, {{&(0x7f0000003580)=@rc, 0x80, &(0x7f0000003680)=[{&(0x7f0000003600)=""/66, 0x42}], 0x1, &(0x7f00000036c0)=""/187, 0xbb, 0x4}, 0xeaf}, {{&(0x7f0000003780)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000003840)=[{&(0x7f0000003800)=""/54, 0x36}], 0x1, &(0x7f0000003880)=""/246, 0xf6, 0x100}, 0xecf}], 0x4, 0x2000, &(0x7f0000003a80)) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f00000040c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20400001}, 0xc, &(0x7f0000004080)={&(0x7f0000003ac0)={0x5c0, r4, 0x21, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x7c, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x72b50000}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0x84, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffffa}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0x134, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r11}, {0x130, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xffffffff00000001}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x3c3}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r12}}}]}}, {{0x8, 0x1, r13}, {0x17c, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x1ff}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r15}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r17}, {0x50, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r18}, {0x44, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r19}}}]}}]}, 0x5c0}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) 19:10:24 executing program 6: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000788000), 0x4) r0 = accept(0xffffffffffffff9c, 0x0, &(0x7f0000000380)) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @broadcast}, {0x0, @random="59a310eebccc"}, 0x0, {0x2, 0x0, @broadcast}, 'team0\x00'}) socketpair$inet(0x2, 0x0, 0x400, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$unix(r0, &(0x7f0000000580), &(0x7f0000000480)=0x6e) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f00000003c0)='/dev/loop#\x00', 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff) sendfile(r1, r1, &(0x7f0000000000), 0x2000005) sync() ioctl$LOOP_CLR_FD(r1, 0x4c01) 19:10:24 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) fchmodat(r0, &(0x7f0000000040)='./file0\x00', 0xf) get_thread_area(&(0x7f0000000080)={0x5, 0xffffffffffffffff, 0xffffffffffffffff, 0x400, 0x3, 0x3, 0x5, 0x50, 0x5, 0xfc7f}) 19:10:24 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x2, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap='nodevmap'}, {@cache_none='cache=none'}, {@access_user='access=user'}, {@cache_loose='cache=loose'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0x394, 0x19, 0x1, {0x0, {}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x3, 0x0, 0xbc, 0x800000000000000}}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) 19:10:24 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000380)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @dev, 0x0}, &(0x7f0000000080)=0xc) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000300)={0x259, 0x594b, 0x6252}) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000200)={{{@in=@loopback, @in=@multicast2, 0x4e20, 0x6, 0x4e23, 0x9, 0x2, 0x20, 0x20, 0x2b, r1, r2}, {0x1, 0xff, 0x7f, 0x86c, 0x3, 0x0, 0x985, 0x5000000000}, {0x5e0, 0x2, 0x7f, 0xfffffffffffffff8}, 0xbe, 0x6e6bb1, 0x2, 0x1, 0x2}, {{@in6=@mcast2, 0x4d2}, 0xa, @in=@local, 0x34ff, 0x0, 0x3, 0xfffffffffffff86b, 0x1, 0x100000000, 0x5}}, 0xe8) [ 389.850154] attempt to access beyond end of device [ 389.857180] loop0: rw=536870912, want=130, limit=112 [ 389.867949] attempt to access beyond end of device [ 389.875889] loop0: rw=536870912, want=131, limit=112 [ 389.894909] attempt to access beyond end of device 19:10:24 executing program 5: openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) [ 389.911280] loop0: rw=536870912, want=132, limit=112 [ 389.930668] attempt to access beyond end of device [ 389.942775] loop0: rw=536870912, want=133, limit=112 [ 389.963213] attempt to access beyond end of device [ 389.973177] loop0: rw=536870912, want=142, limit=112 [ 389.991986] attempt to access beyond end of device [ 390.008651] loop0: rw=536870912, want=143, limit=112 [ 390.021405] attempt to access beyond end of device [ 390.026727] loop0: rw=536870912, want=144, limit=112 [ 390.032286] attempt to access beyond end of device [ 390.040542] loop0: rw=536870912, want=145, limit=112 [ 390.046911] attempt to access beyond end of device [ 390.051968] loop0: rw=536870912, want=2193, limit=112 [ 390.058705] attempt to access beyond end of device [ 390.063757] loop0: rw=536870912, want=4241, limit=112 [ 390.072220] attempt to access beyond end of device [ 390.077159] loop0: rw=536870912, want=5465, limit=112 [ 390.082823] attempt to access beyond end of device [ 390.087784] loop0: rw=536870912, want=5494, limit=112 [ 390.093106] attempt to access beyond end of device [ 390.098082] loop0: rw=536870912, want=5495, limit=112 [ 390.103327] attempt to access beyond end of device [ 390.108270] loop0: rw=536870912, want=5496, limit=112 [ 390.113590] attempt to access beyond end of device [ 390.118542] loop0: rw=536870912, want=5497, limit=112 [ 390.123795] attempt to access beyond end of device [ 390.128736] loop0: rw=536870912, want=5518, limit=112 [ 390.133984] attempt to access beyond end of device [ 390.138933] loop0: rw=536870912, want=5519, limit=112 [ 390.144161] attempt to access beyond end of device [ 390.149109] loop0: rw=536870912, want=5520, limit=112 [ 390.154334] attempt to access beyond end of device [ 390.159283] loop0: rw=536870912, want=5521, limit=112 [ 390.164573] attempt to access beyond end of device [ 390.169546] loop0: rw=536870912, want=5570, limit=112 [ 390.174887] attempt to access beyond end of device [ 390.179822] loop0: rw=536870912, want=5571, limit=112 [ 390.185067] attempt to access beyond end of device [ 390.190025] loop0: rw=536870912, want=5572, limit=112 [ 390.195267] attempt to access beyond end of device [ 390.200217] loop0: rw=536870912, want=5573, limit=112 [ 390.205506] attempt to access beyond end of device [ 390.210457] loop0: rw=536870912, want=5582, limit=112 [ 390.215706] attempt to access beyond end of device [ 390.220653] loop0: rw=536870912, want=5583, limit=112 [ 390.225912] attempt to access beyond end of device [ 390.230864] loop0: rw=536870912, want=5584, limit=112 [ 390.236097] attempt to access beyond end of device [ 390.241046] loop0: rw=536870912, want=5585, limit=112 [ 390.247010] attempt to access beyond end of device [ 390.251973] loop0: rw=536870912, want=7633, limit=112 [ 390.258280] attempt to access beyond end of device [ 390.263247] loop0: rw=536870912, want=9681, limit=112 [ 390.269638] attempt to access beyond end of device [ 390.274663] loop0: rw=536870912, want=11729, limit=112 [ 390.281081] attempt to access beyond end of device [ 390.286170] loop0: rw=536870912, want=13777, limit=112 [ 390.292616] attempt to access beyond end of device [ 390.297621] loop0: rw=536870912, want=15825, limit=112 [ 390.304254] attempt to access beyond end of device [ 390.309199] loop0: rw=536870912, want=17873, limit=112 [ 390.315778] attempt to access beyond end of device [ 390.320733] loop0: rw=536870912, want=19921, limit=112 [ 390.327144] attempt to access beyond end of device [ 390.332094] loop0: rw=536870912, want=21969, limit=112 [ 390.338566] attempt to access beyond end of device [ 390.343532] loop0: rw=536870912, want=24017, limit=112 [ 390.350093] attempt to access beyond end of device [ 390.355092] loop0: rw=536870912, want=26065, limit=112 [ 390.361435] attempt to access beyond end of device [ 390.366425] loop0: rw=536870912, want=28113, limit=112 [ 390.372741] attempt to access beyond end of device [ 390.377744] loop0: rw=536870912, want=30161, limit=112 [ 390.384302] attempt to access beyond end of device [ 390.389258] loop0: rw=536870912, want=32209, limit=112 [ 390.395274] attempt to access beyond end of device [ 390.400222] loop0: rw=536870912, want=32993, limit=112 19:10:24 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:10:24 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x0, 0x42, 0x1, 0x3cf, 0xdf, 0x0, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x0, 0xdc1, 0xfffffffffffffffd, 0x5, 0x0, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:10:24 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) 19:10:24 executing program 5: r0 = gettid() fcntl$getown(0xffffffffffffffff, 0x9) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c) recvmmsg(0xffffffffffffff9c, &(0x7f0000003200)=[{{&(0x7f00000002c0)=@l2, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/225, 0xe1}, {&(0x7f0000000440)=""/66, 0x42}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/177, 0xb1}, {&(0x7f00000005c0)=""/97, 0x61}, {&(0x7f0000000640)=""/247, 0xf7}, {&(0x7f0000000740)=""/16, 0x10}, {&(0x7f0000000780)=""/212, 0xd4}], 0x8, &(0x7f0000000900)=""/182, 0xb6, 0x80000000}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f00000009c0)=""/65, 0x41}, {&(0x7f0000000a40)=""/141, 0x8d}, {&(0x7f0000000b00)=""/28, 0x1c}, {&(0x7f0000000b40)=""/17, 0x11}, {&(0x7f0000000b80)=""/173, 0xad}, {&(0x7f0000000c40)=""/68, 0x44}], 0x6, &(0x7f0000000d40)=""/196, 0xc4, 0x6}, 0x2}, {{&(0x7f0000000e40)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000002180)=[{&(0x7f0000000ec0)=""/188, 0xbc}, {&(0x7f0000000f80)=""/170, 0xaa}, {&(0x7f0000001040)=""/76, 0x4c}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/7, 0x7}, {&(0x7f0000002100)=""/123, 0x7b}], 0x6, &(0x7f0000002200)=""/4096, 0x1000, 0x7}, 0x8}], 0x3, 0x10020, 0x0) r3 = syz_open_procfs$namespace(r0, &(0x7f00000032c0)='ns/uts\x00') getresuid(&(0x7f0000003300)=0x0, &(0x7f0000003340), &(0x7f0000003380)) getresuid(&(0x7f00000033c0), &(0x7f0000003400), &(0x7f0000003440)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000003480)={{{@in6=@mcast2, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000003580)=0xe8) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000035c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendmsg$nl_route(r1, &(0x7f0000004c00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100400}, 0xc, &(0x7f0000004bc0)={&(0x7f0000003600)=@bridge_setlink={0x15a8, 0x13, 0xc11, 0x70bd29, 0x25dfdbfb, {0x7, 0x0, 0x0, r2, 0x1, 0x210}, [@IFLA_NET_NS_FD={0x8, 0x1c, r3}, @IFLA_EXT_MASK={0x8, 0x1d, 0x9c}, @IFLA_PORT_SELF={0x13c4, 0x19, [@nested={0xb4, 0x44, [@generic="0b7434456a353bb959f06415f0b308c1e01bebcd2b8e5f169bf011a1574e0a9ca27a39cf3b9e97c24d96bbdbc4b1d0d102573151a5622c2ecac3b13a4876bb458e6801a2a30e3374b80a89657ff9fc08c184dd2c268d3c016cbe030342090e6ad3977f8d3cf1bd67e2473a69f4cab0df64211832c9d5fb8494b70d5ad8f601776cd7e59f6a2f186cbacbcf0eb8ee59181ec86765cf0d47", @typed={0x8, 0x92, @uid=r4}, @typed={0x8, 0x67, @u32=0x3}, @typed={0x8, 0x3c, @uid=r5}]}, @nested={0x94, 0x81, [@generic, @generic="81094e4d86ed55548f3c4616fa19fa39ef561b8e8ceea5dd9848b2795bffecd906dd42ba55098d1c07fc4fc7561b2444f726b3de5b5cfbf279060d846a1f3c55fecebf72236c8034152b628f05e6c4c3a647034ce97b1d6586f6e6ba4a69857f31c4136fb5c9addd689cc323671f46bae262f869f96265007edd39c6aa0126faac79ded6663b4ec0d25c277e4c091e"]}, @nested={0xc, 0x2c, [@typed={0x8, 0x92, @u32=0x8}]}, @generic="075d811af35dbce8db0eeee3332c157c21ec8e8dd7f57631d81add4886d2a3e1816dc2be3a019c554eaf1b47278294d0572508940bbdcf7f2c18fcfb5f6c54587532fe78e8c41300492960f7b7c91cd95c6895f89f0a5c810a9755a8f2c3b5f26ec66a7eac1edd6e4994e31845eb97e12a3bdaf228689bb3955f4720710fe307f15f", @nested={0x10c0, 0x3, [@generic="fe1d4c52aa975cf2c5562560cbe6731a9a3007b93f8fa90e8cb39bea72a4f1b7591862cf9429d20f05551aacd43ff5156e7408f257e0c859520c100ed04411a1aa8a4e56b52f44fe19d4ee5c6ed4c55dba137602ae2174443bde46912fe73337c7ca513e74da1e079a37d64a1e2b17ec34603610a2da612fba52183aac864ffc67264946b82e531c4a8e0e8e3d3a1daef6", @typed={0x24, 0x55, @str='md5sumvmnet0vmnet1ppp0cgroup:\x00'}, @generic="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", @typed={0x4, 0x47}]}, @nested={0x10c, 0x75, [@typed={0x8, 0x3a, @pid=r0}, @generic="705adb9ea16d6e7811bbd4a8cb73e31307a90107fece893b6a2737d76a26d08a0e11fece9525661b880416366f813cd2e4ecd156546961944a54bdb3", @generic="ef75e11500073acaf4692f0d907f58d6a4080f85f8ac00d0c40d08c7c3f33d6b383ff100d07ffed0c6c943945088e57e43b52473", @typed={0xc, 0x1b, @u64=0x1000}, @generic="ff432e070ee1b5508a9f281f7447fb88e98bc6a7ead3930adc6e9478425dd64c981166a56f2ab9bafe7808ce560f95baee521c5f766011ce75b6e8169a3fc0424bb1ec2d4713dca64c313d3df65665ecb23e4d1ced54459dc583f691d38e73ef513898f1214aa8fbd227f86c1f277a30e9e63a", @generic="e85db00a60c711f55c6b4410b2f5"]}, @typed={0x8, 0x2e, @uid=r6}, @nested={0x8, 0x27, [@generic="e9f7f8"]}, @generic="a6327ac495bee457dd92f2e14e"]}, @IFLA_MAP={0x24, 0xe, {0x0, 0x4bf, 0x643, 0x9, 0x9, 0x9}}, @IFLA_IFALIAS={0x14, 0x14, 'lo\x00'}, @IFLA_IF_NETNSID={0x8, 0x2e, 0x2da9}, @IFLA_NET_NS_FD={0x8, 0x1c, r7}, @IFLA_PHYS_PORT_ID={0x24, 0x22, "60ccaacc85580255ca5a177a10ae44f640a1c32b172b74e514ce739574c783b9"}, @IFLA_VF_PORTS={0x108, 0x18, [{0x104, 0x1, [@generic="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"]}]}, @IFLA_LINKINFO={0x40, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x34, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast1}, @IFLA_IPTUN_LOCAL={0x14}, @IFLA_IPTUN_PROTO={0x8}]}}}]}, 0x15a8}, 0x1, 0x0, 0x0, 0x80}, 0x10) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)) getpid() gettid() r8 = getpid() r9 = syz_open_procfs(r8, &(0x7f00000001c0)="86657472ab53dbae8c6a220c3a2bdcfa50") preadv(r9, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1000000000000010, 0x0) 19:10:24 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x0, 0x42, 0x1, 0x3cf, 0xdf, 0x0, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x0, 0xdc1, 0xfffffffffffffffd, 0x5, 0x0, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:10:24 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x10000000}, 0xc) 19:10:24 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x200, 0x82) 19:10:24 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000040)}}}], 0x1, 0x0, &(0x7f00000003c0)="90"}) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0xfffffffffffffffc) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000040)={0xc4, 0xfffffffffffffffb, 0x1}) 19:10:24 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x0, 0x42, 0x1, 0x3cf, 0xdf, 0x0, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x0, 0xdc1, 0xfffffffffffffffd, 0x5, 0x0, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 19:10:24 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs, 0x6e) utime(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x3}) futex(&(0x7f0000000280), 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0xfca, 0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffa2, 0x2, 0x8, 0x4, 0x9c34, 0x8f}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) 19:10:24 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000280), 0x2000000000000001) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0x80000001, 0x7f, 0x5edf, 0x0, 0x0, 0x42, 0x1, 0x3cf, 0xdf, 0x0, 0x1, 0x1, 0x3, 0x5, 0x5, 0x1, 0x54468f78, 0x8, 0x0, 0xdc1, 0xfffffffffffffffd, 0x5, 0x80, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0), 0xd}, 0x20008, 0x8f9f, 0x9, 0x6, 0x1b2b9eea, 0x0, 0x1}, r2, 0xb, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xffffffffffef7ff9, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) [ 390.605257] binder: 32718:32721 got reply transaction with no transaction stack [ 390.622674] binder: 32718:32721 transaction failed 29201/-71, size 0-0 line 2921 [ 390.656922] binder: 32718:32730 got reply transaction with no transaction stack [ 390.666045] binder: 32718:32730 transaction failed 29201/-71, size 0-0 line 2921 INIT: Id "6" respawning too fast: disabled for 5 minutes INIT: Id "4" respawning too fast: disabled for 5 minutes INIT: Id "1" respawning too fast: disabled for 5 minutes INIT: Id "5" respawning too fast: disabled for 5 minutes INIT: Id "2" respawning too fast: disabled for 5 minutes INIT: Id "3" respawning too fast: disabled for 5 minutes [ 574.593159] INFO: task syz-executor6:32666 blocked for more than 140 seconds. [ 574.600513] Not tainted 4.9.117-g8b21e85 #19 [ 574.605578] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 574.614187] syz-executor6 D28080 32666 11138 0x00000004 [ 574.619938] ffff8801d398b000 ffff8801d4ec79c0 ffff8801d4ec79c0 ffff8801d3fc8000 [ 574.628068] ffff8801db221c18 ffff8801bfb07c10 ffffffff839ebd0d ffffffff81235687 [ 574.636243] 0000000000000000 ffff8801d398b8c0 0000000600000007 ffff8801db2224e8 [ 574.644370] Call Trace: [ 574.646979] [] ? __schedule+0x64d/0x1bd0 [ 574.652703] [] ? mark_held_locks+0xc7/0x130 [ 574.658805] [] ? rwsem_down_read_failed+0x1df/0x320 [ 574.665525] [] schedule+0x7f/0x1b0 [ 574.670730] [] rwsem_down_read_failed+0x1e4/0x320 [ 574.677271] [] ? rt_mutex_futex_unlock+0x10/0x10 [ 574.683747] [] ? HARDIRQ_verbose+0x10/0x10 [ 574.689631] [] ? HARDIRQ_verbose+0x10/0x10 [ 574.695588] [] ? SyS_tee+0x920/0x920 [ 574.700970] [] call_rwsem_down_read_failed+0x18/0x30 [ 574.707785] [] down_read+0x52/0xb0 [ 574.712982] [] ? iterate_supers+0xe1/0x260 [ 574.718894] [] iterate_supers+0xe1/0x260 [ 574.724660] [] sys_sync+0xa2/0x170 [ 574.729880] [] ? sync_filesystem+0x240/0x240 [ 574.736007] [] ? SyS_sendfile+0x160/0x160 [ 574.741825] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 574.748734] [] ? sync_filesystem+0x240/0x240 [ 574.754857] [] do_syscall_64+0x1a6/0x490 [ 574.760584] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 574.767643] [ 574.767643] Showing all locks held in the system: [ 574.773980] 2 locks held by khungtaskd/519: [ 574.778316] #0: (rcu_read_lock){......}, at: [] watchdog+0x11c/0xa20 [ 574.787049] #1: (tasklist_lock){.+.+..}, at: [] debug_show_all_locks+0x79/0x218 [ 574.796749] 2 locks held by rs:main Q:Reg/3672: [ 574.801392] #0: (&f->f_pos_lock){+.+.+.}, at: [] __fdget_pos+0xac/0xd0 [ 574.810311] #1: (sb_writers#3){.+.+.+}, at: [] vfs_write+0x3ae/0x530 [ 574.819175] 1 lock held by rsyslogd/3674: [ 574.823299] #0: (&f->f_pos_lock){+.+.+.}, at: [] __fdget_pos+0xac/0xd0 [ 574.832208] 2 locks held by getty/3770: [ 574.836182] #0: (&tty->ldisc_sem){++++++}, at: [] ldsem_down_read+0x32/0x40 [ 574.845502] #1: (&ldata->atomic_read_lock){+.+...}, at: [] n_tty_read+0x202/0x16e0 [ 574.855468] 1 lock held by syz-executor6/32666: [ 574.860123] #0: (&type->s_umount_key#37){++++..}, at: [] iterate_supers+0xe1/0x260 [ 574.870194] 1 lock held by syz-executor6/32677: [ 574.874832] #0: (&type->s_umount_key#37){++++..}, at: [] iterate_supers+0xe1/0x260 [ 574.884918] 1 lock held by syz-executor7/32686: [ 574.890002] #0: (&type->s_umount_key#36/1){+.+.+.}, at: [] sget_userns+0x552/0xba0 [ 574.900195] [ 574.901795] ============================================= [ 574.901795] [ 574.908860] NMI backtrace for cpu 0 [ 574.912555] CPU: 0 PID: 519 Comm: khungtaskd Not tainted 4.9.117-g8b21e85 #19 [ 574.919801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 574.929131] ffff8801d8a6fd08 ffffffff81eb4be9 0000000000000000 0000000000000000 [ 574.937148] 0000000000000000 0000000000000001 ffffffff810b9bd0 ffff8801d8a6fd40 [ 574.945170] ffffffff81ebfee7 0000000000000000 0000000000000000 0000000000000003 [ 574.953177] Call Trace: [ 574.955744] [] dump_stack+0xc1/0x128 [ 574.961083] [] ? irq_force_complete_move+0x320/0x320 [ 574.967810] [] nmi_cpu_backtrace.cold.2+0x48/0x87 [ 574.974276] [] ? irq_force_complete_move+0x320/0x320 [ 574.981000] [] nmi_trigger_cpumask_backtrace+0x12a/0x14f [ 574.988072] [] arch_trigger_cpumask_backtrace+0x14/0x20 [ 574.995060] [] watchdog+0x6b4/0xa20 [ 575.000308] [] ? watchdog+0x11c/0xa20 [ 575.005734] [] kthread+0x26d/0x300 [ 575.010899] [] ? reset_hung_task_detector+0x20/0x20 [ 575.017539] [] ? kthread_park+0xa0/0xa0 [ 575.023140] [] ? kthread_park+0xa0/0xa0 [ 575.028735] [] ? kthread_park+0xa0/0xa0 [ 575.034333] [] ret_from_fork+0x5c/0x70 [ 575.040036] Sending NMI from CPU 0 to CPUs 1: [ 575.044550] NMI backtrace for cpu 1 skipped: idling at pc 0xffffffff839fb816 [ 575.052293] Kernel panic - not syncing: hung_task: blocked tasks [ 575.058432] CPU: 0 PID: 519 Comm: khungtaskd Not tainted 4.9.117-g8b21e85 #19 [ 575.065675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 575.075005] ffff8801d8a6fcc8 ffffffff81eb4be9 ffffffff83c8bc20 00000000ffffffff [ 575.082993] 0000000000000000 0000000000000000 dffffc0000000000 ffff8801d8a6fd88 [ 575.090991] ffffffff81421c85 0000000041b58ab3 ffffffff843bc020 ffffffff81421ac6 [ 575.098983] Call Trace: [ 575.101546] [] dump_stack+0xc1/0x128 [ 575.106892] [] panic+0x1bf/0x3bc [ 575.111883] [] ? add_taint.cold.6+0x16/0x16 [ 575.117839] [] ? ___preempt_schedule+0x16/0x18 [ 575.124056] [] ? nmi_trigger_cpumask_backtrace+0x100/0x14f [ 575.131318] [] watchdog+0x6c5/0xa20 [ 575.136569] [] ? watchdog+0x11c/0xa20 [ 575.141993] [] kthread+0x26d/0x300 [ 575.147157] [] ? reset_hung_task_detector+0x20/0x20 [ 575.153795] [] ? kthread_park+0xa0/0xa0 [ 575.159392] [] ? kthread_park+0xa0/0xa0 [ 575.164987] [] ? kthread_park+0xa0/0xa0 [ 575.170583] [] ret_from_fork+0x5c/0x70 [ 575.176504] Dumping ftrace buffer: [ 575.180181] (ftrace buffer empty) [ 575.183874] Kernel Offset: disabled [ 575.187484] Rebooting in 86400 seconds..